{"resultsPerPage":2000,"startIndex":0,"totalResults":83537,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-19T09:50:12.483","vulnerabilities":[{"cve":{"id":"CVE-1999-0783","sourceIdentifier":"cve@mitre.org","published":"1998-06-16T04:00:00.000","lastModified":"2026-06-16T21:49:02.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/i-057.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/6090","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/i-057.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/6090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-1999-1386","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2026-06-16T21:50:19.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","versionEndIncluding":"5.004_04","matchCriteriaId":"356EEFF0-DC56-4E12-B7B1-DB28784FF3B1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88932165406213&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.iss.net/security_center/static/7243.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#perl","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=88932165406213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.iss.net/security_center/static/7243.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#perl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2000-0338","sourceIdentifier":"cve@mitre.org","published":"2000-04-23T04:00:00.000","lastModified":"2026-06-16T21:51:30.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:concurrent_versions_software_project:concurrent_versions_software:-:*:*:*:*:*:*:*","matchCriteriaId":"BB12A3F8-D509-4EC0-86F0-A832C4D1AE57"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1136","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.pl","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/1136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0552","sourceIdentifier":"cve@mitre.org","published":"2000-06-06T04:00:00.000","lastModified":"2026-06-16T21:51:58.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icq:icq:2000a:*:*:*:*:*:*:*","matchCriteriaId":"419A7941-2E5A-42E8-A3CA-E6020B4A9388"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1307","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4607","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0972","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2026-06-16T21:52:53.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0317.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5410","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0317.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-1178","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2026-06-16T21:53:19.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.8:*:*:*:*:*:*:*","matchCriteriaId":"9894A324-ABBD-4FF4-8A51-D73381F40814"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0227.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000356","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=97500174210821&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2000/20001201","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-072.php3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-110.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1959","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5546","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0227.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=97500174210821&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2000/20001201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-072.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1391","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2026-06-16T21:56:10.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.19","matchCriteriaId":"97E2B094-820F-4AA6-B648-257FBA39E2EE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11162","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2001-0682","sourceIdentifier":"cve@mitre.org","published":"2001-08-29T04:00:00.000","lastModified":"2026-06-16T21:54:45.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:zonealarm_pro:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6","matchCriteriaId":"E7A88CF5-AE19-431D-ACAE-0404BEB8B171"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:*:*:*:*:*:*:*:*","matchCriteriaId":"15B8B67A-6F75-4176-A6A5-E2F695F52C5F"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=97818917222992&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5821","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=ntbugtraq&m=97818917222992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-1198","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2026-06-16T21:53:21.727","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:2.53:*:*:*:*:*:*:*","matchCriteriaId":"B223F362-D00F-4D93-8328-33FF1CE331EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1208414-D175-41E2-BCBC-9E5EDBC41FFD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95624629924545&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=95634229925906&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/1132","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=95624629924545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=95634229925906&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1494","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2026-06-16T21:56:22.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*","versionEndExcluding":"2.11n","matchCriteriaId":"A58DA98E-6F4E-4B84-B04A-0F9630FD91E2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:cvlan:*:*:*:*:*:*:*:*","matchCriteriaId":"2FE82341-3E73-4F5B-BD9E-06C83F22E831"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:integrated_management_suit:*:*:*:*:*:*:*:*","matchCriteriaId":"6055A272-7156-4E26-8250-EC067C5B1864"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:interactive_response:*:*:*:*:*:*:*:*","matchCriteriaId":"6EE68944-C31D-4B49-BC8F-07944E0E82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_lx:*:*:*:*:*:*:*:*","matchCriteriaId":"A1169C59-054C-4EFB-B549-C0AB97F2DF42"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:*","matchCriteriaId":"3D8F6982-2F4D-4D78-92C1-97689D59F3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:*:*:*:*:*:*:*:*","matchCriteriaId":"EFB58B84-4CAA-4BE6-943D-2F53F7B8A568"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2001/Dec/0122.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Dec/0123.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/16785","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18502","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-782.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16280","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7718","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://seclists.org/bugtraq/2001/Dec/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Dec/0123.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/16785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-782.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2001-1559","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2026-06-16T21:56:30.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0014.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://monkey.org/openbsd/archive/tech/0112/msg00015.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.iss.net/security_center/static/7690.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://monkey.org/openbsd/archive/tech/0112/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.iss.net/security_center/static/7690.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2002-0788","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2026-06-16T21:58:08.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An interaction between PGP 7.0.3 with the \"wipe deleted files\" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:corporate_desktop:7.1:*:*:*:*:*:*:*","matchCriteriaId":"380D0E94-0977-491C-9E06-2C7D43585E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:freeware:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6E218A3A-1AC5-456F-93B7-FD27E282F739"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_security:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"56051D4A-7A78-423B-9F96-AF73C5451A36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0052.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/ReadMe.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9044.php","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4363","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4702","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/ReadMe.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9044.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0793","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2026-06-16T21:58:08.767","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:blackberry:qnx_neutrino_real-time_operating_system:4.25:*:*:*:*:*:*:*","matchCriteriaId":"C189294E-0AC1-4FAE-885B-4232D2BE6530"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9231.php","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4901","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4902","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4903","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4904","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9232","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9233","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9234","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9231.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0725","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2026-06-16T21:58:01.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file."},{"lang":"es","value":"El sistema de archivos NTFS en Windows NT4.0 y Windows 2000 SP2 permite a atacantes locales ocultar las actividades de uso de ficheros mediante un enlace duro al fichero objetivo, lo que causa la auditoría se haga sobre el enlace y no sobre el fichero objetivo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp2:*:*:*:*:*:*","matchCriteriaId":"FF99A17F-9469-4937-A23B-FD5C8B37087B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a081602-1.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9869.php","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5484","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.atstake.com/research/advisories/2000/a081602-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9869.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1682","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2026-06-16T21:59:46.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daansystems:newsreactor:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1F4AAAC1-751C-4C77-9BF9-93D5E2A7D158"}]}]}],"references":[{"url":"http://www.securiteam.com/windowsntfocus/5SP0P0K60C.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3927","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7968","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securiteam.com/windowsntfocus/5SP0P0K60C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1696","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2026-06-16T21:59:48.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when \"Automatically decrypt/verify when opening messages\" option is checked, \"Always use Secure Viewer when decrypting\" option is not checked, and the user replies to an encrypted message."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_privacy:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F0276A24-52AA-423B-8D52-B9D56685198D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_privacy:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"61DDF378-20C8-4502-BE6A-85F3C579DBE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_privacy:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"477D315D-D040-463A-B1B5-43F3FF5CF1F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=528","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3825","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7900","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1713","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2026-06-16T21:59:49.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-276"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DEB99324-3062-426F-8E2F-44DC3A7ADB2A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277515","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/455323","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5050","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9389","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/277515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/455323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1739","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2026-06-16T21:59:53.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mdaemon:mdaemon:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndIncluding":"5.0.6","matchCriteriaId":"CA13175A-BDF0-4922-B0D2-B212F95587E0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271374","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4686","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9025","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/271374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1914","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2026-06-16T22:00:17.723","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dump_project:dump:0.4:beta10:*:*:*:*:*:*","matchCriteriaId":"D6D40EBC-1700-4989-8D7F-A09F6DC0375F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dump_project:dump:0.4:beta29:*:*:*:*:*:*","matchCriteriaId":"035AE381-95A6-428F-8240-0A94D2B2D9F0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/283033","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/21520","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-156.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9632.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-583.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5264","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/283033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/21520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-156.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9632.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-583.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1915","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2026-06-16T22:00:17.833","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B1F89124-E194-4C7A-B06D-8535B4066AA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/283033","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9633.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5265","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/283033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9633.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1946","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2026-06-16T22:00:21.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the \"Save Password\" option is used, stores the password with a weak encryption scheme (one-to-one mapping) in a registry key, which allows local users to obtain and decrypt the password."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tata:integrated_dialer:1.2.000:*:*:*:*:*:*:*","matchCriteriaId":"E8BB8403-DFE3-435D-8687-2A3891AD0AB8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0438.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10517.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0438.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10517.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2002-1975","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2026-06-16T22:00:24.580","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of \"A0\" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-14T18:32:35.113838Z","id":"CVE-2002-1975","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sharp:zaurus_sl-5000d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D77A45A8-14DE-4AB0-8E2B-01F3D2F24D04"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sharp:zaurus_sl-5000d:-:*:*:*:*:*:*:*","matchCriteriaId":"DDCC07C5-0633-49E0-B168-05CA8A72CE5A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sharp:zaurus_sl-5500_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"76E071CE-EDDA-46F6-97D0-AF49FC1AABC7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sharp:zaurus_sl-5500:-:*:*:*:*:*:*:*","matchCriteriaId":"304BBA12-4A60-4F10-8743-C6E05ECFBF03"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/281437","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9535.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5201","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/281437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9535.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2003-0517","sourceIdentifier":"cve@mitre.org","published":"2003-08-18T04:00:00.000","lastModified":"2026-06-16T22:02:21.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files."},{"lang":"es","value":"faxrunqd.in en mgetty 1.1.28 y anteriores, permite a usuarios locales sobreescribir ficheros mediante un ataque de enlaces simbólicos en ficheros JOB."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mgetty_project:mgetty:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.28","matchCriteriaId":"364A44CE-BF58-4430-AC34-4C3AAD6B64E0"}]}]}],"references":[{"url":"ftp://alpha.greenie.net/pub/mgetty/source/1.1/mgetty1.1.29-Nov25.tar.gz","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://alpha.greenie.net/pub/mgetty/source/1.1/mgetty1.1.29-Nov25.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2003-1564","sourceIdentifier":"cve@mitre.org","published":"2003-12-31T05:00:00.000","lastModified":"2026-06-16T22:04:39.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the \"billion laughs attack.\""}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-776"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.0","matchCriteriaId":"FFC0B453-3262-463A-9748-EC2863D58401"}]}]}],"references":[{"url":"http://mail.gnome.org/archives/xml/2008-August/msg00034.html","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/31868","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.reddit.com/r/programming/comments/65843/time_to_upgrade_libxml2","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0886.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.stylusstudio.com/xmldev/200302/post20020.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://xmlsoft.org/news.html","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://mail.gnome.org/archives/xml/2008-August/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/31868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.reddit.com/r/programming/comments/65843/time_to_upgrade_libxml2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0886.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.stylusstudio.com/xmldev/200302/post20020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2003-0981","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2026-06-16T22:03:17.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting (XSS) attacks."},{"lang":"es","value":"FreeScripts VisitorBook LE (visitor.pl) almacena el nombre DNS inverso de una máquina visitante, lo que permite a atacantes remotos suplantar el origen de sus peticiones entrantes y facilitar ataques de scripting en sitios cruzados (XSS)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-346"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freescripts:visitorbook_le:-:*:*:*:*:*:*:*","matchCriteriaId":"A8641B1D-117C-4913-B66D-48D7768F18FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107107840622493&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107107840622493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1865","sourceIdentifier":"cve@mitre.org","published":"2004-03-26T05:00:00.000","lastModified":"2026-06-16T22:08:33.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name ($blogname).  NOTE: if administrators are normally allowed to add HTML by other means, e.g. through Smarty templates, then this issue would not give any additional privileges, and thus would not be considered a vulnerability."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bblog:bblog:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"036F0D9D-A054-4490-A4D7-40B08CEAD6F4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108034226717745&w=2","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1009564","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/10510","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/13397","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15635","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108034226717745&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1009564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/10510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/13397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1603","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2026-06-16T22:08:01.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFF1B164-A4F9-4291-B25E-1FDFCE0A4E78"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109811572123753&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=109811654104208&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/12865","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11449","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11455","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17779","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17780","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=109811572123753&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=109811654104208&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/12865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0342","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2026-06-16T22:05:25.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one error."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wftpd_pro_server_project:wftpd_pro_server:3.21:r1:*:*:*:*:*:*","matchCriteriaId":"CD90BF85-41E3-4C2D-969A-DDA5DB4D7506"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107801142924976&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11001","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/4116","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9767","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15342","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=107801142924976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/4116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1464","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2026-06-16T22:07:45.380","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port."},{"lang":"es","value":"Cisco IOS 12.2(15) y versiones anteriores permiten a atacantes remotos provocar una denegación de servicio (conexiones VTY (terminal virtual) rechazadas) a través de una conexión TCP manipulada al puerto Telnet o Telnet inverso."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T14:29:07.632839Z","id":"CVE-2004-1464","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-05-19","cisaActionDue":"2023-06-09","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Cisco IOS Denial-of-Service Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"12.2\\(15\\)zj3","matchCriteriaId":"38FF1890-4ED2-4190-8D9F-0DF93AD1C894"}]}]}],"references":[{"url":"http://secunia.com/advisories/12395/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011079","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/384230","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11060","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17131","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/12395/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/384230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-1464","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2004-1901","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2026-06-16T22:08:37.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-31T15:42:15.161093Z","id":"CVE-2004-1901","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.50","matchCriteriaId":"8915F692-FF29-46C5-BD10-F49593441C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:portage:2.0.50:-:*:*:*:*:*:*","matchCriteriaId":"7B38676D-1897-414F-8443-A42988ADCCE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:-:*:*:*:*:*:*","matchCriteriaId":"B6CF9F0A-62A5-4152-BF8E-86C8333AAEDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"}]}]}],"references":[{"url":"http://secunia.com/advisories/11305","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-01.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10060","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15754","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/11305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1995","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2026-06-16T22:08:47.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fusetalk:fusetalk:2.0:-:*:*:*:*:*:*","matchCriteriaId":"57C45CEA-17E7-479D-B9D9-596FB8E9B932"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108377423825478&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11555","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010080","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/5895","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10276","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16080","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108377423825478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/5895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2331","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2026-06-16T22:09:27.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using the CreateObject function or cfobject tag."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-470"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:j2ee_application_server:*:*:*:*:*","matchCriteriaId":"5E448558-A9F6-4506-AA6D-688C73CEC61E"}]}]}],"references":[{"url":"http://secunia.com/advisories/10743/","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9521","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14984","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/10743/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2005-0406","sourceIdentifier":"cve@mitre.org","published":"2005-02-14T05:00:00.000","lastModified":"2026-06-16T22:11:03.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-212"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:image_processing_project:image_processing:-:*:*:*:*:*:*:*","matchCriteriaId":"88EE3811-AD0E-4D63-8610-F7A075CE25BD"}]}]}],"references":[{"url":"http://seclists.org/lists/fulldisclosure/2005/Feb/0343.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2005-008.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://seclists.org/lists/fulldisclosure/2005/Feb/0343.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2005-008.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2005-0109","sourceIdentifier":"cve@mitre.org","published":"2005-03-05T05:00:00.000","lastModified":"2026-06-16T22:10:31.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.1,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7891202C-62AF-4590-9E5F-3514FDA2B38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*","matchCriteriaId":"A0A3F7B6-2878-40C0-B59C-EBA8D171D2F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*","matchCriteriaId":"0EB09993-B837-4352-B09D-3656F62638A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*","matchCriteriaId":"0361EA35-FBD7-4E8F-8625-C8100ED7BB7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*","matchCriteriaId":"29EAA113-2404-4ABB-826B-3AA2AA858D02"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*","matchCriteriaId":"A442DE97-4485-4D95-B95D-58947585E455"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*","matchCriteriaId":"1E8A6564-129A-4555-A5ED-6F65C56AE7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*","matchCriteriaId":"237174A4-E030-4A0B-AD0B-5C463603EAA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*","matchCriteriaId":"5D7F8F11-1869-40E2-8478-28B4E946D3CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*","matchCriteriaId":"9062BAB5-D437-49BE-A384-39F62434B70B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*","matchCriteriaId":"3BA1504C-14FE-4C21-A801-944041F2946F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*","matchCriteriaId":"21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*","matchCriteriaId":"6E53C673-9D6D-42C8-A502-033E1FC28D97"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*","matchCriteriaId":"6F4AC452-6042-409D-8673-ACAD108EE3B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*","matchCriteriaId":"2FE1009B-371A-48E2-A456-935A1F0B7D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*","matchCriteriaId":"C844A170-B5A7-4703-AF3B-67366D44EA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*","matchCriteriaId":"9BCD9C12-EDAB-473F-9CC5-04F06B413720"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*","matchCriteriaId":"58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*","matchCriteriaId":"58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*","matchCriteriaId":"CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*","matchCriteriaId":"9A405AE2-ECC4-4BB0-80DD-4736394FB217"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*","matchCriteriaId":"E5612FB0-8403-4A7E-B89A-D7BDFAC00078"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*","matchCriteriaId":"FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*","matchCriteriaId":"AFDA151E-E614-4A24-A34D-B6D5309110CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*","matchCriteriaId":"A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*","matchCriteriaId":"09BFA20B-2F31-4246-8F74-63DF1DB884EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*","matchCriteriaId":"5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*","matchCriteriaId":"4AE93D3D-34B4-47B7-A784-61F4479FF5A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*","matchCriteriaId":"E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*","matchCriteriaId":"9FFD9D1C-A459-47AD-BC62-15631417A32F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*","matchCriteriaId":"4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*","matchCriteriaId":"6E21E50A-A368-4487-A791-87366CC5C86E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*","matchCriteriaId":"43E84296-9B5C-4623-A2C4-431D76FC2765"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*","matchCriteriaId":"E18328E2-3CB5-4D36-8EA3-77DD909B46A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*","matchCriteriaId":"EF73D76B-FBB8-4D10-8393-9FAF53392A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*","matchCriteriaId":"F177AE1C-58C2-4575-807C-ABFFC5119FA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*","matchCriteriaId":"51A612F6-E4EB-4E34-8F55-79E16C74758E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*","matchCriteriaId":"5C19B266-8FE7-49ED-8678-2D522257491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*","matchCriteriaId":"15C4D826-A419-45F5-B91C-1445DB480916"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*","matchCriteriaId":"FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*","matchCriteriaId":"8E4BC012-ADE4-468F-9A25-261CD8055694"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D8A80E6A-6502-4A33-83BA-7DCC606D79AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*","matchCriteriaId":"0D6428EB-5E1A-41CB-979C-4C9402251D8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*","matchCriteriaId":"2DCA9879-C9F5-475A-8EC9-04D151001C8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*","matchCriteriaId":"0A94132F-4C47-49CC-B03C-8756613E9A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*","matchCriteriaId":"46A60ED5-1D92-4B40-956F-D1801CAB9039"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*","matchCriteriaId":"3F629879-66F0-427B-86D8-D740E0E3F6E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"F9440B25-D206-4914-9557-B5F030890DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E9933557-3BCA-4D92-AD4F-27758A0D3347"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"10A60552-15A5-4E95-B3CE-99A4B26260C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC80CF67-C51D-442C-9526-CFEDE84A6304"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.3_up:*:*:*:*:*:*:*","matchCriteriaId":"D953B3BB-F054-4FE9-839E-2D8EC5C7973A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"059218D3-A3AD-4A10-9AA4-FBB689321D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*","matchCriteriaId":"3F305CBD-4329-44DE-A85C-DE9FF371425E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*","matchCriteriaId":"6E94583A-5184-462E-9FC4-57B35DA06DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*","matchCriteriaId":"E905FAAD-37B6-4DD0-A752-2974F8336273"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*","matchCriteriaId":"3BD12488-1ED8-4751-ABF5-3578D54750A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*","matchCriteriaId":"AE3733CF-4C88-443C-9B90-6477C9C500D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*","matchCriteriaId":"9C500A75-D75E-45B4-B582-0F0DF27C3C04"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.24/SCOSA-2005.24.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=freebsd-hackers&m=110994026421858&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=freebsd-security&m=110994370429609&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=openbsd-misc&m=110995101417256&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/15348","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/18165","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://securitytracker.com/id?1013967","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101739-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.daemonology.net/hyperthreading-considered-harmful/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.daemonology.net/papers/htt.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/911878","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-476.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-800.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/12724","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/0540","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2005/3002","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9747","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.24/SCOSA-2005.24.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=freebsd-hackers&m=110994026421858&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=freebsd-security&m=110994370429609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=openbsd-misc&m=110995101417256&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/15348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/18165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://securitytracker.com/id?1013967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.daemonology.net/hyperthreading-considered-harmful/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.daemonology.net/papers/htt.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/911878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-476.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-800.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/12724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/0540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2005/3002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2005-0587","sourceIdentifier":"secalert@redhat.com","published":"2005-03-25T05:00:00.000","lastModified":"2026-06-16T22:11:24.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.1","matchCriteriaId":"F23F3867-1318-4ACF-A3A6-F0605BDA8BA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.6","matchCriteriaId":"E6F232DA-F897-4429-922E-F5CFF865A8AA"}]}]}],"references":[{"url":"http://secunia.com/advisories/19823","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/12659","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100037","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/19823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/12659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2005-0824","sourceIdentifier":"cve@mitre.org","published":"2005-05-02T04:00:00.000","lastModified":"2026-06-16T22:11:50.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mathopd:mathopd:*:*:*:*:*:*:*:*","versionEndExcluding":"1.5","matchCriteriaId":"C6D3CA28-8693-4B4F-9E26-FB935E3A5ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mathopd:mathopd:1.6:-:*:*:*:*:*:*","matchCriteriaId":"083AD22B-7EB4-4339-8978-6B5A4867AFF9"}]}]}],"references":[{"url":"http://secunia.com/advisories/14524","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mail-archive.com/mathopd%40mathopd.org/msg00272.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/14524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mail-archive.com/mathopd%40mathopd.org/msg00272.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2005-1111","sourceIdentifier":"cve@mitre.org","published":"2005-05-02T04:00:00.000","lastModified":"2026-06-16T22:12:27.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","baseScore":3.7,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"},{"lang":"en","value":"CWE-367"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cpio:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"3CAD60D3-330A-427B-B2DC-59CF390DAF9D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*","matchCriteriaId":"778A6957-455B-420A-BAAF-E7F88FF4FB1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*","matchCriteriaId":"42E47538-08EE-4DC1-AC17-883C44CF77BB"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.2/SCOSA-2006.2.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.32/SCOSA-2005.32.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=111342664116120&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/16998","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17123","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17532","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18290","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18395","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20117","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-846","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/15725","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-378.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-806.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/13159","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-189-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A358","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9783","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.2/SCOSA-2006.2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.32/SCOSA-2005.32.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=111342664116120&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/16998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/15725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-378.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-806.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/13159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-189-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2005-1674","sourceIdentifier":"cve@mitre.org","published":"2005-05-19T04:00:00.000","lastModified":"2026-06-16T22:13:28.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-16T18:10:54.662454Z","id":"CVE-2005-1674","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:helpcenterlive:help_center_live:-:*:*:*:*:*:*:*","matchCriteriaId":"DFC1DC88-215E-4C8E-AA46-20C46E048EB0"}]}]}],"references":[{"url":"http://www.gulftech.org/?node=research&article_id=00076-05172005","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00076-05172005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2005-1880","sourceIdentifier":"cve@mitre.org","published":"2005-06-06T04:00:00.000","lastModified":"2026-06-16T22:13:51.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:everybuddy:everybuddy:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.3","matchCriteriaId":"5888A53D-35C5-473F-AD6B-0F6CF238835B"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=94473","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.html","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1014110","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13865","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.zataz.net/adviso/everybuddy-06062005.txt","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=94473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1014110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.zataz.net/adviso/everybuddy-06062005.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2005-1879","sourceIdentifier":"cve@mitre.org","published":"2005-06-09T04:00:00.000","lastModified":"2026-06-16T22:13:50.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lutel:lutelwall:*:*:*:*:*:*:*:*","versionEndExcluding":"0.98","matchCriteriaId":"D8812038-592D-4D5D-96C1-A75A451DC4AF"}]}]}],"references":[{"url":"http://firewall.lutel.pl/download/0.98/ChangeLog","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034424.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/15647","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/15665","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200506-10.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1014112","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/13863","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.zataz.net/adviso/lutelwall-05222005.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://firewall.lutel.pl/download/0.98/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034424.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/15647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/15665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200506-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1014112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/13863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.zataz.net/adviso/lutelwall-05222005.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2005-1947","sourceIdentifier":"cve@mitre.org","published":"2005-06-09T04:00:00.000","lastModified":"2026-06-16T22:13:57.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) delimg actions."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invisioncommunity:gallery:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.1","matchCriteriaId":"C0B937E7-778B-4D41-A5CC-B9F25961E600"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=111834146710329&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.gulftech.org/?node=research&article_id=00079-06092005","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=111834146710329&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.gulftech.org/?node=research&article_id=00079-06092005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2005-2059","sourceIdentifier":"cve@mitre.org","published":"2005-06-29T04:00:00.000","lastModified":"2026-06-16T22:14:09.720","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to modify settings as another user via a link or IMG tag."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.1.1","matchCriteriaId":"B3A4DDC9-01E4-462A-A95F-774B4E31B37C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=111963737202040&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.gulftech.org/?node=research&article_id=00084-06232005","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=111963737202040&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.gulftech.org/?node=research&article_id=00084-06232005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]}]}},{"cve":{"id":"CVE-2005-1916","sourceIdentifier":"secalert@redhat.com","published":"2005-07-06T04:00:00.000","lastModified":"2026-06-16T22:13:54.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ekg_project:ekg:*:*:*:*:*:*:*:*","versionEndIncluding":"2005-06-05","matchCriteriaId":"FD8092DC-E037-46C4-AA65-3DA1EA81EC57"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=112060146011122&w=2","source":"secalert@redhat.com","tags":["Mailing List","Technical Description"]},{"url":"http://marc.info/?l=bugtraq&m=112198499417250&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2005/dsa-760","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.zataz.net/adviso/ekg-06062005.txt","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=112060146011122&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Technical Description"]},{"url":"http://marc.info/?l=bugtraq&m=112198499417250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2005/dsa-760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zataz.net/adviso/ekg-06062005.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2005-2209","sourceIdentifier":"cve@mitre.org","published":"2005-07-11T04:00:00.000","lastModified":"2026-06-16T22:14:28.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixss_cfg.ini, which is readable by local users."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:capturix:scanshare:1.06:build_50:*:*:*:*:*:*","matchCriteriaId":"6FEA346E-C1F4-4CCC-AB84-FB2CEF73AECB"}]}]}],"references":[{"url":"http://secunia.com/advisories/15995","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1014409","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://secunia.com/advisories/15995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1014409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2005-2293","sourceIdentifier":"cve@mitre.org","published":"2005-07-18T04:00:00.000","lastModified":"2026-06-16T22:14:37.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information."},{"lang":"es","value":"Oracle Formsbuilder 9.0.4  almacena nombres de usuarios y claves de bases de datos en un fichero temporal (que no se borra después de haber sido usado). Esto permite que usuarios locales obtengan información confidencial."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:forms_builder:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"75321301-D674-4085-8665-8575ED3146E1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=112129452232307&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://secunia.com/advisories/15991/","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21343","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=112129452232307&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://secunia.com/advisories/15991/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2005-2456","sourceIdentifier":"cve@mitre.org","published":"2005-08-04T04:00:00.000","lastModified":"2026-06-16T22:14:55.213","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array."},{"lang":"es","value":"Desbordamiento en el índice del array en la función xfrm_sk_policy_insert en xfrm_user.c en el kernel de Linux 2.6 permite que usuarios locales provoquen una denegación de servicio y posiblemente ejeucten código arbitrario mediante una valor de p->dir que sea  mayor que XFRM_POLICY_OUT (usado como índice en el array sock->sk_policy)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"}]}]}],"references":[{"url":"http://secunia.com/advisories/16298","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/16500","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17002","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17073","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17826","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18056","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18059","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-921","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2005/dsa-922","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba%3Bhp=ecade4893a139cc35d4fe345ce70242ede5358c4%3Bhb=a4f1bac62564049ea4718c4624b0fadc9f597c84%3Bf=net/xfrm/xfrm_user.c","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a4f1bac62564049ea4718c4624b0fadc9f597c84","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:219","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:220","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_50_kernel.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-514.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-663.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/14477","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2005/1878","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21710","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10858","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/169-1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/16298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/16500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2005/dsa-922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba%3Bhp=ecade4893a139cc35d4fe345ce70242ede5358c4%3Bhb=a4f1bac62564049ea4718c4624b0fadc9f597c84%3Bf=net/xfrm/xfrm_user.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a4f1bac62564049ea4718c4624b0fadc9f597c84","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_50_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-514.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-663.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/14477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2005/1878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/169-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2005-3106","sourceIdentifier":"cve@mitre.org","published":"2005-09-30T10:05:00.000","lastModified":"2026-06-16T22:16:15.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:P","baseScore":1.2,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-16T16:17:54.787409Z","id":"CVE-2005-3106","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*","matchCriteriaId":"778A6957-455B-420A-BAAF-E7F88FF4FB1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*","matchCriteriaId":"42E47538-08EE-4DC1-AC17-883C44CF77BB"}]}]}],"references":[{"url":"http://linux.bkbits.net:8080/linux-2.6/diffs/fs/exec.c%401.156?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.c","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17141","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18056","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18510","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-922","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:072","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0101.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/15049","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-199-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9108","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://linux.bkbits.net:8080/linux-2.6/diffs/fs/exec.c%401.156?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/15049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-199-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2005-3274","sourceIdentifier":"cve@mitre.org","published":"2005-10-21T01:02:00.000","lastModified":"2026-06-16T22:16:37.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:P","baseScore":1.2,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-02T18:26:04.388396Z","id":"CVE-2005-3274","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndIncluding":"2.4.31","matchCriteriaId":"C9E64153-4A9A-448A-9654-5C79B4C86646"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.6.13","matchCriteriaId":"43EDD335-A1D2-46B5-AED5-066CB1127212"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"}]}]}],"references":[{"url":"http://lkml.org/lkml/2005/6/23/249","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://lkml.org/lkml/2005/6/24/173","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/17826","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18056","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18684","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18977","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-922","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=e684f066dff5628bb61ad1912de6e8058b5b4c7d","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:218","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:219","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:220","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:235","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-663.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0190.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/427981/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/15528","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044","source":"cve@mitre.org","tags":["Product"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11723","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/219-1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lkml.org/lkml/2005/6/23/249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://lkml.org/lkml/2005/6/24/173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/17826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=e684f066dff5628bb61ad1912de6e8058b5b4c7d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-663.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/427981/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/15528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/219-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2005-3847","sourceIdentifier":"cve@mitre.org","published":"2005-11-27T00:03:00.000","lastModified":"2026-06-16T22:17:44.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service (deadlock) by sending a SIGKILL to a real-time threaded process while it is performing a core dump."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:C","baseScore":4.0,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.11","versionEndExcluding":"2.6.13","matchCriteriaId":"C2484AB1-C807-4CAD-8785-2678C45784A1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"}]}]}],"references":[{"url":"http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=linux-kernel&m=112430346613450&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=linux-kernel&m=112508422716574&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/19038","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19374","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1017","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/nptl-signal-delivery-deadlock-fix.patch","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=dd12f48d4e8774415b528d3991ae47c28f26e1ac%3Bhp=ade6648b3b11a5d81f6f28135193ab6d85d621db","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/16856","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=linux-kernel&m=112430346613450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=linux-kernel&m=112508422716574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/19038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/nptl-signal-delivery-deadlock-fix.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=dd12f48d4e8774415b528d3991ae47c28f26e1ac%3Bhp=ade6648b3b11a5d81f6f28135193ab6d85d621db","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/16856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2005-4206","sourceIdentifier":"cve@mitre.org","published":"2005-12-13T11:03:00.000","lastModified":"2026-06-16T22:18:21.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to appear to be part of a valid page."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-16T19:48:32.555946Z","id":"CVE-2005-4206","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:academic_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0.0","matchCriteriaId":"1E586786-3A7D-4F69-A800-A0D6B280E63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:academic_suite:6.2.3.23:*:*:*:*:*:*:*","matchCriteriaId":"51932C51-CCCC-419F-9655-C71B01D24336"},{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:academic_suite:6.3.1.424:*:*:*:*:*:*:*","matchCriteriaId":"535D86A9-D28E-4356-AE5C-1018C1645942"}]}]}],"references":[{"url":"http://secunia.com/advisories/17991","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.ipomonis.com/advisories/Bb_6.zip","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/21618","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/15814","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23558","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/17991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.ipomonis.com/advisories/Bb_6.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/21618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/15814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2006-1058","sourceIdentifier":"secalert@redhat.com","published":"2006-04-04T10:04:00.000","lastModified":"2026-06-16T22:21:56.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables."},{"lang":"es","value":"BusyBox 1.1.1 no utiliza una \"sal\" cuando genera contraseñas, lo que facilita a usuarios locales adivinar contraseñas a partir de un fichero de contraseñas robado usando técnicas como tablas \"rainbow\".\r\n"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:busybox:busybox:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5408DA3E-9CA1-4768-992C-1732A45C4365"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_application_enablement_services:4.01:*:*:*:*:*:*:*","matchCriteriaId":"BA477675-E93D-41F6-A10C-4B6CFBA97C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_application_enablement_services:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0DBE1432-359B-4250-8381-E24511D24B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_sip_enablement_services:*:*:*:*:*:*:*:*","versionEndExcluding":"5.0","matchCriteriaId":"7CCDF311-E2C3-4AAC-83D1-44938370FBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:*","matchCriteriaId":"3D8F6982-2F4D-4D78-92C1-97689D59F3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"4.0","matchCriteriaId":"9AEA45A8-8768-4CB4-8996-91D7F7AEC9F5"}]}]}],"references":[{"url":"http://bugs.busybox.net/view.php?id=604","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/19477","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/25098","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/25848","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0244.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/17330","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25569","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9483","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://bugs.busybox.net/view.php?id=604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/19477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/25098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/25848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0244.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/17330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187385\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThis issue does not affect Red Hat Enterprise Linux 2.1 or 3.","lastModified":"2006-09-19T00:00:00"}]}},{"cve":{"id":"CVE-2006-2374","sourceIdentifier":"secure@microsoft.com","published":"2006-06-13T19:06:00.000","lastModified":"2026-06-16T22:24:52.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the \"SMB Invalid Handle Vulnerability.\""}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:*:*","matchCriteriaId":"EAA86830-BEA8-4943-83EA-C267FA534223"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:itanium:*","matchCriteriaId":"E3E1FBA6-FB99-4592-B903-77AE29B656F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:x64:*","matchCriteriaId":"C553A447-16F7-4FDF-A957-6A9CE936D765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:*:*","matchCriteriaId":"2A0607E7-B416-4AF8-ADF6-6E503627DD29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:itanium:*","matchCriteriaId":"4696823D-CB98-4DCC-B1F6-31FEAB3D25C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:professional:*:x64:*","matchCriteriaId":"18420EC8-633E-4AED-B33F-5A3C673C396D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*","matchCriteriaId":"2572F7E5-75A3-4C11-866B-A4E9ADBD8D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://secunia.com/advisories/20635","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1016288","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.idefense.com/intelligence/vulnerabilities/display.php?id=409","source":"secure@microsoft.com","tags":["Not Applicable"]},{"url":"http://www.osvdb.org/26439","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/18357","source":"secure@microsoft.com","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2006/2327","source":"secure@microsoft.com","tags":["Broken Link","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26830","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1827","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1841","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1850","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1979","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2030","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2060","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/20635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1016288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.idefense.com/intelligence/vulnerabilities/display.php?id=409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.osvdb.org/26439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/18357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2006/2327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2006-4342","sourceIdentifier":"secalert@redhat.com","published":"2006-10-17T17:07:00.000","lastModified":"2026-06-16T22:28:54.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function on an shm at the same time that shmctl is removing that shm (IPC_RMID), which prevents a spinlock from being unlocked."},{"lang":"es","value":"En núcleo en Red Hat Enterprise Linux 3, al ejecutarse en sistemas SMP, permite a usuarios locales provocar una denegación de servicio (punto muerto) ejecutando la función shmat en un shm al mismo tiempo que shmctl está borrando ese shm (IPC_RMID), lo cual previene a un hilo bloqueado en un bucle (spinlock)  de ser desbloqueado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:C","baseScore":4.0,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"}]}]}],"references":[{"url":"http://secunia.com/advisories/22497","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/23064","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/245984","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0710.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=205618","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9649","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/22497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/23064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/245984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0710.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=205618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2006-5847","sourceIdentifier":"cve@mitre.org","published":"2006-11-10T02:07:00.000","lastModified":"2026-06-16T22:31:59.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de FreeWebshop 2.2.2 y versiones anteriores, permite a atacantes remotos inyectar scripts web o HTML de su elección a través del parámetro cat."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freewebshop:freewebshop:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2","matchCriteriaId":"9616A2E3-6A6E-497B-9BC4-F749B351394D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=116303405916694&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/22786","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1017200","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.freewebshop.org/?id=27","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.freewebshop.org/?id=28","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/20969","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4420","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30126","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=116303405916694&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/22786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1017200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.freewebshop.org/?id=27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.freewebshop.org/?id=28","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/20969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-6811","sourceIdentifier":"cve@mitre.org","published":"2006-12-29T11:28:00.000","lastModified":"2026-06-16T22:33:51.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an assertion failure and results in a NULL pointer dereference.  NOTE: this issue was originally reported as a buffer overflow."},{"lang":"es","value":"KsIRC 1.3.12 permite a atacantes remotos provocar una denegación de servicio (caída) mediante una cadena PRIVMSG larga cuando se conecta a un servidor retransmisor de Chat de Internet(IRC), lo que provoca que falle una aserción y se produzca una referencia a puntero NULL.\r\nNOTA: esta vulnerabilidad se documentó originalmente como un desbordamiento de búfer   ."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-617"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:ksirc:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"D4FEB16D-896E-424A-8A3A-644095BEC13A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*","matchCriteriaId":"0FA3A32E-445A-4D39-A8D5-75F5370AD23D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"23E304C9-F780-4358-A58D-1E4C93977704"}]}]}],"references":[{"url":"http://osvdb.org/33443","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200701-26.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1017453","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.addict3d.org/index.php?page=viewarticle&trace=0&type=security&ID=8468","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kde.org/info/security/advisory-20070109-1.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:009","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/456379/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/21790","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-409-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/5199","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31134","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-922","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/3023","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/33443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200701-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1017453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.addict3d.org/index.php?page=viewarticle&trace=0&type=security&ID=8468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kde.org/info/security/advisory-20070109-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/456379/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/21790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-409-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/5199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/3023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider a crash of a client application such as KsIRC to be a security issue.","lastModified":"2007-01-18T00:00:00"}]}},{"cve":{"id":"CVE-2007-2479","sourceIdentifier":"cve@mitre.org","published":"2007-05-03T00:19:00.000","lastModified":"2026-06-16T22:39:41.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be sent to the attacker."},{"lang":"es","value":"Cerulean Studios Trillian Pro anterior a 3.1.5.1 permite a atacantes remotos obtener informacion potencialmente sensible a través de mensajes CTCP PING largo que contienen caracteres UTF-8, lo cual genera una respuesta malformada que no está truncado por una nueva linea, lo cual puede provovcar que porciones de una mensaje de servidor sean enviados a el atacante."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:basic:*:*:*","matchCriteriaId":"173EFB5F-7495-48FD-8FE8-DCC11111A5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:pro:*:*:*","matchCriteriaId":"F734536E-BB33-4FF3-A510-C9370DE9DDF4"}]}]}],"references":[{"url":"http://blog.ceruleanstudios.com/?p=131","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=522","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/35722","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/25086","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/23730","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1017982","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1596","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33983","source":"cve@mitre.org"},{"url":"http://blog.ceruleanstudios.com/?p=131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/35722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/25086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/23730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1017982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-2723","sourceIdentifier":"cve@mitre.org","published":"2007-05-16T22:30:00.000","lastModified":"2026-06-16T22:40:11.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service (web browser crash) via an \"empty\" .MPA file, which triggers a divide-by-zero error."},{"lang":"es","value":"Media Player Classic 6.4.9.0 permite a atacantes con la intervención del usuario provocar denegación de servicio (caida del navegador web) a través de un fichero .MPA \"vacio\", lo cual dispara un error de división por cero.\r\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-369"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mpc-hc:media_player_classic:6.4.9.0:*:*:*:*:*:*:*","matchCriteriaId":"0FFD3824-C5CC-4891-B8A0-206014A5A1C0"}]}]}],"references":[{"url":"http://osvdb.org/37376","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/468626/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/468758/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/23991","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34299","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/37376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/468626/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/468758/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/23991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2007-2237","sourceIdentifier":"cret@cert.org","published":"2007-06-06T20:30:00.000","lastModified":"2026-06-16T22:39:11.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error."},{"lang":"es","value":"Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) permite a atacantes remotos dependientes de contexto provocar una denegación de servicio (caída) mediante un fichero ICO con una información de cabecera (InfoHeader) con una altura de cero, lo cual provoca un error de división por cero."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-369"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://osvdb.org/38494","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.csis.dk/dk/forside/GdiPlus.pdf","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/290961","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/470746/100/0/threaded","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/24346","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1018202","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/2083","source":"cret@cert.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34743","source":"cret@cert.org","tags":["VDB Entry","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/4044","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/38494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.csis.dk/dk/forside/GdiPlus.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/290961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/470746/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/24346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1018202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/2083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/4044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2007-4786","sourceIdentifier":"cve@mitre.org","published":"2007-09-10T21:17:00.000","lastModified":"2026-06-16T22:44:47.710","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the \"test aaa\" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information."},{"lang":"es","value":"Cisco Adaptive Security Appliance (ASA) funcionando en PIX 7.0 anterior a 7.0.7.1, 7.1 anterior a 7.1.2.61, 7.2 anterior a 7.2.2.34, y 8.0 before 8.0.2.11, when AAA is enabled, escribe mensajes %ASA-5-111008 desde el comando \"test aaa\" con contraseñas en texto plano y envía las mismas a través de la red a un servidor de registros del sistema remoto o los coloca en un búfer local de validación, lo caul permite a atacantes dependientes del contexto obtener información sensible."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:H/Au:S/C:C/I:N/A:N","baseScore":4.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":2.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-30T20:00:33.769696Z","id":"CVE-2007-4786","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.0.7.1","matchCriteriaId":"811E0923-F14A-4084-B4DB-B64B5BA10C54"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1.2.61","matchCriteriaId":"50EC755B-C160-4995-9F30-F452ADAEE5DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2","versionEndExcluding":"7.2.2.34","matchCriteriaId":"49229EBC-8A77-49A2-8068-840C96D15EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.0.2.11","matchCriteriaId":"C7B867B4-0B4D-44B7-9250-26A3A9505A98"}]}]}],"references":[{"url":"http://osvdb.org/37499","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/26677","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/563673","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-74ZK93","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/25548","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1018660","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/3076","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36473","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/37499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/26677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/563673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-74ZK93","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/25548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1018660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/3076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2007-5460","sourceIdentifier":"cve@mitre.org","published":"2007-10-15T22:17:00.000","lastModified":"2026-06-16T22:46:11.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation with a fixed key) when sending the user's PIN/Password over the USB connection from the host to the device, which might make it easier for attackers to decode a PIN/Password obtained by (1) sniffing or (2) spoofing the docking process."},{"lang":"es","value":"Microsoft ActiveSync versión 4.1, como es usado en Windows Mobile versión 5.0, utiliza un cifrado débil (ofuscación XOR con una clave fija) cuando se envía el PIN y Contraseña del usuario por medio de la conexión USB desde el host hacia el dispositivo, lo que podría facilitar a atacantes decodificar un PIN y Contraseña obtenida al (1) espiar o (2) falsificar el proceso de acoplamiento."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:activesync:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A17BFED1-CAE1-4A94-AC66-1D41365E050B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"188596B9-7646-4841-B684-B224B48B3F15"}]}]}],"references":[{"url":"http://osvdb.org/38499","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/3232","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/482299/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/25976","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37223","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/38499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/3232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/482299/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/25976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2007-5626","sourceIdentifier":"cve@mitre.org","published":"2007-10-23T16:46:00.000","lastModified":"2026-06-16T22:46:31.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network."},{"lang":"es","value":"make_catalog_backup en Bacula 2.2.5, y posiblemente anteriores, envíe una contraseña MySQL como un argumento de línea de comando, y algunas veces transmite un e-mail en texto plano conteniendo esta línea de comando, lo cual permite a atacantes dependientes del contexto obtener la contraseña listando el proceso y sus argumentos, o realizando sniffing en la red."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bacula:bacula:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.5","matchCriteriaId":"586FE879-907B-47CC-B291-7E6EF765DB1D"}]}]}],"references":[{"url":"http://bugs.bacula.org/view.php?id=990","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/41861","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/27243","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31184","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-10.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/26156","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/3572","source":"cve@mitre.org","tags":["Broken Link","Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37336","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://bugs.bacula.org/view.php?id=990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/41861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/27243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/26156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/3572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1567","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2026-06-16T22:51:59.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information."},{"lang":"es","value":"phpMyAdmin versiones anteriores a 2.11.5.1, almacena la clave secreta MySQL de (1) nombre de usuario (2) contraseña, y (3) Blowfish, en texto sin cifrar en un archivo de Sesión bajo /tmp, que permite a los usuarios locales obtener información confidencial."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndExcluding":"2.11.5.1","matchCriteriaId":"978C2DD8-2223-42D1-A777-23B74C52C86B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29588","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29613","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29964","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1909711&group_id=23067&atid=377408","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1557","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28560","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1037/references","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41541","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00031.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00080.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1909711&group_id=23067&atid=377408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1037/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-2052","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T17:05:00.000","lastModified":"2026-06-16T22:53:00.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en redirect.php en Bitrix Site Manager 6.5, permite a atacantes remotos redireccionar a usuarios hacia sitios web de su elección y llevar a cabo ataques de phishing a través de una URL en el parámetro \"goto\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitrix24:bitrix_site_manager:6.5:*:*:*:*:*:*:*","matchCriteriaId":"339641BD-BEF4-4A84-B266-41BF09E63225"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/62/45/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42157","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://holisticinfosec.org/content/view/62/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1447","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2026-06-16T22:51:45.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka \"DNS Insufficient Socket Entropy Vulnerability\" or \"the Kaminsky bug.\""},{"lang":"es","value":"El protocolo DNS, como es implementado en (1) BIND 8 y 9 en versiones anteriores a 9.5.0-P1, 9.4.2-P1 y 9.3.5-P1; (2) Microsoft DNS en Windows 2000 SP4, XP SP2 y SP3 y Server 2003 SP1 y SP2; y otras implementaciones permiten a atacantes remotos suplantar el tráfico DNS a través de un ataque de un cumpleaños que usa referencias in-bailiwick para llevar a cabo un envenenamiento del caché contra resolutores recursivos, relacionado con la insifuciente aleatoriedad de la ID de la transacción DNS y los puertos de origen, vulnerabilidad también conocida como \"DNS Insufficient Socket Entropy Vulnerability\" o \"the Kaminsky bug\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-331"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":false,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":false,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":false,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:compute_cluster:*:itanium:*","matchCriteriaId":"69117328-A5AD-48A5-A56A-0AA8805A113E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:datacenter:*:itanium:*","matchCriteriaId":"3ECE18F6-9DDD-4354-9012-B0660E184E83"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:enterprise:*:itanium:*","matchCriteriaId":"4A2B4F1C-737D-40DA-B12E-6C664F9A7ECA"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:standard:*:itanium:*","matchCriteriaId":"DBBCB4B2-8007-4AD5-946E-396330E7DC31"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:storage:*:itanium:*","matchCriteriaId":"68758D17-44AF-4472-928C-3B94A7EAD671"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:compute_cluster:*:itanium:*","matchCriteriaId":"76EDD7D7-4567-4007-86A3-95E907616C6A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:compute_cluster:*:x64:*","matchCriteriaId":"7A933555-D875-47B9-BFA7-E030B04C1197"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:datacenter:*:itanium:*","matchCriteriaId":"4BAA5F63-9A88-4B38-B284-B6E6170F12A8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:datacenter:*:x64:*","matchCriteriaId":"9F168D81-2D2B-4B75-B907-A8AE2A3523C5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:enterprise:*:itanium:*","matchCriteriaId":"1778D813-845D-4B79-B9AF-5D4E0B461C75"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:enterprise:*:x64:*","matchCriteriaId":"A2E917A1-AFE1-4AA3-AB80-A69F152BAB51"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:standard:*:itanium:*","matchCriteriaId":"C8203007-1723-431B-ADDE-C5FE76A88619"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:standard:*:x64:*","matchCriteriaId":"423102CB-1FA1-46BB-8345-412F35DB25B7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:storage:*:itanium:*","matchCriteriaId":"98E956AB-6A8E-4C5D-89D5-52BC374B1D7C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:storage:*:x64:*","matchCriteriaId":"676A5A3B-EFE5-4B84-8F8E-CF952003F48F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:-:*:*:professional:*:x64:*","matchCriteriaId":"4902A7BD-0645-4CAC-8EA8-24BD2D8B893A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*","matchCriteriaId":"492EA1BE-E678-4300-A690-3BFCD4B233B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*","matchCriteriaId":"4E3C9031-F69A-4B6A-A8CB-39027174AA01"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*","matchCriteriaId":"D6B5646C-FF04-4D3D-B39E-27C1056962EA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client:*:*:*:*:*","matchCriteriaId":"7361D8F0-FE84-41D0-9C62-F180339DD40A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*","matchCriteriaId":"5454336D-724E-4027-A642-1EFCB79C1ADC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4:*:*:*:*:*:*:*","matchCriteriaId":"1E3C0D00-DF20-4B46-8A7D-99D963BD921E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8:*:*:*:*:*:*:*","matchCriteriaId":"7904F3D9-A6B0-4ED6-8BAD-2D26C118C0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.9:*:*:*:*:*:*:*","matchCriteriaId":"90E4653A-C63A-4568-BFF2-ECAB7AB5A55C"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc","source":"secure@microsoft.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html","source":"secure@microsoft.com","tags":["Technical Description"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121630706004256&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121866517322103&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123324863916385&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0533.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30925","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30973","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30977","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30979","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30980","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30988","source":"secure@microsoft.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30989","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30998","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31011","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31012","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31014","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31019","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31022","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31030","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31031","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31033","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31052","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31065","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31072","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31093","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31094","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31137","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31143","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31151","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31152","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31153","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31169","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31197","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31199","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31204","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31207","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31209","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31212","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31213","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31221","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31236","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31237","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31254","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31326","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31354","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31422","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31430","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31451","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31482","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31495","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31588","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31823","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31900","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33714","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33786","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:06.bind.asc","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-08.xml","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3026","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3129","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX117991","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX118183","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=762152","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://up2date.astaro.com/2008/08/up2date_7202_released.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.caughq.org/exploits/CAU-EX-2008-0002.txt","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.caughq.org/exploits/CAU-EX-2008-0003.txt","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtml","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1603","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1604","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1605","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1619","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1623","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.doxpara.com/?p=1176","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.doxpara.com/DMK_BO2K8.ppt","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26667","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26668","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26669","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26670","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26671","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26672","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/800113","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7DWR4J","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7ECL8Q","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:139","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.nominum.com/asset_upload_file741_2661.pdf","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7000912","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata42.html#013_bind","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata43.html#004_bind","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0789.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495289/100/0/threaded","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30131","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020437","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020438","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020440","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020448","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020449","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020548","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020558","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020560","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020561","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020575","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020576","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020577","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020578","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020579","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020651","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020653","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020702","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020802","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020804","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-622-1","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-627-1","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190B.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2019/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2023/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2025/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2029/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2030/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2050/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2051/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2052/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2055/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2092/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2113/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2114/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2123/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2139/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2166/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2195/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2196/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2197/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2291","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2342","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2377","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2383","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2384","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2467","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2482","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2549","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2582","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0297","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0311","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0622","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43334","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43637","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12117","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5917","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9627","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/6122","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6123","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6130","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121630706004256&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121866517322103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123324863916385&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0533.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:06.bind.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX117991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX118183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=762152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://up2date.astaro.com/2008/08/up2date_7202_released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.caughq.org/exploits/CAU-EX-2008-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.caughq.org/exploits/CAU-EX-2008-0003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.doxpara.com/?p=1176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.doxpara.com/DMK_BO2K8.ppt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/800113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7DWR4J","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7ECL8Q","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.nominum.com/asset_upload_file741_2661.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7000912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata42.html#013_bind","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata43.html#004_bind","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0789.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495289/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-622-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-627-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2019/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2023/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2025/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2029/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2030/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2050/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2051/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2052/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2055/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2092/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2113/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2114/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2123/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2139/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2166/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2195/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2196/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2197/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/6122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"http://rhn.redhat.com/errata/RHSA-2008-0533.html","lastModified":"2008-07-09T00:00:00"}]}},{"cve":{"id":"CVE-2008-2951","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T22:41:00.000","lastModified":"2026-06-16T22:54:48.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function."},{"lang":"es","value":"Una vulnerabilidad de Redireccionamiento Abierto en el script de búsqueda en Trac anterior a versión 0.10.5, permite a los atacantes remotos redireccionar a los usuarios a sitios web arbitrarios y conducir ataques de phishing por medio de una URL en el parámetro q, posiblemente relacionada con la función quickjump."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:*:*:*:*:*:*:*:*","versionEndExcluding":"0.10.5","matchCriteriaId":"C6C4CEF3-92F7-4344-9833-7CBCEF16E94F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/72/45/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31314","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.osvdb.org/46513","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30402","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44043","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://holisticinfosec.org/content/view/72/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.osvdb.org/46513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-3275","sourceIdentifier":"secalert@redhat.com","published":"2008-08-12T23:41:00.000","lastModified":"2026-06-16T22:55:31.083","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service (\"overflow\" of the UBIFS orphan area) via a series of attempted file creations within deleted directories."},{"lang":"es","value":"Las funciones (1) real_lookup y (2) __lookup_hash en el archivo fs/namei.c en la implementación de vfs en el kernel de Linux anterior a  versión 2.6.25.15 no previene la creación de una matriz de elementos secundarios para un directorio eliminado (también se conoce como S_DEAD), que permite a los usuarios locales causar una denegación de servicio (\"overflow\" del área huérfana UBIFS) por medio  de una serie de intentos de creación de archivos sin eliminar los directorios."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.25.15","matchCriteriaId":"AEEB7FCC-A4DF-4849-AE76-C844E3F53C4C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp1:*:*:*:*:*:*","matchCriteriaId":"44320836-E2DE-4A1C-9820-AFFA087FF7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"15E235E9-EC31-4F3F-80F7-981C720FF353"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77","source":"secalert@redhat.com"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2008/7/2/83","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31551","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31614","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31836","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31881","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32023","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32104","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32190","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32344","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33201","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33280","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33556","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30647","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020739","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2430","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457858","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44410","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10744","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6551","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2008/7/2/83","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3775","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2026-06-16T22:56:31.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Folder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\\_pack registry value."},{"lang":"es","value":"Folder Lock 5.9.5 y anteriores usan encriptación débil (ROT-25) para la contraseña, lo que permite a administradores locales obtener información sensible mediante la lectura y el descifrado del valor del registro QualityControl\\_pack."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-17T15:17:09.408934Z","id":"CVE-2008-3775","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newsoftwares:folder_lock:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.5","matchCriteriaId":"0EDC1BF9-973E-498F-8D00-016A851C3A1B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31559","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4183","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495612/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30771","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44575","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495612/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3281","sourceIdentifier":"secalert@redhat.com","published":"2008-08-27T20:41:00.000","lastModified":"2026-06-16T22:55:31.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document."},{"lang":"es","value":"libxml2 2.6.32 y anteriores, no detecta correctamente la recursividad durante la expansión de una entidad en un valor de un atributo; esto permite a atacantes dependientes del contexto provocar una denegación de servicio (consumo de la memoria y la CPU) mediante un documento XML manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-776"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"66E994C3-52FD-41F8-B310-3B1C549D2D62"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0","matchCriteriaId":"212BF588-5C81-4801-A76D-73FB1DE211EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"3.0","matchCriteriaId":"6717E295-F796-48DE-8F4B-B2B00B3C6589"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E1CA1D49-76E7-4195-98AF-BE916040ECC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4814716C-514C-40F7-A59B-ED61F14658DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0F9EF63F-DDA3-448B-92D7-27ED92C51FED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"397313C3-6BF5-4A87-90B3-55678E807171"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53A61204-33CE-422F-8285-20A5E98ADF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2FE6DAA-4702-409A-98B6-DE13B12805A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C1BA6DF4-4D53-482A-8820-B9B0E6EBD51D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"ECFD8D25-7FDF-48DF-8728-5875C44FFB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CE7ECF1C-285C-4AA3-8B66-28EDAB0763E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"902BA958-06AA-4EDF-9F9E-1030083EA361"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000039.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://mail.gnome.org/archives/xml/2008-August/msg00034.html","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/31558","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31566","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31590","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31728","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31748","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31855","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31982","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32488","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32807","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32974","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35379","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.gnome.org/viewvc/libxml2?view=revision&revision=3772","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1631","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:180","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:192","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/497962/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30783","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020728","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-640-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0017.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2419","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2843","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2971","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://xmlsoft.org/news.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458086","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9812","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0836.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/644-1/","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00261.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00347.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://mail.gnome.org/archives/xml/2008-August/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/31558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.gnome.org/viewvc/libxml2?view=revision&revision=3772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/497962/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-640-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0836.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/644-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00261.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2007-6716","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2026-06-16T22:48:38.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test."},{"lang":"es","value":"fs/direct-io.c del subsistema dio del núcleo de Linux anterior a 2.6.23, no suprime de forma correcta la estructura dio, esto permite a usuario locales provocar una denegación de servicio (OOPS), como se ha demostrado en determinados test fio."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.23","matchCriteriaId":"CE323F46-5BE8-40FC-B564-B21ADE5D4DC6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*","matchCriteriaId":"5595E484-647C-4F85-94AB-5A4D55CD766B"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"14DF1463-F23F-465F-8A35-D550A7438CB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"15E235E9-EC31-4F3F-80F7-981C720FF353"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"02E6A767-B9A5-4054-BE70-286E0A464248"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=848c4dd5153c7a0de55470ce99a8e13a63b4703f","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2007/7/30/448","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32023","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32103","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32237","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32356","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32370","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32393","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32799","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/1","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31515","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461082","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10053","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=848c4dd5153c7a0de55470ce99a8e13a63b4703f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2007/7/30/448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4302","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T17:17:29.283","lastModified":"2026-06-16T22:57:33.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool."},{"lang":"es","value":"fs/splice.c en el subsistema \"splice\" en el kernel de Linux anterior a v2.6.22.2 no maneja de forma adecuada un fallo en la función add_to_page_cache_Lru, y como consecuencia intentar desbloquear una página que no está bloqueada, lo que permite que usuarios locales puedan provocar una denegación de servicio (Error del Kernel y caída del sistema), como se demostró por la herramienta \"fio I/O\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.22.2","matchCriteriaId":"3964F496-69A9-4EDE-B659-442233AC27C3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=6a860c979b35469e4d77da781a96bdb2ca05ae64","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2007/7/20/168","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32237","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32485","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln31201.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/10","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31201","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=462434","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45191","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10547","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=6a860c979b35469e4d77da781a96bdb2ca05ae64","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2007/7/20/168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln31201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=462434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2008-0957.html","lastModified":"2009-01-15T00:00:00"}]}},{"cve":{"id":"CVE-2008-4989","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T01:00:01.177","lastModified":"2026-06-16T22:58:53.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN)."},{"lang":"es","value":"La función _gnutls_x509_verify_certificate en lib/x509/verify.c en libgnutls en GnuTLS antes de v2.6.1 confía en las cadenas de certificado en las que el último certificado es un certificado de confianza arbitraria, auto-firmado, lo que permite a atacantes de tipo \"hombre en el medio\" (man-in-the-middle) insertar un certificado falso para cualquier Distinguished Name(DN)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.1","matchCriteriaId":"5CA85285-1376-4569-8EC1-66E1625E258D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.1","matchCriteriaId":"FF141FBE-4CA5-4695-94A0-8BE1309D28CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*","matchCriteriaId":"AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:-:*:*:*:*:*:*","matchCriteriaId":"38C3AEB0-59E2-400A-8943-60C0A223B680"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3217","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32619","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32681","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32687","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32879","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33501","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33694","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35423","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200901-10.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-260528-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0322","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1719","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.gnu.org/software/gnutls/security.html","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:227","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0982.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/498431/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32232","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021167","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-678-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3086","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1567","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46482","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2886","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11650","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/678-1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00222.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00293.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200901-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-260528-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.gnu.org/software/gnutls/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0982.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/498431/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-678-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/678-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00293.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-0141","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:05.077","lastModified":"2026-06-16T23:04:20.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user."},{"lang":"es","value":"XTerm en Apple Mac OS X v10.4.11 y v10.5.6, cuando usado con luit, crea dispositivos tty con permisos inseguros de escritura, el cual permite a los usuarios locales escribir a el Xterm de otro usuario."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/alerts/2009/Feb/1021729.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33798","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48727","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/alerts/2009/Feb/1021729.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0935","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T02:00:08.157","lastModified":"2026-06-16T23:06:08.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance."},{"lang":"es","value":"La función inotify_read en el kernel de Linux versiones 2.6.27 hasta 2.6.27.13, 2.6.28 hasta 2.6.28.2 y 2.6.29-rc3, permite a los usuarios locales causar una denegación de servicio (OOPS) por medio de una lectura con una dirección no válida en una instancia inotify, lo que causa que la exclusión mutua de la lista de eventos del dispositivo se desbloquee dos veces e impida la sincronización apropiada de una estructura de datos para la instancia inotify."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndIncluding":"2.6.27.13","matchCriteriaId":"959E86DD-3F82-4BFC-9190-B63FC5B79507"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndIncluding":"2.6.28.2","matchCriteriaId":"3421BB9A-F9FC-4BDD-B72B-1DF16DA121A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc3:*:*:*:*:*:*","matchCriteriaId":"92058AE0-2E52-4304-B4C6-871AB1CE42DF"}]}]}],"references":[{"url":"http://marc.info/?l=linux-kernel&m=123337123501681&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/06/2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/18/5","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/19/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33624","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488935","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49331","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=linux-kernel&m=123337123501681&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/06/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/18/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/19/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.","lastModified":"2009-04-15T00:00:00"}]}},{"cve":{"id":"CVE-2009-1073","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.953","lastModified":"2026-06-16T23:06:26.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field."},{"lang":"es","value":"nss-ldapd anteriores a v0.6.8 emplea permisos de \"lectura para todos\" para el archivo /etc/nss-ldapd.conf, lo que permite a los usuario locales obtener una contraseña en texto claro para el servidor LDAP, leyendo el campo bindpw."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:nss-ldap:*:*:*:*:*:*:*:*","versionEndExcluding":"0.6.8","matchCriteriaId":"C3B17F2C-7A87-4AFC-AA24-5D2F2B4C787F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/debian/libnss-ldapd.postinst?r1=795&r2=813","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/man/nss-ldapd.conf.5.xml?r1=805&r2=806","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://ch.tudelft.nl/~arthur/nss-ldapd/news.html#20090322","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://launchpad.net/bugs/cve/2009-1073","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34523","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1758","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/23/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/24/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/4","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/34211","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/debian/libnss-ldapd.postinst?r1=795&r2=813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/man/nss-ldapd.conf.5.xml?r1=805&r2=806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://ch.tudelft.nl/~arthur/nss-ldapd/news.html#20090322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://launchpad.net/bugs/cve/2009-1073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/23/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/24/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/34211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1243","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T14:30:00.407","lastModified":"2026-06-16T23:06:50.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of service (panic) by reading zero bytes from the /proc/net/udp file and unspecified other files, related to the \"udp seq_file infrastructure.\""},{"lang":"es","value":"net/ipv4/udp.c en el kernel de Linux anteriores a v2.6.29.1, desarrolla un paso desbloqueante en ciertas circunstancias incorrectas, lo que permite a los usuarios locales causar una denegación de servicio (panic) por lectura de cero bytes desde el archivo /proc/net/udp y otros no especificado, en relación a \"udp seq_file infrastructure.\""}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.29.1","matchCriteriaId":"1FF4F98B-4264-4C5E-BB8F-7D80149F3B06"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30842f2989aacfaba3ccb39829b3417be9313dbe","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://openwall.com/lists/oss-security/2009/04/01/4","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34478","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34329","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0924","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49595","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30842f2989aacfaba3ccb39829b3417be9313dbe","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://openwall.com/lists/oss-security/2009/04/01/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2009-04-07T00:00:00"}]}},{"cve":{"id":"CVE-2009-1596","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T14:30:00.343","lastModified":"2026-06-16T23:07:36.423","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet."},{"lang":"es","value":"Ignite Realtime Openfire antes de v3.6.5 no implementa correctamente la propiedad de configuración de la consola register.password (alias canChangePassword), lo que permite eludir la política de seguridad a usuarios remotos autenticados, así como cambiar sus propias contraseñas a través de un paquete passwd_change IQ."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*","versionEndExcluding":"3.6.5","matchCriteriaId":"65A725C1-F775-4A44-A855-4FB8A8BE77A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/34984","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/community/message/190280","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1532","source":"cve@mitre.org","tags":["Patch","Permissions Required","Vendor Advisory"]},{"url":"http://www.osvdb.org/54189","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34804","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50291","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/34984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/community/message/190280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Permissions Required","Vendor Advisory"]},{"url":"http://www.osvdb.org/54189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1466","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.640","lastModified":"2026-06-16T23:07:19.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file."},{"lang":"es","value":"Aplicación de Servidor de Acceso (A-A-S) v2.0.48 almacena (1) contraseñas y (2) las palabras clave del puerto en texto claro en aas.ini, lo cual permite a usuarios locales obtener información sensible a través de la lectura del fichero."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:klinzmann:application_access_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"DCC440C8-91C2-49B3-B023-C3B8F9D0E1D4"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022204","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/503434/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34911","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.syhunt.com/advisories/?id=aas-multiple","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50590","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1022204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/503434/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.syhunt.com/advisories/?id=aas-multiple","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0783","sourceIdentifier":"secalert@redhat.com","published":"2009-06-05T16:00:00.267","lastModified":"2026-06-16T23:05:48.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application."},{"lang":"es","value":"Apache Tomcat v4.1.0 hasta la v4.1.39, v5.5.0 hasta la v5.5.27 y v6.0.0 hasta la v6.0.18 permite a las aplicaciones web reemplazar un \"parser\" (extractor de información) XML utilizado por otras aplicaciones web, lo que permite a los usuarios locales leer o modificar los ficheros (1) web.xml, (2) context.xml o (3) ficheros tld de aplicaciones web de su elección a través de una aplicacion manipulada que es cargada antes de la aplicación web objetivo del ataque."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.39","matchCriteriaId":"FABEAD3F-1066-4802-BDFD-5F42406D2963"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.27","matchCriteriaId":"88DD2300-F68E-4BD9-A511-7E9F1A6DD43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.18","matchCriteriaId":"7888A749-8246-491C-AF4E-10762170ECE4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35788","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42368","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=652592&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=681156&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=739522&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=781542&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=781708&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504090/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35416","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022336","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51195","source":"secalert@redhat.com","tags":["VDB Entry"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=29936","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=45933","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=652592&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=681156&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=739522&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=781542&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=781708&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504090/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=29936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=45933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1961","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.813","lastModified":"2026-06-16T23:08:27.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions."},{"lang":"es","value":"El código de doble bloqueo del inodo de fs/ocfs2/file.c del kernel de Linux v2.6.30 anterior a v2.6.30-rc3, v2.6.27 anterior a v2.6.27.24, v2.6.29 anterior a v2.6.29.4 y puede que otras versiones anteriores a v2.6.19; permite a usuarios locales provocar una denegación de servicio (prevención de creación y borrado de ficheros) a través de una serie de llamadas al sistema anidadas que provocan un bloqueo mutuo -deadlock- entre las funciones generic_file_splice_write, splice_from_pipe y ocfs2_file_splice_write."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.19","matchCriteriaId":"D7346ED4-8185-4408-BE3C-C242CE8BB11C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"2.6.27.24","matchCriteriaId":"04980CC6-D46C-4DD4-A0B1-7B18822AFE8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"2.6.29.4","matchCriteriaId":"7DA28DF5-A572-475C-BCE8-09B70A808FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*","matchCriteriaId":"CC6C1408-671A-4436-A825-12170CFB5C9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35847","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36051","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022307","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/29/2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/30/1","source":"cve@mitre.org","tags":["Exploit","Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/1","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35143","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/29/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/30/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5. It was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1157.html","lastModified":"2009-07-15T00:00:00"}]}},{"cve":{"id":"CVE-2009-2213","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.657","lastModified":"2026-06-16T23:09:01.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions."},{"lang":"es","value":"La configuración por defecto en las características de seguridad globales en el appliance Citrix NetScaler Access Gateway con el firmware Enterprise Edition 9.0, 8.1 y versiones anteriores especifica la opción \"Allow for the Default Authorization Action\" lo que puede permitir a usuarios remotos autenticados evitar las restricciones de acceso previstas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:N/A:N","baseScore":6.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-21T16:31:24.661375Z","id":"CVE-2009-2213","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"FD2AF148-E1B5-427B-97E2-AEEC59D72162"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DAA4BFC4-A82E-4820-AB97-2EF9D9EA9276"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:8.0:*:*:*:*:*:*:*","matchCriteriaId":"B80F696E-74A8-432C-BA31-6CE158B4DB82"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.0:*:*:*:*:*:*:*","matchCriteriaId":"CAD93B7C-E6C1-42F0-8963-C33EF0F6B88D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"4D5D5DFC-F456-4085-BE20-13BD38301B04"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX118770","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35422","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1641","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51274","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.citrix.com/article/CTX118770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2216","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.767","lastModified":"2026-06-16T23:09:01.597","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CMD_REDIRECT en DirectAdmin v1.33.6 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la URI en una petición view=advanced."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:directadmin:directadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.33.6","matchCriteriaId":"3DB74C8D-084E-40AD-8EEA-CA98DBFFF771"}]}]}],"references":[{"url":"http://pridels-team.blogspot.com/2009/06/directadmin-v1336-xss-vuln.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35525","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35450","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1663","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51292","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://pridels-team.blogspot.com/2009/06/directadmin-v1336-xss-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1388","sourceIdentifier":"secalert@redhat.com","published":"2009-07-05T16:30:00.313","lastModified":"2026-06-16T23:07:10.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the ptrace system call and a coredumping thread."},{"lang":"es","value":"La función ptrace_start de kernel/ptrace.c en el kernel de Linux v2.6.18, no maneja adecuadamente la ejecución simultánea de la función do_coredump, esto permite a usuarios locales provocar una denegación de servicio -bloqueo mutuo (deadlock)- a través de vectores que incluyen la llamada al sistema ptrace y un hilo coredumping."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=124654277229434&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://osvdb.org/55679","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36131","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35559","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=346615","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=346742","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504263","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8625","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://marc.info/?l=oss-security&m=124654277229434&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://osvdb.org/55679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=346615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=346742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise 5 via: https://rhn.redhat.com/errata/RHSA-2009-1193.html","lastModified":"2009-08-05T00:00:00"}]}},{"cve":{"id":"CVE-2009-2408","sourceIdentifier":"secalert@redhat.com","published":"2009-07-30T19:30:00.313","lastModified":"2026-06-16T23:09:22.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5."},{"lang":"es","value":"Mozilla Firefox anterior a v3.5 y NSS anterior a v3.12.3  no tratan apropiadamente un carácter '\\0' en un nombre de dominio en el campo nombre común (CN) del asunto de un certificado X.509, que permite a un atacante de hombre-en-el-medio suplantar servidores SSL arbitrarios a través de un certificado manipulado por una autoridad de certificación."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.13","matchCriteriaId":"311A4763-8018-4394-946D-C75220572EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*","versionEndExcluding":"3.12.3","matchCriteriaId":"A21F310D-7D9F-45D7-974D-C615F99FBEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.18","matchCriteriaId":"336E3C0C-0197-40FD-AD68-C13C518858C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.23","matchCriteriaId":"C213A6FE-549A-4B85-BCBE-11CAF63A376C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.1","matchCriteriaId":"FF141FBE-4CA5-4695-94A0-8BE1309D28CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*","matchCriteriaId":"AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=7003","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://osvdb.org/56723","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36088","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36125","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:217","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-42.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_m.c.diff?r1=1.8&r2=1.11&f=h","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022632","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.wired.com/threatlevel/2009/07/kaminsky/","source":"secalert@redhat.com","tags":["Press/Media Coverage"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510251","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10751","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8458","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/810-2/","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://isc.sans.org/diary.html?storyid=7003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://osvdb.org/56723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-42.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_m.c.diff?r1=1.8&r2=1.11&f=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.wired.com/threatlevel/2009/07/kaminsky/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Press/Media Coverage"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/810-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-2416","sourceIdentifier":"secalert@redhat.com","published":"2009-08-11T18:30:00.983","lastModified":"2026-06-16T23:09:24.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework."},{"lang":"es","value":"Múltiples vulnerabilidades de uso anterior a la liberación en libxml2 v2.5.10, v2.6.16, v2.6.26, v2.6.27, y v2.6.32, y libxml v1.8.17, permite a atacantes dependientes de contexto producir una denegación de servicio (caída de aplicación) a través de una ,manipulación de (1) una notación o (2) tipos de atributo de enumeración en un fichero XML como se demostró en Codenomicon XML fuzzing framework."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-06T15:40:41.228438Z","id":"CVE-2009-2416","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml:1.8.17:*:*:*:*:*:*:*","matchCriteriaId":"E7C0B552-67E9-48E5-ABFB-AF0CD6DA46FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"D463EC3C-88F1-46D9-ADB6-6283DC23B0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"0AD69C98-11AB-4BB5-A91A-F029BA0E1DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"1D8135B1-FB22-4755-A5ED-CDB16E3E85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"2B4685BF-394A-4426-980A-2B1D37737C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*","matchCriteriaId":"7069A49C-038C-4E7B-AF03-4D90D5734414"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6172AF57-B26D-45F8-BE3A-F75ABDF28F49"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.172.43","matchCriteriaId":"5725BE44-B621-422F-B9E2-D400ACFC43EC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0.4","matchCriteriaId":"77BC4840-8A34-40F9-873B-DF0F4CADCBDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"4.0","matchCriteriaId":"38364EB5-F557-4763-A555-9D66F51DE24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.4.11","matchCriteriaId":"A1E0F574-6859-45A6-B160-7DDE92C07CC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.8","matchCriteriaId":"7A880FA4-5DBF-4894-8DAC-C3CD147D1EB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.2","matchCriteriaId":"B30A1267-231F-44CA-9484-8849C1808DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndExcluding":"10.4.11","matchCriteriaId":"B2D0444E-6B76-46EE-95EF-617F8967F6B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.8","matchCriteriaId":"7F74FAC0-CC05-4797-9DE2-F7CE5CB8FC19"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.2","matchCriteriaId":"4F769B77-FF42-442C-8D1A-4E2AE1F5DF39"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.1","matchCriteriaId":"FF141FBE-4CA5-4695-94A0-8BE1309D28CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*","matchCriteriaId":"AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:4.0:-:*:*:*:*:*:*","matchCriteriaId":"D467EE9D-6A1F-4462-9BDA-C68B7EE375E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7426B5AC-D0FD-424D-9A1E-0875C2102D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"902BA958-06AA-4EDF-9F9E-1030083EA361"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BFF29100-E124-4416-95CF-18B4246D43F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"FAE88D8C-9CC3-46D1-9F26-290BC679F47E"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*","matchCriteriaId":"13771B15-CD71-472A-BE56-718B87D5825D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.4.3","matchCriteriaId":"100F1988-1FF0-483A-9A56-F02A398343D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.1.1","matchCriteriaId":"12DF9C72-2B26-432D-9A16-1D21D2E54557"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35036","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36207","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36338","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36417","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36631","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37346","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.codenomicon.com/labs/xml/","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1859","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36010","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-815-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515205","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7783","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9262","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.codenomicon.com/labs/xml/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-815-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-2857","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T17:30:01.170","lastModified":"2026-06-16T23:10:22.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file."},{"lang":"es","value":"El kernel en Sun Solaris v8, v9, y v10, y OpenSolaris anteriores a snv_103, no maneja adecuadamente la interacción entre el sistema de ficheros y las implementaciones de memoria virtual, lo que permite a usuarios locales producir una denegación de servicio (bloqueo mutuo ,-deadlock- y parada del sistema) a través de vectores que incluyen operación de nmap y escritura en el mismo fichero."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-16T16:19:24.740936Z","id":"CVE-2009-2857","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:*","versionEndExcluding":"snv_103","matchCriteriaId":"E76824E6-0670-4010-B187-99CC695171A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*","matchCriteriaId":"722A52CF-4C6E-44D3-90C4-D2F72A40EF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*","matchCriteriaId":"4F864AD7-53A2-4225-870F-062876CE45DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/36319","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2291","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-3022","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T20:30:01.047","lastModified":"2026-06-16T23:10:44.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en bingo!CMS v1.2 y anteriores, permite a atacantes remotos secuestrar la autenticación de otros usuarios para peticiones que modifican la configuración o cambian el contenidos a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-21T16:08:52.291144Z","id":"CVE-2009-3022","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itd-inc:bingo\\!cms:*:-:commercial:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"F782FA95-6C66-4A3E-AE0E-AD4419A89C80"},{"vulnerable":true,"criteria":"cpe:2.3:a:itd-inc:bingo\\!cms:*:-:core:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"C8D7A923-B0C6-4660-A204-7FB68CBE78A2"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN68640473/index.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/57425","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36458","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.bingo-cms.jp/security/jvn68640473.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52838","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvn.jp/en/jp/JVN68640473/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/57425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.bingo-cms.jp/security/jvn68640473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3238","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T10:30:01.267","lastModified":"2026-06-16T23:11:12.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to \"return the same value over and over again for long stretches of time.\""},{"lang":"es","value":"La función get_random_int de drivers/char/random.c en el kernel de Linux anterior a v2.6.30, produce números que nos son suficientemente aleatorios, esto permite a los atacantes predecir el valor devuelto y permite que se puedan superar los mecanismos de protección basados en la aleatoriedad, a través de vectores que eleven la tendencia de la función a \"devolver el mismo valor una y otra vez durante largos periodos de tiempo\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.30","matchCriteriaId":"F029386E-52D4-46E9-84BF-4D24CA35383E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://patchwork.kernel.org/patch/21766/","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37351","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499785","source":"cve@mitre.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519692","source":"cve@mitre.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11168","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03836en_us","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://patchwork.kernel.org/patch/21766/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03836en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3278","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.610","lastModified":"2026-06-16T23:11:17.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack."},{"lang":"es","value":"El QNAP TS-239 Pro y TS-639 Pro con firmware v2.1.7 0613, v3.1.0 0627, y v3.1.1 0815 emplea la función \"rand\" de la biblioteca para generar ciertos tipos de claves de recuperación, lo que facilita a usuarios locales adivinar esa clave a través de un ataque de fuerza bruta."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-239_pro_firmware:2.1.7:build0613:*:*:*:*:*:*","matchCriteriaId":"6F5C7FE8-D003-4640-9F64-0B2160236F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-239_pro_firmware:3.1.0:build0627:*:*:*:*:*:*","matchCriteriaId":"CA882F2B-0BEE-4233-AA06-AA926FF178F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-239_pro_firmware:3.1.1:build0815:*:*:*:*:*:*","matchCriteriaId":"95C06ACE-A307-485E-A929-C6125F817F73"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qnap:ts-239_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"F035666A-5CFC-43A2-AD57-20A3F0C5E747"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-639_pro_firmware:2.1.7:build0613:*:*:*:*:*:*","matchCriteriaId":"C7CFDE40-352B-472F-8448-49CA3CA850FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-639_pro_firmware:3.1.0:build0627:*:*:*:*:*:*","matchCriteriaId":"73D2A5A6-85A0-4DC9-9DFE-AD36D4F85893"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-639_pro_firmware:3.1.1:build0815:*:*:*:*:*:*","matchCriteriaId":"5F574D92-A200-4883-9D79-BB035B857C63"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qnap:ts-639_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"CB1E8394-AE01-4838-8348-7E118350C21F"}]}]}],"references":[{"url":"http://secunia.com/advisories/36793","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506607/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36467","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/36793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506607/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3621","sourceIdentifier":"secalert@redhat.com","published":"2009-10-22T16:00:00.640","lastModified":"2026-06-16T23:12:02.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket."},{"lang":"es","value":"net/unix/af_unix.c en el kernel de Linux v2.6.31.4 y anteriores permite a usuarios locales causar una denegación de servicio (el servidor se bloquea) creando un socket  abstract-namespace AF_UNIX y realizando una operación de apagado en ese socket, para luego luego realizar una serie de operaciones de conexión en dicho socket."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.4","matchCriteriaId":"D3D7715A-8ED8-48D3-B467-CFC9430B6D45"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"14DF1463-F23F-465F-8A35-D550A7438CB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"F140C5CF-5141-4F8D-B667-522A698AC632"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"02E6A767-B9A5-4054-BE70-286E0A464248"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3:*:*:*:*:*:*","matchCriteriaId":"A516C153-239B-4F41-88B4-8B8D4F92115C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7426B5AC-D0FD-424D-9A1E-0875C2102D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/10/19/50","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/54678/","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37086","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/2","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/4","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529626","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/10/19/50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/54678/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3621\n\nThis issue has been rated as having moderate security impact.\n\nIt was addressed in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1671.html , https://rhn.redhat.com/errata/RHSA-2009-1670.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively.\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/","lastModified":"2009-12-17T00:00:00"}]}},{"cve":{"id":"CVE-2009-4053","sourceIdentifier":"cve@mitre.org","published":"2009-11-23T17:30:00.767","lastModified":"2026-06-16T23:12:56.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to (1) create arbitrary directories via directory traversal sequences in an MKD command or (2) create files with any contents in arbitrary directories via directory traversal sequences in a file upload request.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Home FTP Server v1.10.1.139 permiten a usuarios autenticados remtos (1) crear directorios de su elección a través de secuencias de salto de directorio en un comando MKD o (2) crear ficheros con cualquier contenido en directorios de su elección a través de secuencias de salto de directorio en una petición de subida de fichero.  NOTA: el origen de esta información es desconocido; los detalles han sido obtenidos únicamente de información de terceras partes."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:home_ftp_server_project:home_ftp_server:1.10.1.139:*:*:*:*:*:*:*","matchCriteriaId":"2377037F-B08A-4896-9466-666F2D65E337"}]}]}],"references":[{"url":"http://secunia.com/advisories/37381","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54303","source":"nvd@nist.gov","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/37381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3897","sourceIdentifier":"secalert@redhat.com","published":"2009-11-24T17:30:00.407","lastModified":"2026-06-16T23:12:35.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself."},{"lang":"es","value":"Dovecot v1.2.x anterior v1.2.8 establece permisos 0777 durante la creación de ciertos directorios en el momento de la instalación, permitiendo a usuarios locales acceder a las cuentas de usuarios por reemplazamiento del socket auth, relacionados con los directorios padre del directorio base_dir, y probablemente con el propio directorio base_dir\r\n"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.8","matchCriteriaId":"A697E475-79C0-45FD-9529-022CBC15921D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125871729029145&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125881481222441&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125900267208712&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125900271508796&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/37443","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.dovecot.org/list/dovecot-news/2009-November/000143.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:306","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.osvdb.org/60316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37084","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3306","source":"secalert@redhat.com","tags":["Patch","Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54363","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125871729029145&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125881481222441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125900267208712&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125900271508796&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/37443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.dovecot.org/list/dovecot-news/2009-November/000143.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.osvdb.org/60316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-4449","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:20.500","lastModified":"2026-06-16T23:13:41.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery, allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery parameters, related to (1) admin/modules/user/users.php and (2) usercp.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en MyBB (MyBulletinBoard) v1.4.10, y posiblemente versiones anteriores. Cuando se cambia el avatar de usuario desde la galería, permite a usuarios remotos autenticados determinar la existencia de ficheros a través de secuencias de salto de directorio en el avatar y posiblemente los parámetros de la galería. Relacionado con (1) admin/modules/user/users.php y (2) usercp.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:N/A:N","baseScore":6.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1FF9452B-CF4B-45F0-8487-23D9CCBB1A4A"}]}]}],"references":[{"url":"http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://dev.mybboard.net/issues/617","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/admin/modules/user/users.php","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/usercp.php","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://openwall.com/lists/oss-security/2010/10/08/7","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2010/10/11/8","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2010/12/06/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://osvdb.org/61359","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37906","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37489","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3651","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://dev.mybboard.net/issues/617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/admin/modules/user/users.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/usercp.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://openwall.com/lists/oss-security/2010/10/08/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2010/10/11/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2010/12/06/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://osvdb.org/61359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2010-0467","sourceIdentifier":"cve@mitre.org","published":"2010-02-02T17:30:00.407","lastModified":"2026-06-16T23:16:14.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el componente ccNewsletter (com_ccnewsletter) v1.0.5 para Joomla! permite a atacantes remotos leer ficheros arbitrarios a través de un .. (punto punto) en el parámetro de control en una acción ccnewsletter a index.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7FBC86BC-EBA3-4DD9-878F-0A1735D00036"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://secunia.com/advisories/38378","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/11277","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/11282","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37987","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55953","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/38378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/11277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/11282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3960","sourceIdentifier":"psirt@adobe.com","published":"2010-02-15T18:30:00.407","lastModified":"2026-08-06T05:16:33.473","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents."},{"lang":"es","value":"Vulnerabilidad sin especificar en BlazeDS v3.2 y anteriores, tal como es utilizado en LiveCycle v8.0.1, v8.2.1 y v9.0, LiveCycle Data Services v2.5.1, v2.6.1 y v3.0, Flex Data Services v2.0.1 y ColdFusion v7.0.2, v8.0, v8.0.1 y v9.0. Permite a atacantes remotos obtener información confidencial a través de vectores de ataque asociados con una petición, y relacionados con una etiqueta inyectada y una referencia a una entidad externa en documentos XML."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2022-03-11T00:00:00+00:00","id":"CVE-2009-3960","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-07","cisaActionDue":"2022-09-07","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Adobe BlazeDS Information Disclosure Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:blazeds:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2","matchCriteriaId":"AEF7C97E-BE99-415D-B12B-D3E7BD9EDF08"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B015715F-9672-480E-B0AA-968D8C9070D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"28C8D6AF-EDE1-42BD-A47C-2EF8690299BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*","matchCriteriaId":"113431FB-E4BE-4416-800C-6B13AD1C0E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex_data_services:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6F65E3F-F3E7-4BE9-A13B-87FFF3B3777E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:livecycle:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3890CE6C-D8D0-4406-ACE1-9849CFCA72F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:livecycle:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"82D29A25-10F2-4FFB-A9BC-B7AAD6D1A18A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:livecycle:9.0:*:*:*:*:*:*:*","matchCriteriaId":"E6804632-7EA5-45AB-91A3-C05D3426CA9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:livecycle_data_services:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"262ED6C7-3C78-4863-9056-A9D55C7DB6CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:livecycle_data_services:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"BEFE9CD7-0DB5-4038-AFB5-1B756186605C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:livecycle_data_services:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EE5075B-DB11-47F3-9601-F4956ECF5047"}]}]}],"references":[{"url":"http://secunia.com/advisories/38543","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1023584","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-05.html","source":"psirt@adobe.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.osvdb.org/62292","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/38197","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/41855/","source":"psirt@adobe.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/38543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1023584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.osvdb.org/62292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/38197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/41855/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3960","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2010-0629","sourceIdentifier":"cve@mitre.org","published":"2010-04-07T15:30:00.390","lastModified":"2026-06-16T23:16:32.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación kadmin/server/server_stubs.c en kadmind en MIT Kerberos  5 (también conocido como krb5) de la v1.5 a la v1.6.3, permite a usuarios autenticados remotamente provocar una denegación de servicio (caída de demonio) a través de una petición desde un cliente kadmin que envía un número de versión de API no válido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5","versionEndIncluding":"1.6.3","matchCriteriaId":"3C869772-3FCF-4D8F-98AA-D0DE910CB11F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Mailing List"]},{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/39264","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39290","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39315","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39324","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39367","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1023821","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://ubuntu.com/usn/usn-924-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-2031","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:071","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0343.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/510566/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/39247","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/0876","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Mailing List"]},{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/39264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1023821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://ubuntu.com/usn/usn-924-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-2031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0343.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/510566/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/39247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/0876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}],"evaluatorImpact":"Per: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt\n\n'AFFECTED SOFTWARE\n=================\n\n* kadmind in MIT releases krb5-1.5 through krb5-1.6.3.'"}},{"cve":{"id":"CVE-2010-0738","sourceIdentifier":"secalert@redhat.com","published":"2010-04-28T22:30:00.447","lastModified":"2026-08-14T05:16:51.000","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method."},{"lang":"es","value":"La aplicación web JMX-Console en JBossAs en Red Hat JBoss Enterprise Application Platform (conocido como JBoss EAP o JBEAP) v4.2 anterior v4.2.0.CP09 y v4.3 anterior v4.3.0.CP08 realiza un control de acceso sólo para los métodos GET y POST, lo que permite a a atacantes remotos enviar peticiones en el manejador GET de la aplicación que usan un método diferente. \r\n"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2022-07-01T00:00:00+00:00","id":"CVE-2010-0738","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-05-25","cisaActionDue":"2022-06-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Red Hat JBoss Authentication Bypass Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-749"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:-:*:*:*:*:*:*","matchCriteriaId":"0D3EADF4-5496-4F5F-B0A6-DBF959C4D7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:-:*:*:*:*:*:*","matchCriteriaId":"FE2A6BEF-2917-437C-A1D5-EE1601FC0A5F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=132129312609324&w=2","source":"secalert@redhat.com","tags":["Exploit","Mailing List"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39563","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8408","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1023918","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/39710","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/0992","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=574105","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/58147","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0376.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0377.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0378.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0379.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=132129312609324&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1023918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/39710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/0992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=574105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/58147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0378.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0379.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0738","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2010-1282","sourceIdentifier":"psirt@adobe.com","published":"2010-05-13T17:30:02.093","lastModified":"2026-06-16T23:18:01.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file."},{"lang":"es","value":"Adobe Shockwave Player anterior a v11.5.7.609 permite a atacantes remotos provocar una denegación de servicio (bucle infinito y consumo de CPU) a través de la manipulación del tamaño de un fichero .dir (también conocido como Director)"}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*","versionEndExcluding":"11.5.7.609","matchCriteriaId":"7A79D960-7961-4737-B69E-C070DA62C9AD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"4C56F007-5F8E-4BDD-A803-C907BCC0AF55"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0137.html","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://hi.baidu.com/fs_fx/blog/item/f8de1d18ba8c9b76dbb4bd56.html","source":"psirt@adobe.com","tags":["Not Applicable"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-12.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/511254/100/0/threaded","source":"psirt@adobe.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/40088","source":"psirt@adobe.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/1128","source":"psirt@adobe.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7388","source":"psirt@adobe.com","tags":["Third Party Advisory","Tool Signature"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0137.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://hi.baidu.com/fs_fx/blog/item/f8de1d18ba8c9b76dbb4bd56.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/511254/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/40088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/1128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Tool Signature"]}]}},{"cve":{"id":"CVE-2010-1637","sourceIdentifier":"secalert@redhat.com","published":"2010-06-22T17:30:01.103","lastModified":"2026-06-16T23:18:45.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number."},{"lang":"es","value":"El plugin Mail Fetch en SquirrelMail 1.4.20 y versiones anteriores, permite a atacantes remotos autenticados eludir las restricciones del firewall y usar SquirrelMail como un proxy para escanear redes internas mediante un número de puerto POP3 modificado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.20","matchCriteriaId":"4C85CDDA-ED8F-4878-807D-D725E83354F9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*","matchCriteriaId":"E44669D7-6C1E-4844-B78A-73E253A7CC17"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*","matchCriteriaId":"A2D59BD0-43DE-4E58-A057-640AB98359A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.8","matchCriteriaId":"5472AEFC-EA25-49B1-AA2B-8405099B4FBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.8","matchCriteriaId":"BD16A092-B263-400F-BD7E-94DEB5D57EDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf#page=69","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043239.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043258.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043261.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0103.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40307","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://squirrelmail.org/security/issue/2010-06-21","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/functions.php?r1=13951&r2=13950&pathrev=13951","source":"secalert@redhat.com","tags":["Product"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/options.php?r1=13951&r2=13950&pathrev=13951","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT5130","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:120","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/05/25/3","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2010/05/25/9","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/21/1","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://www.securityfocus.com/bid/40291","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/40307","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/1535","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1536","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1554","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf#page=69","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043239.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043258.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043261.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://squirrelmail.org/security/issue/2010-06-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/functions.php?r1=13951&r2=13950&pathrev=13951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/options.php?r1=13951&r2=13950&pathrev=13951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT5130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/05/25/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2010/05/25/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/21/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.securityfocus.com/bid/40291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/40307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/1535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2010-2249","sourceIdentifier":"secalert@redhat.com","published":"2010-06-30T18:30:01.847","lastModified":"2026-06-16T23:20:23.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks."},{"lang":"es","value":"Fuga de memoria en pngrutil.c en libpng anteriores a v1.2.44 y v1.4.x anteriores a v.1.4.3, permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) a través de una imagen que contiene un troceado mal formado del Physical Scale (también conocido como sCAL)"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.44","matchCriteriaId":"0A7768B8-2319-4AAF-B38E-A3B21A37B0FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.3","matchCriteriaId":"13C02A4C-7A19-4F0D-A192-C031833576D6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2","matchCriteriaId":"BE850901-4B2A-4C98-836A-40683CB02FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"5.0.4","matchCriteriaId":"57A2B591-583F-4644-A900-4890FEFEE18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"4.1","matchCriteriaId":"3D97C1BD-57D8-4131-B437-6BA9F41C8F50"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1.0","matchCriteriaId":"407115F2-CC65-448B-8133-D3D57AD306BA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*","matchCriteriaId":"E44669D7-6C1E-4844-B78A-73E253A7CC17"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*","matchCriteriaId":"A2D59BD0-43DE-4E58-A057-640AB98359A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*","matchCriteriaId":"25CBACD3-AFB7-410D-927F-0C1FF477D396"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*","matchCriteriaId":"EE26596F-F10E-44EF-88CA-0080646E91B9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5","versionEndExcluding":"2.5.5","matchCriteriaId":"926563F5-E868-4E88-A1F8-B29624FB2438"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"3.1.2","matchCriteriaId":"F01F27AB-A8F6-455B-9495-821520435771"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0","versionEndExcluding":"6.5.5","matchCriteriaId":"894BC4D6-EBB6-4743-A860-170D7D31196A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1.2","matchCriteriaId":"0D23900B-C027-44C5-B912-9F7F71C7EBD1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000105.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40302","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40336","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40472","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40547","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41574","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42314","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42317","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4554","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4566","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2072","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.libpng.org/pub/png/libpng.html","source":"secalert@redhat.com","tags":["Product","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:133","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/41174","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1024723","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-960-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0014.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1612","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1637","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1755","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1837","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1846","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1877","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/2491","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=608644","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59816","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.libpng.org/pub/png/libpng.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/41174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1024723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-960-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/2491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=608644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-4895","sourceIdentifier":"cve@mitre.org","published":"2010-09-08T20:00:02.620","lastModified":"2026-06-16T23:14:33.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, related to the put_tty_queue and __f_setown functions.  NOTE: the vulnerability was addressed in a different way in 2.6.32.9."},{"lang":"es","value":"Condición de carrera en la función  tty_fasync en drivers/char/tty_io.c en el kernel de Linux v2.6.32.6, permite a usuarios locales provocar una denegación de servicio (deferencia puntero nulo o caída del sistema) o posiblemente tener otro impacto no especificado a través de vectores desconocidos, relacionado con las funciones put_tty_queue y __f_setown. NOTA: la vulnera fue dirigida de un modo distinto en v2.6.32.9."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"},{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.32.6","matchCriteriaId":"C88967E3-724D-49A0-8831-8EB423661624"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2094","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/15/2","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/15/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/15/4","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/15/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1000-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=14605","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=559100","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/15/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/15/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/15/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/15/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1000-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=14605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=559100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2066","sourceIdentifier":"secalert@redhat.com","published":"2010-09-08T20:00:02.667","lastModified":"2026-06-16T23:19:55.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor."},{"lang":"es","value":"La función  mext_check_arguments en  fs/ext4/move_extent.c en el kernel de Linux anterior a v2.6.35, permite a usuarios locales sobrescribir una archivo de solo-añadir (append-only) a través de una llamada MOVE_EXT ioctl que especifica este archivo como un donante."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.35","matchCriteriaId":"ABBE25DF-453B-47E6-A6ED-6984E7576F69"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0B6BA46F-4E8C-4B2A-AE92-81B9F1B4D56C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:*","matchCriteriaId":"EB74DEB4-2BD1-4A65-AFDA-C331BC20C178"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:*","matchCriteriaId":"10A193CD-12B9-4236-8A2C-E8CEAE592952"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*","matchCriteriaId":"F691F4E7-2FF1-4EFB-B21F-E510049A9940"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1f5a81e41f8b1a782c68d3843e9ec1bfaadf7d72","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/43315","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/07/1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/09/1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0610.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1000-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=601006","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1f5a81e41f8b1a782c68d3843e9ec1bfaadf7d72","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/43315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/07/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/09/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0610.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1000-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=601006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2942","sourceIdentifier":"secalert@redhat.com","published":"2010-09-21T18:00:02.127","lastModified":"2026-06-16T23:21:48.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c."},{"lang":"es","value":"La implementación de acciones en la funcionalidad de encolado de red en el kernel Linx anterior a v2.6.36-rc2 no inicializa apropiadamente ciertos miembros de estructura cuando se realizan acciones de volcado, lo que permite a usuarios locales obtener información potencialmente sensible de la memoria del kernel a través de vectores relacionados con (1) la funcion tcf_gact_dump en net/sched/act_gact.c, (2) la funcion tcf_mirred_dump en net/sched/act_mirred.c, (3) la funcion tcf_nat_dump en net/sched/act_nat.c, (4) la funcion tcf_simp_dump en net/sched/act_simple.c, y (5) la funcion tcf_skbedit_dump en net/sched/act_skbedit.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.35.13","matchCriteriaId":"2C162EC4-E7AD-47B4-B974-EF9F9468E80F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.36:-:*:*:*:*:*:*","matchCriteriaId":"D4407EF9-4ECF-408F-9ECB-0705E3FB65D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.36:rc1:*:*:*:*:*:*","matchCriteriaId":"DBE26099-6D2C-4FAF-B15C-CBF985D59171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*","matchCriteriaId":"5646FDE9-CF21-46A9-B89D-F5BBDB4249AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"F140C5CF-5141-4F8D-B667-522A698AC632"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:-:*:*:*:*:*:*","matchCriteriaId":"17C0CB9A-F8FA-423D-9D0E-64DC6525CD4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:*","matchCriteriaId":"10A193CD-12B9-4236-8A2C-E8CEAE592952"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3:*:*:*:*:*:*","matchCriteriaId":"A516C153-239B-4F41-88B4-8B8D4F92115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"DE5FEEB4-95BC-47AF-A6EA-FEF4C2AF1A2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*","matchCriteriaId":"F691F4E7-2FF1-4EFB-B21F-E510049A9940"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_communication_manager:5.2:*:*:*:*:*:*:*","matchCriteriaId":"B6567360-D041-4C5A-A9DF-39223E5FF895"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_presence_services:6.0:*:*:*:*:*:*:*","matchCriteriaId":"47508B6A-134F-4795-A5D1-4256D38BCE57"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_presence_services:6.1:*:*:*:*:*:*:*","matchCriteriaId":"876BFAD3-DF3C-419D-89AD-160BC15F2B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_presence_services:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C308358C-A051-4E86-8621-EC7DEC866C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_session_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C5F5625-1601-4EFC-B710-58B145F10708"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_session_manager:5.2:*:*:*:*:*:*:*","matchCriteriaId":"CB6AB5D8-6E22-483E-A91E-0880FF9A2C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_session_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D17B8A88-2355-409B-BF79-8BE78BCBC66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_manager:5.2:*:*:*:*:*:*:*","matchCriteriaId":"44D546F5-2751-41F0-9442-8F1EB904E294"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E7C82ABC-54B9-454C-A9F9-2DBFF1D62364"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1A137E-0BA3-4E17-AC1F-AEB92C205B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_manager:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9C7E6391-D86C-45AF-962C-7162FC8B706C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_platform:1.1:*:*:*:*:*:*:*","matchCriteriaId":"76E0FA7D-9F1B-4B1D-8B2D-85D2ED6DC00C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_platform:6.0:-:*:*:*:*:*:*","matchCriteriaId":"A7F1DDA6-7664-41AA-8364-8BEF7834531E"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_platform:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"DC1A931C-EEB1-4630-A1F5-C0B5166724A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:iq:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C850D33E-6E6A-4AAC-96B9-8510C902E38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:iq:5.1:*:*:*:*:*:*:*","matchCriteriaId":"75A6A088-DE78-406D-AC52-66159B8A9869"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:voice_portal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D5795B04-82E1-4289-BC45-02AEFA0C28F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:voice_portal:5.1:-:*:*:*:*:*:*","matchCriteriaId":"9F2CA6D2-CED8-4A72-8D34-2A9310AA724D"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:voice_portal:5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DAAEB2D-7C42-4610-B9DD-810788C979C0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0B6BA46F-4E8C-4B2A-AE92-81B9F1B4D56C"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=1c40be12f7d8ca1d387510d39787b12e512a7ce8","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://patchwork.ozlabs.org/patch/61857/","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/41512","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/46397","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.avaya.com/css/P8/documents/100113326","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc2","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/08/18/1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/08/19/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0723.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0771.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0779.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/42529","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1000-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2430","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0298","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=624903","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=1c40be12f7d8ca1d387510d39787b12e512a7ce8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://patchwork.ozlabs.org/patch/61857/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/41512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/46397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/css/P8/documents/100113326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/08/18/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/08/19/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0723.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0771.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0779.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/42529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1000-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=624903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-3078","sourceIdentifier":"secalert@redhat.com","published":"2010-09-21T18:00:05.893","lastModified":"2026-06-16T23:22:05.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call."},{"lang":"es","value":"La función xfs_ioc_fsgetxattr en fs/xfs/linux-2.6/xfs_ioctl.c del kernel Linux anterior a v2.6.36-rc4 no inicializa apropiadamente ciertos miembros de estructura, lo que permite a usuarios locales obtener información potencialmente sensible de la pila de memoria del kernel a través de una llamada ioctl."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.35.4","matchCriteriaId":"FC70229A-6997-4ECC-8643-5292E58B7C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.36:-:*:*:*:*:*:*","matchCriteriaId":"D4407EF9-4ECF-408F-9ECB-0705E3FB65D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.36:rc1:*:*:*:*:*:*","matchCriteriaId":"DBE26099-6D2C-4FAF-B15C-CBF985D59171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.36:rc2:*:*:*:*:*:*","matchCriteriaId":"F2C193FF-3723-4BE9-8787-DED7D455FA8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.36:rc3:*:*:*:*:*:*","matchCriteriaId":"F874FE6A-968D-47E1-900A-E154E41EDAF8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*","matchCriteriaId":"5646FDE9-CF21-46A9-B89D-F5BBDB4249AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:*","matchCriteriaId":"10A193CD-12B9-4236-8A2C-E8CEAE592952"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*","matchCriteriaId":"F691F4E7-2FF1-4EFB-B21F-E510049A9940"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0B6BA46F-4E8C-4B2A-AE92-81B9F1B4D56C"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a122eb2fdfd78b58c6dd992d6f4b1aaef667eef9","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/41284","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41512","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42890","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/46397","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1024418","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.linux.sgi.com/archives/xfs-masters/2010-09/msg00002.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/09/07/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/09/07/12","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0839.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0007.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/43022","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1000-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2430","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0298","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=630804","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a122eb2fdfd78b58c6dd992d6f4b1aaef667eef9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/41284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/46397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1024418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linux.sgi.com/archives/xfs-masters/2010-09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/09/07/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/09/07/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0839.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/43022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1000-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=630804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2538","sourceIdentifier":"secalert@redhat.com","published":"2010-09-30T15:00:01.893","lastModified":"2026-06-16T23:20:56.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 might allow local users to obtain sensitive information via a BTRFS_IOC_CLONE_RANGE ioctl call."},{"lang":"es","value":"Desbordamiento de entero en la función btrfs_ioctl_clone en fs/btrfs/ioctl.c en el kernel Linux, en versiones anteriores a la 2.6.35, puede permitir a usuarios locales obtener información sensible mediante una llamada ioctl BTRFS_IOC_CLONE_RANGE."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.35","matchCriteriaId":"ABBE25DF-453B-47E6-A6ED-6984E7576F69"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*","matchCriteriaId":"60FBDD82-691C-4D9D-B71B-F9AFF6931B53"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:*","matchCriteriaId":"EB74DEB4-2BD1-4A65-AFDA-C331BC20C178"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*","matchCriteriaId":"EE26596F-F10E-44EF-88CA-0080646E91B9"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ebc3464781ad24474abcbd2274e6254689853b5","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42758","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/07/21/10","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/07/21/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/41854","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1041-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0070","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=616998","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ebc3464781ad24474abcbd2274e6254689853b5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/07/21/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/07/21/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/41854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1041-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=616998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-3079","sourceIdentifier":"secalert@redhat.com","published":"2010-09-30T15:00:02.050","lastModified":"2026-06-16T23:22:05.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service (NULL pointer dereference and outage of all function tracing files) via an lseek call on a file descriptor associated with the set_ftrace_filter file."},{"lang":"es","value":"kernel/trace/ftrace.c en el kernel Linux anterior a la versión 2.6.36-rc5, cuando está habilitado debugfs, no maneja adecuadamente la interacción entre la posesión mutex y operaciones llseek, lo que permite a usuarios locales provocar una denegación de servicio (interrupción de todas las funciones de rastreo de archivos) mediante una llamada lseek en un descriptor de fichero asociado con el fichero set_ftrace_filter."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.35.5","matchCriteriaId":"455EA6B1-4038-4A20-87D0-C005FF943EA0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*","matchCriteriaId":"CC6C1408-671A-4436-A825-12170CFB5C9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:*","matchCriteriaId":"EB74DEB4-2BD1-4A65-AFDA-C331BC20C178"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c55cb12c1c172e2d51e85fbb5a4796ca86b77e7","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42758","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.5","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0842.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/43684","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1041-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0070","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0298","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=631623","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c55cb12c1c172e2d51e85fbb5a4796ca86b77e7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0842.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/43684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1041-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=631623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-4020","sourceIdentifier":"cve@mitre.org","published":"2010-12-02T16:22:21.207","lastModified":"2026-06-16T23:23:59.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations."},{"lang":"es","value":"MIT Kerberos 5 (también conocido como krb5) v1.8.x hasta v1.8.3 no rechaza las sumas de comprobación RC4 (clave de derivación), lo que podría permitir a usuarios remotos autenticados falsificar un (1) AD-SIGNEDPATH o (2) la firma AD-KDC-ISSUED, y posiblemente obtener privilegios, aprovechando el espacio de claves pequeñas que resultan de ciertas operaciones de cifrado de flujo de un byte (one-byte)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8:*:*:*:*:*:*:*","matchCriteriaId":"36823B2B-5C72-4FF3-9301-FB263EB8CE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"59AFA33E-FEBC-45F5-9EC6-8AA363163FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"04D83332-B2FD-4E86-A76C-C3F1CD3B3A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"758A0011-20ED-414A-9DF3-50A161DF8BC2"}]}]}],"references":[{"url":"http://kb.vmware.com/kb/1035108","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/69608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4581","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:246","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0925.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/514953/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/517739/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/45117","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1024803","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1030-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/3094","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/3095","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/3118","source":"cve@mitre.org"},{"url":"http://kb.vmware.com/kb/1035108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/69608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0925.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/514953/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/517739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/45117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1024803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-4343","sourceIdentifier":"secalert@redhat.com","published":"2010-12-29T18:00:02.867","lastModified":"2026-06-16T23:24:35.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operations on an fc_host statistics file."},{"lang":"es","value":"drivers/scsi/AMB/bfa_core.c en el kernel de Linux anterior a v2.6.35 no inicializa una estructura de datos en un determinado puerto, lo que permite a usuarios locales causar una denegación de servicio (caída del sistema) a través de las operaciones de lectura en un fichero de estadísticas fc_host."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.35","matchCriteriaId":"ABBE25DF-453B-47E6-A6ED-6984E7576F69"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0B6BA46F-4E8C-4B2A-AE92-81B9F1B4D56C"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7873ca4e4401f0ecd8868bf1543113467e6bae61","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42884","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/46397","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/12/08/3","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/12/09/15","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0017.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/45262","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.spinics.net/lists/linux-scsi/msg43772.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=661182","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7873ca4e4401f0ecd8868bf1543113467e6bae61","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/46397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2010/12/08/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/12/09/15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/45262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.spinics.net/lists/linux-scsi/msg43772.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=661182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}],"evaluatorComment":"Per: http://cwe.mitre.org/data/definitions/665.html\n\n'CWE-665: Improper Initialization'"}},{"cve":{"id":"CVE-2011-0199","sourceIdentifier":"product-security@apple.com","published":"2011-06-24T20:55:02.137","lastModified":"2026-06-16T23:26:59.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificates that lack OCSP URLs, which might allow man-in-the-middle attackers to spoof an SSL server via a revoked certificate."},{"lang":"es","value":"El componente de Política de Certificados de Confianza en Apple Mac OS X antes de v10.6.8  no realiza la comprobación de CRL para los certificados de Validación Extendida (EV) que carecen de direcciones URL OCSP, lo que podría permitir falsificar un servidor SSL a atacantes man-in-the-middle a través de una revocación certificado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-09T19:41:50.177264Z","id":"CVE-2011-0199","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.8","matchCriteriaId":"C49EABED-46D6-4AFC-A440-15B6A44D81E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.8","matchCriteriaId":"A890E117-79B8-434D-92DF-2CCF73469519"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4723","source":"product-security@apple.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/48447","source":"product-security@apple.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/48447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-5078","sourceIdentifier":"cve@mitre.org","published":"2011-06-30T15:55:01.583","lastModified":"2026-06-16T23:14:57.083","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document."},{"lang":"es","value":"contrib/pdfmark/pdfroff.sh en GNU troff (también conocido como groff) antes de v1.21 lanza el programa Ghostscript sin la opcion -dSAFER, lo que permite a usuarios remotos crear, sobrescribir, renombrar o eliminar archivos de su elección a través de un documento manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:*:*:*:*:*:*:*:*","versionEndIncluding":"1.20.1","matchCriteriaId":"7FF8D628-0287-470B-B8CA-18C7BF453B4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.10:*:*:*:*:*:*:*","matchCriteriaId":"35017C15-4CCD-4B44-9108-F5650319A009"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.11:*:*:*:*:*:*:*","matchCriteriaId":"B8AC4613-F1BE-4EEE-84C3-A13D2AC048B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.11a:*:*:*:*:*:*:*","matchCriteriaId":"2D6BD17C-0DE9-405D-BC02-E996FBC4F97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.14:*:*:*:*:*:*:*","matchCriteriaId":"5493392A-B8E1-4F71-A1ED-6889FD1CC217"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.15:*:*:*:*:*:*:*","matchCriteriaId":"BDF86410-1841-4549-A0FE-3D16C6CCE383"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.16:*:*:*:*:*:*:*","matchCriteriaId":"C91EE2C2-DE96-494D-BEEE-D07ED74EDEAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.16.1:*:*:*:*:*:*:*","matchCriteriaId":"EDB1389A-0F7D-4616-8553-AF1E40B05256"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.17.1:*:*:*:*:*:*:*","matchCriteriaId":"6D4A1AC6-2820-4992-B652-EF6FD308D643"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.17.2:*:*:*:*:*:*:*","matchCriteriaId":"59A32AD0-B019-4FAF-BC8A-01FE6F90628E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.18.1:*:*:*:*:*:*:*","matchCriteriaId":"A81CEA14-F694-431F-BAC9-BBB8CC09BBCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.19:*:*:*:*:*:*:*","matchCriteriaId":"3C3A17D1-F3A9-45FC-A943-C47B8121599C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.19.1:*:*:*:*:*:*:*","matchCriteriaId":"0D64601D-0EA0-40AD-9E25-74360051CC2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.19.2:*:*:*:*:*:*:*","matchCriteriaId":"1D944298-B544-4D38-96A3-5CA22C9C3C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.20:*:*:*:*:*:*:*","matchCriteriaId":"6F737E42-B8F1-4C9C-B3E9-382BCE43859D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.10.4","matchCriteriaId":"7883E465-932D-4C11-AA54-97E44181F906"}]}]}],"references":[{"url":"ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538338","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/08/09/1","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/08/10/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36381","source":"cve@mitre.org"},{"url":"https://support.apple.com/kb/HT205031","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/08/09/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/08/10/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT205031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2011-2501","sourceIdentifier":"secalert@redhat.com","published":"2011-07-17T20:55:01.483","lastModified":"2026-06-16T23:31:27.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data.  NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources."},{"lang":"es","value":"La función png_format_buffer en pngerror.c en libpng v1.0.x antes de v1.0.55, en v1.2.x antes de v1.2.45, en v1.4.x antes de v1.4.8, y en v1.5.x antesde v1.5.4, permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de una imagen PNG creada que desencadena una lectura out-of-bounds durante la copia de los datos del mensaje de error. NOTA: esta vulnerabilidad existe debido a una regresión CVE-2004-0421."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.55","matchCriteriaId":"457596BD-6D1A-4BF6-AB6B-00C015282A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.45","matchCriteriaId":"3E0A4818-9441-4057-BF47-EDC25FC9A3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.8","matchCriteriaId":"66F5725F-4C45-48C1-B31C-7A25E735AE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndExcluding":"1.5.4","matchCriteriaId":"25E29B1D-F756-40BE-8419-4224391D8D61"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*","matchCriteriaId":"BDE52846-24EC-4068-B788-EC7F915FFF11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*","matchCriteriaId":"A9BD9DD2-B468-4732-ABB1-742D83709B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"EF49D26F-142E-468B-87C1-BABEA445255C"}]}]}],"references":[{"url":"http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=65e6d5a34f49acdb362a0625a706c6b914e670af","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/45046","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45289","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45405","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45415","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45460","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45486","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45492","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49660","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201206-15.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.617466","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=BANLkTikrnU6FJNQYFvwmt78hwpgKPVRd1Q%40mail.gmail.com&forum_name=png-mng-implement","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2287","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:151","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/27/13","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/28/16","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1105.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/48474","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1175-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717084","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68517","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=65e6d5a34f49acdb362a0625a706c6b914e670af","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/45046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201206-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.617466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=BANLkTikrnU6FJNQYFvwmt78hwpgKPVRd1Q%40mail.gmail.com&forum_name=png-mng-implement","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/27/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/28/16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/48474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1175-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2011-2691","sourceIdentifier":"secalert@redhat.com","published":"2011-07-17T20:55:01.577","lastModified":"2026-06-16T23:31:48.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image."},{"lang":"es","value":"La función png_err en pngerror.c en libpng v1.0.x antes de v1.0.55, en v1.2.x antes de v1.2.45, en v1.4.x antes de v1.4.8, y en v1.5.x antes de v1.5.4, hace una llamada a la función con un argumento de puntero NULL en lugar de un argumento de cadena vacía, lo cual permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una imagen PNG creada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.55","matchCriteriaId":"457596BD-6D1A-4BF6-AB6B-00C015282A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.45","matchCriteriaId":"3E0A4818-9441-4057-BF47-EDC25FC9A3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.8","matchCriteriaId":"66F5725F-4C45-48C1-B31C-7A25E735AE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndExcluding":"1.5.4","matchCriteriaId":"25E29B1D-F756-40BE-8419-4224391D8D61"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*","matchCriteriaId":"BDE52846-24EC-4068-B788-EC7F915FFF11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]}],"references":[{"url":"http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=9dad5e37aef295b4ef8dea39392b652deebc9261","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/45046","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45405","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45492","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49660","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201206-15.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT5002","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2287","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.libpng.org/pub/png/libpng.html","source":"secalert@redhat.com","tags":["Product","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:151","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2011/07/13/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/48660","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720608","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68537","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=9dad5e37aef295b4ef8dea39392b652deebc9261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/45046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/45492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201206-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT5002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.libpng.org/pub/png/libpng.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2011/07/13/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/48660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2010-4655","sourceIdentifier":"secalert@redhat.com","published":"2011-07-18T19:55:00.737","lastModified":"2026-06-16T23:25:15.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call."},{"lang":"es","value":"net/core/ethtool.c en el kernel de Linux anterior a 2.6.36 no inicializa ciertas estructuras de datos, lo que permite a usuarios locales obtener información potencialmente sensible de la memoria dinámica del kernel elevando la capacidad CAP_NET_ADMIN de una llamada ethtool ioctl."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.36","matchCriteriaId":"C8DCE5E2-B055-4F05-8F0F-F19D1B7BA8D7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0B6BA46F-4E8C-4B2A-AE92-81B9F1B4D56C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b00916b189d13a615ff05c9242201135992fcda3","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2011/01/24/9","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/01/25/3","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/01/25/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/01/25/5","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/01/28/1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/46397","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/45972","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1146-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=672428","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2010/10/7/297","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b00916b189d13a615ff05c9242201135992fcda3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2011/01/24/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/01/25/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/01/25/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/01/25/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/01/28/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/46397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/45972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1146-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=672428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2010/10/7/297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-1776","sourceIdentifier":"secalert@redhat.com","published":"2011-09-06T16:55:07.680","lastModified":"2026-06-16T23:30:00.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577."},{"lang":"es","value":"La función is_gpt_valid en fs/partitions/efi.c en el kernel de Linux v2.6.39 no comprueba el tamaño de una Tabla de particiones GUID (GPT) de un Interface Firmware Extensible (EFI), lo que permite causar a atacantes físicamente próximos una denegación de servicio (desbordamiento de memoria basado en monticulo y OOPS) u obtener información confidencial de la memoria dinámica del kernel conectando un dispositivo GPT de almacenamiento hecho a mano. Se trata de una vulnerabilidad diferente a CVE-2011-1577."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:C","baseScore":5.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.39","matchCriteriaId":"176353CE-F17E-4776-AD9F-19014DA75B76"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:5.6:*:*:*:*:*:*:*","matchCriteriaId":"BB6ADFB8-210D-4E46-82A2-1C8705928382"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:5.6:*:*:*:*:*:*:*","matchCriteriaId":"2583A5FA-BDAF-4D3C-8616-C6B0ECCD057C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa039d5f6b126fbd65eefa05db2f67e44df8f121","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2011/05/10/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2011-0927.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/8369","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.pre-cert.de/advisories/PRE-SA-2011-04.txt","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/47796","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=703026","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa039d5f6b126fbd65eefa05db2f67e44df8f121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2011/05/10/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2011-0927.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/8369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.pre-cert.de/advisories/PRE-SA-2011-04.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/47796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=703026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-4107","sourceIdentifier":"secalert@redhat.com","published":"2011-11-17T19:55:01.517","lastModified":"2026-06-16T23:34:26.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack."},{"lang":"es","value":"La función simplexml_load_string en la importación XML plug-in (libraries/import/xml.php) en phpMyAdmin v3.4.x anterior a v3.4.7.1, v3.3.x y v3.3.10.5 permite a usuarios remotos autenticados leer ficheros arbitrarios a través de datos XML que contiene entidad de referencia externa, también conocido como un XML entidad externa (XXE) ataque de inyección."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0.0","versionEndExcluding":"3.3.10.5","matchCriteriaId":"07CC6931-2524-492E-9290-2388CD6435F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0.0","versionEndExcluding":"3.4.7.1","matchCriteriaId":"A872DC22-5EB5-4348-BEAD-61A59394AA51"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*","matchCriteriaId":"BDE52846-24EC-4068-B788-EC7F915FFF11"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*","matchCriteriaId":"9396E005-22D8-4342-9323-C7DEA379191D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*","matchCriteriaId":"706C6399-CAD1-46E3-87A2-8DFE2CF497ED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069625.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069635.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069649.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/76798","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://packetstormsecurity.org/files/view/106511/phpmyadmin-fileread.txt","source":"secalert@redhat.com","tags":["Broken Link","Exploit"]},{"url":"http://seclists.org/fulldisclosure/2011/Nov/21","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/46447","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8533","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2391","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:198","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/03/3","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/03/5","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2011-17.php","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/50497","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.wooyun.org/bugs/wooyun-2010-03185","source":"secalert@redhat.com","tags":["Broken Link","Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751112","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71108","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069625.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069635.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069649.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/76798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://packetstormsecurity.org/files/view/106511/phpmyadmin-fileread.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://seclists.org/fulldisclosure/2011/Nov/21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/46447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/03/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/03/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2011-17.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/50497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.wooyun.org/bugs/wooyun-2010-03185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2011-4461","sourceIdentifier":"cve@mitre.org","published":"2011-12-30T01:55:01.313","lastModified":"2026-06-16T23:34:55.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters."},{"lang":"es","value":"Jetty v8.1.0.RC2 y anteriores calcula los valores hash de los parámetros de forma, sin restringir la capacidad de desencadenar colisiones hash predecible, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) mediante el envío de gran cantidad de parámetros a mano."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:sun_storage_common_array_manager:6.9.0:*:*:*:*:*:*:*","matchCriteriaId":"085830DE-6A6B-4B04-B8DF-D6AE7A9C92E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:*:rc2:*:*:*:*:*:*","versionEndIncluding":"8.1.0","matchCriteriaId":"D5ACA837-EF69-45B5-912E-529C5E141CAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EFFAED25-216C-4AB0-BAF4-7ACCC04FFB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BF2825D2-57A6-4DC7-84DC-608AE123E04A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6500547B-8CDD-4595-AF2D-1A2014B66191"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C3D7BAEA-7F58-4FA3-9F34-CF5CBC4362E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"58750CF6-E237-4F28-A446-DE0E882BD6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"827C3682-91FA-42D4-A0DD-CC61CB94A9D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"45401E9F-9C20-4600-AE6A-CD0A1F30C4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F23500C7-2A70-4E28-97E6-13161AE1EBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"CA8A425F-BBF5-48D2-AD0E-6D97C7808A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"916600EC-3D21-4367-878B-8B0E19D10D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4877B638-8D6C-40ED-B6B5-23C8B7787F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"B522D870-8D99-42FB-9F33-4CD314369CB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"B3D046A5-C346-4E01-A0B2-0876FD8A3F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A07EEADC-A52B-4F99-9A68-4DED263992BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"DD72AC80-DA74-4F06-880A-87317917476E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBA5A992-A7FF-411F-9D8C-02A08090F9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"902C6363-358D-452B-A687-78486B58ABBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"279C47D8-6D64-4F70-824F-AA82FDE2BDD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D213EDC8-B7C5-4093-B10B-E7A207F159F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5293F817-6EBB-4B9A-BBA0-852FCC0641B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3E067B12-B4D8-4DDB-8F65-63205ABB20E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C32EDFC7-58D0-46B6-B946-72AB8C0A7463"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7AD9BC1D-0205-44CC-91BC-6588CDECB800"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9EEBD3B-19A6-4C35-B823-5F99286FC873"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FBA14BB2-E4C0-494A-98A9-5A9916259583"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"712FF994-343E-4316-9C6F-B57F95B5FEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C399FBC5-5133-4977-BD55-4AB1C8067CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"59244D30-6A90-40D5-8CD7-79EABBC2D58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"A004B7E0-158E-49E0-93D8-38B49B2C0448"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.b0:*:*:*:*:*:*:*","matchCriteriaId":"218A6DB9-D4A2-4063-B87B-953BDD5360D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.b1:*:*:*:*:*:*:*","matchCriteriaId":"4793A285-5346-4812-9C26-271F166C13B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:alpha0:*:*:*:*:*:*","matchCriteriaId":"2B62ACEB-5F1E-4147-ADB0-B16DFB56171D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:alpha1:*:*:*:*:*:*","matchCriteriaId":"265A00C8-C367-426C-BC5F-DD123F02D461"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta0:*:*:*:*:*:*","matchCriteriaId":"CC9EC9F5-A7E9-4118-84A5-068CAD51864B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta1:*:*:*:*:*:*","matchCriteriaId":"D4B6D8AE-47C5-422C-980C-58C60BBDD574"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta2:*:*:*:*:*:*","matchCriteriaId":"A35F3C2D-DC60-4347-90C1-239B233917A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta3:*:*:*:*:*:*","matchCriteriaId":"21109D6D-063C-4502-BDAB-5D255DAFF8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta4:*:*:*:*:*:*","matchCriteriaId":"EDC65F75-0CD7-4F5A-8BCD-F3F0CD494ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A259BF8E-00DD-4559-9925-FDD7D8C16F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C005200-8957-4A58-B7AE-B645C94C4C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"69780249-BE2F-424F-90F6-4CFC43D1DF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9DD32E82-427E-48F7-8D04-2793C78F855A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"4C2AAA1A-4D81-4B23-88B7-FFD05758A9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9414F1F6-63F9-4F7C-95EF-91CC4322ECE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C8DE3B94-DF72-4E61-B795-A0CD4A10D349"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"53E5B7F4-5543-43DA-8D26-09AE9D3A74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"B5E32A34-7C0B-4DF3-8CA7-35057EFD7800"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C61055B-E90D-4146-AEF2-B369ACE681CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.0a:*:*:*:*:*:*:*","matchCriteriaId":"453715D7-6E59-432D-B88E-A2573298B35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C44D3FB9-7CAA-4D6A-8D69-9E30CA42FFB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0A70B1E7-48D3-4EEE-9755-CDA6575D1550"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465F9B9A-C335-4341-A98C-8FECCC018FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"19DDA3F2-22FA-49EF-8F94-C11495C2CD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4E213CE6-0BFE-41DB-82BA-2C6A6D02455C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"BED8B2C4-1288-4385-B74F-59557F13E1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A3511BFF-CFE2-4938-8ACE-3638104CAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C36A7783-041F-4FD7-AEE2-5DFCD18E2343"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A795AA0C-A893-4BF8-A991-C997AEBF716C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"367F4809-D74B-4C05-9AB8-EE89D605A755"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"F93D0813-EC1B-4301-912B-D1C1D4260F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"E82EC442-85DA-4471-9871-67AFA32E8E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"C507301A-FDC0-42A5-A385-A4ADC8D4CD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"843E68E4-CD85-4BCB-8216-034FD1567E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"45519B5C-9713-4020-AC9E-95742C585152"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4E48CA5B-153A-4777-9E26-369C14B00179"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"843235B9-728A-450B-95D6-1FC694EF6D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"902945F1-4F11-4577-BD28-BB35E815F125"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"20A0597E-CFA6-404C-936E-3A8065FF9145"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"40951E40-8E30-465E-B1C0-A0C85ADBE217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"21D5C70A-64E4-434E-93CF-9FC6C510D545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"54D7108A-6CB6-46AC-B9CB-DF33F090C738"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc6:*:*:*:*:*:*","matchCriteriaId":"D3254B37-125F-44BA-87B6-0C4DEE0B214C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc7:*:*:*:*:*:*","matchCriteriaId":"78ECE463-E0EA-4691-90CA-E548FCACC4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc8:*:*:*:*:*:*","matchCriteriaId":"F466738D-D94C-4D89-AA2C-BE2E8E16FE1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77A320CE-96F5-4B2C-B2C7-7E8A7E5334BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34BBDAF7-EBE4-49B4-860A-3719006FFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5C8529EC-86A5-444A-8656-760DF95258DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"608F3AAA-F5CB-4694-90BB-75C66ACA8755"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8F3A4849-E341-4BE6-84AB-57A24E0922A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CAE6090A-AD1C-4831-8112-B4462980FAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a0:*:*:*:*:*:*:*","matchCriteriaId":"6A840DB6-BAB5-4FA8-B6AE-8DC94A82C791"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a1:*:*:*:*:*:*:*","matchCriteriaId":"9094D5D9-B3D4-4050-97C7-6F5FAF49CE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a2:*:*:*:*:*:*:*","matchCriteriaId":"23BF46B5-F614-4074-8C6A-0AE3A8EA3B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a3:*:*:*:*:*:*:*","matchCriteriaId":"9CD2E8FD-6381-43CA-8467-C968DB9A8D72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a4:*:*:*:*:*:*:*","matchCriteriaId":"A6C5F69E-75AF-40A8-9707-F9AEE79A146D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a5:*:*:*:*:*:*:*","matchCriteriaId":"D8D3A860-1747-47EF-9384-BD83F77E9A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a6:*:*:*:*:*:*:*","matchCriteriaId":"10393155-E386-420A-8699-68A3B49DE29C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a7:*:*:*:*:*:*:*","matchCriteriaId":"9494C7B4-65B0-46E2-B8F4-9325882FCF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a8:*:*:*:*:*:*:*","matchCriteriaId":"F4EA2E6E-DD73-4245-B9BA-DE7504AC805A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a9:*:*:*:*:*:*:*","matchCriteriaId":"E2B973C7-CB4D-4E65-8812-19FF963D1D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a90:*:*:*:*:*:*:*","matchCriteriaId":"D5620162-7E20-4AC6-BFCD-3302471B21BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a91:*:*:*:*:*:*:*","matchCriteriaId":"5B809408-895A-4909-9609-B529C3F9019E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a92:*:*:*:*:*:*:*","matchCriteriaId":"FC8EEECA-E493-45AE-BF20-466D90628C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a93:*:*:*:*:*:*:*","matchCriteriaId":"AB746413-10C2-4A75-9A8A-DEB839140F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a94:*:*:*:*:*:*:*","matchCriteriaId":"94F6250D-6360-4C9F-A124-CF8389084C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a95:*:*:*:*:*:*:*","matchCriteriaId":"0215E5C6-9CC0-41DE-988A-2810ACD8209E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a96:*:*:*:*:*:*:*","matchCriteriaId":"3A3B5B55-E4D0-4928-B4EA-D95CB28E81AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a97:*:*:*:*:*:*:*","matchCriteriaId":"5B5705E4-BA21-4320-8230-C6B6C3922338"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a98:*:*:*:*:*:*:*","matchCriteriaId":"7DF706A6-9418-4948-AD1D-989A7A41A464"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a99:*:*:*:*:*:*:*","matchCriteriaId":"C6196D65-AA3A-46D5-9A59-30846832D4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b01:*:*:*:*:*:*:*","matchCriteriaId":"A3CB6CA5-FDF5-495F-A631-ED43DC41C2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b02:*:*:*:*:*:*:*","matchCriteriaId":"DA22B8BC-52C4-4792-8804-24E5B87F701D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b03:*:*:*:*:*:*:*","matchCriteriaId":"2EC5AFE5-D0AC-4619-9C60-D151AEDBC27A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b04:*:*:*:*:*:*:*","matchCriteriaId":"A5689AB8-C02B-4F97-9AC7-A3EDDE7DB96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b05:*:*:*:*:*:*:*","matchCriteriaId":"DF1AA7EE-75BD-4D35-A071-D5F25080CE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc0:*:*:*:*:*:*","matchCriteriaId":"71684452-6A1D-4023-A10A-D078F24DC7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D28F3815-B209-4409-82EA-A083096F56D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc2:*:*:*:*:*:*","matchCriteriaId":"A547D1F8-3916-4D78-8ED6-0B2E1EB87BD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc3:*:*:*:*:*:*","matchCriteriaId":"2D4CFA43-DC62-42B5-8E96-9D6EFDF73145"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc4:*:*:*:*:*:*","matchCriteriaId":"D117126F-306B-44C7-A2BE-0A114E658847"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc5:*:*:*:*:*:*","matchCriteriaId":"DD6B826E-E97E-4287-B604-8810F79DDDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc6:*:*:*:*:*:*","matchCriteriaId":"12CE9A9F-1118-4C96-B37B-8D9D9E53228E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc7:*:*:*:*:*:*","matchCriteriaId":"6F0F93DB-CE46-42C9-A059-8F27FCC59FE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc8:*:*:*:*:*:*","matchCriteriaId":"1A9D25B8-D48B-43C5-A5AB-3D60C00A6DB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc9:*:*:*:*:*:*","matchCriteriaId":"EE783D81-02E5-4D78-A65C-572A69765D71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C6F236E4-2FB8-434E-A4AE-F5DA7CC94AEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F92CFF11-E18D-4D07-81D5-9ACE41084AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"54087E79-2212-4B35-A631-6C15AC70D413"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7E22496A-C88C-47D5-9F29-29CB184A626C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"139D9B00-5FDB-48E1-AFB3-098184E73318"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1512F40A-E056-42BD-A733-CBA4929CD2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9DE25824-2C05-4F96-BA2B-2EE0923CA35A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C7BEAC38-360A-4F4A-B3A2-DA5EF5310ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"34896B7F-3BA0-4D14-A6A8-042DDAE4B787"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A926CADB-EE62-4F54-9905-A8900103DBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"ACEF6355-DE50-4C9F-B96A-92F35714480B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"866E2E49-24D8-4216-9477-0C949EF8AC0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0:rc3:*:*:*:*:*:*","matchCriteriaId":"ECEC910E-A2FA-403D-B59C-AFD2BBFBD088"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C6D9F4F9-89A8-4884-9716-EF9FDA250120"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE0646AD-13A6-40A4-B06A-9BF6B1B8064A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:rc0:*:*:*:*:*:*","matchCriteriaId":"C5B71502-C203-41B0-A9F4-652A274660A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"A73A92E5-5779-4C54-B7E7-6A056B3998C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"D306CD82-93BB-4CF1-80EB-B567E9155395"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DAA932D-35F9-4052-A3FA-2FB09ED6A19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"03BEBC5F-26C8-480A-B986-64655DED1669"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E1738719-44A2-44D5-973E-F90282A9B9C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E912CA35-FCF6-4F06-9974-CCE2F246D570"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"ADBA3DFC-F229-49A6-9191-6A3975C18416"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.b0:*:*:*:*:*:*:*","matchCriteriaId":"5E8CCB26-4831-47D4-86B3-D15915E18246"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.b1:*:*:*:*:*:*:*","matchCriteriaId":"E8847B6C-6011-44DC-B97D-9D61354D9F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.b2:*:*:*:*:*:*:*","matchCriteriaId":"B6A5135B-C30A-41A3-9E22-97451AAE1931"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d0:*:*:*:*:*:*:*","matchCriteriaId":"583918DB-2E06-4AB0-BCFC-A373C40D72DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d1:*:*:*:*:*:*:*","matchCriteriaId":"507E24BC-6C1F-4CAC-B942-15293341162F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d2:*:*:*:*:*:*:*","matchCriteriaId":"D2ADAC7B-3CE6-444B-BE8A-35B945B028B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d3:*:*:*:*:*:*:*","matchCriteriaId":"1346595C-0416-40C7-9450-F4F1D17B647C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d4:*:*:*:*:*:*:*","matchCriteriaId":"76C1FB85-81DC-44FB-9960-FC7E2BB0B871"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C07610E5-454A-44A9-B341-B9642FA56EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc0:*:*:*:*:*:*","matchCriteriaId":"30E203AE-92EF-40EA-B7CD-8BFB88B4256E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6AE29CB8-80EE-4849-ACC1-A42AD07FEA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"AE47A5EA-A381-497F-B046-CA34A8940886"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"900CA07F-B7CE-4809-A6B6-1F24F7C10313"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"C39F3BB4-D4B7-4512-A86B-CB771233DD95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"6A333033-ACCB-4E0C-AF00-C419DEADEC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc6:*:*:*:*:*:*","matchCriteriaId":"EE935CEE-7B99-42EE-AE64-5EBCB776B20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AFB0FA4D-E6B1-4495-9D48-245D584F6DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB8D7C9F-5E0E-491B-A585-81BC09CA1893"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BC5ABD34-B873-425B-A518-AABB7998C3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"0D448AAA-51AC-4374-9E31-4FE78C65DF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.b0:*:*:*:*:*:*:*","matchCriteriaId":"8D1F5F9A-A55C-4FBA-8D79-1C84F3C8E2E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.b1:*:*:*:*:*:*:*","matchCriteriaId":"5579C03D-B65E-4579-B549-01C1BD339EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.d0:*:*:*:*:*:*:*","matchCriteriaId":"E63404EA-0893-487F-AAEC-EF477E7B5B74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.d1:*:*:*:*:*:*:*","matchCriteriaId":"BAE7F716-4C1B-4BF9-BC5C-B44CFA797412"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.d2:*:*:*:*:*:*:*","matchCriteriaId":"737FCDCE-43BB-4DE4-8082-E501EE26BA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2:*:*:*:*:*:*:*","matchCriteriaId":"7C11BF71-05F5-471A-ACB7-9E0BF740487E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D274307-4D78-4F4E-8F0C-2CE51D4EF0F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:beta0:*:*:*:*:*:*","matchCriteriaId":"60C25402-0A69-470B-8C9F-580BCC8E704A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:rc0:*:*:*:*:*:*","matchCriteriaId":"BE4AC5EC-4EE1-4641-A2D7-8D80E53A3800"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E7DD698C-9DB0-4D41-98D9-286DABB51CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F92C801-9C82-4174-A65E-9B6E9D97F5DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8CBDAE22-A78D-43EC-BC66-07A571DCB995"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DEE25A6C-CAEE-463A-A0B4-763058A5F199"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"93784446-870F-4714-A18C-EE7CF09E9A15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.4:rc0:*:*:*:*:*:*","matchCriteriaId":"3E6F6DA2-FF77-45C7-82DB-7699ED4AB1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1B32D70B-89DD-4A48-AEBC-0E6E93354808"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"51419B6C-A11C-4080-A8EE-FDB6E21269A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"66F37AA5-2602-42BC-9CB0-C6E53335D897"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.8_01:*:*:*:*:*:*:*","matchCriteriaId":"28527C05-D797-4E26-8BC9-57DD30F3F5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"E758E39E-4CAA-438A-B21A-00826C4000CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.9:rc1:*:*:*:*:*:*","matchCriteriaId":"829F2EA3-DF4F-4329-96EC-F8DDFD3018A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.9:rc2:*:*:*:*:*:*","matchCriteriaId":"4D4FE910-DF31-4CF9-9D20-6D4CD847D423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"ED8F5AB5-8402-49C5-A28D-433B0227DD3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:pre0:*:*:*:*:*:*","matchCriteriaId":"A64CB9CA-BBA1-4863-B54E-1097C8E3851B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:pre1:*:*:*:*:*:*","matchCriteriaId":"2B933981-DE49-4407-BCD5-E5FAC0583B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:pre2:*:*:*:*:*:*","matchCriteriaId":"42385DC4-BE2D-4156-8B65-EB0860A36EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"CEB54339-FADF-47F5-B171-7F5E50CCA4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"6437A8AB-462B-4C4E-B189-58026AE78804"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A1339AF7-DCCF-449A-A875-AF0AB5118569"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.14:rc0:*:*:*:*:*:*","matchCriteriaId":"0499A6D8-43CB-49AA-A1E7-0EE28956E894"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.14:rc1:*:*:*:*:*:*","matchCriteriaId":"8C12E374-9B1B-4952-9631-14143261E938"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"29BAE0E2-B245-46D8-AA11-D9BF40158A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.15:rc0:*:*:*:*:*:*","matchCriteriaId":"C6446496-9842-4677-8076-E3A720D37100"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.16:*:*:*:*:*:*:*","matchCriteriaId":"535ADA05-0809-4631-8CFD-ED22711995CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.17:*:*:*:*:*:*:*","matchCriteriaId":"8649DCC7-2A43-419C-AAD1-10290034A923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.18:*:*:*:*:*:*:*","matchCriteriaId":"C06E26FA-88DF-4F05-B08B-B0D760844453"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.19:*:*:*:*:*:*:*","matchCriteriaId":"2218730A-4DC2-492B-A1ED-7721D53CA1F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.20:*:*:*:*:*:*:*","matchCriteriaId":"F27BC968-7D4B-4661-9316-DA548BD0F52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.20:rc0:*:*:*:*:*:*","matchCriteriaId":"E926E761-FD3A-4156-8365-2FA3433D22F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.21:*:*:*:*:*:*:*","matchCriteriaId":"7E87A10C-A28D-46C8-B11D-301451FA969C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.22:*:*:*:*:*:*:*","matchCriteriaId":"174E3F20-6784-485A-922F-676FFE5BF406"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.23:*:*:*:*:*:*:*","matchCriteriaId":"A6B09CD0-9523-4333-BD5E-B8DF4AF201B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.23:rc0:*:*:*:*:*:*","matchCriteriaId":"E47CE334-8E29-4063-8957-BAA83B49FDED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.24:*:*:*:*:*:*:*","matchCriteriaId":"18B098A9-F324-49A0-9ACB-3E22D9C9F7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.24:rc0:*:*:*:*:*:*","matchCriteriaId":"9BE4C864-32A3-4507-977B-64D583AF74E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.24:rc1:*:*:*:*:*:*","matchCriteriaId":"E062D526-F046-4CC4-85B5-68AAF90F50AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.25:*:*:*:*:*:*:*","matchCriteriaId":"B56A6E02-1969-4F4F-82B6-7508C86FB9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.26:*:*:*:*:*:*:*","matchCriteriaId":"AE48DB9C-E0B4-403C-8D02-E7C3D6A6EFF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.27:*:*:*:*:*:*:*","matchCriteriaId":"2D19EB77-8D76-4B64-B715-8F57358CAECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha0:*:*:*:*:*:*","matchCriteriaId":"BA2DBF03-E810-4AE2-9A71-AEF6EA4E536B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"040585FC-6BE9-4B71-AD86-0D61FDEDB6B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"7B891FCB-0633-4C08-B16F-0A664D2DCE6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"54292E8D-D579-4589-BA95-E451C5C8E555"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:beta0:*:*:*:*:*:*","matchCriteriaId":"7F0FB14F-7024-4E40-9F02-CE368A813E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D5AAAABB-E5FA-4459-BDEE-FF9CD52CAF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"5884BEE2-3697-4B0E-83E5-1A198323B878"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"2A569C44-3A0B-4909-B649-4CF2E4933DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7904365A-D0A6-4D28-9FAB-341FE331B075"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"23A02116-6B1A-4F9F-8A63-C241ABD070D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"70C6274C-1F51-4FDD-BEC2-46B282F1F1F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1DAACAF6-7CA4-40A2-A9D0-65671FCC56E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0.0:rc0:*:*:*:*:*:*","matchCriteriaId":"B4E4471A-F016-4B23-A67E-BF25953D325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1:*:*:*:*:*:*:*","matchCriteriaId":"65A39819-5A0A-4413-9803-11451AF0143D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1:rc0:*:*:*:*:*:*","matchCriteriaId":"DE6D4E7F-11FC-4849-A5F5-DCD09752C666"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"ED4AC3A1-95B2-4E28-AE87-41ADC45C45DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"627AAA2A-0601-4ACD-BD48-369C95626A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6C4BFAA-1661-4EAA-840E-AC95B99E39D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.1:rc0:*:*:*:*:*:*","matchCriteriaId":"54CE8D50-4F58-4857-8580-84EAD15B73B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"8911C3D3-CE91-4F09-AFAF-F27AEA70D744"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4EF1A9C9-8F21-4A10-A801-AA29BC8AA509"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.2:pre0:*:*:*:*:*:*","matchCriteriaId":"D6EC919B-EA06-48DE-B3FC-C50396232C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"50A32E32-3E8B-46F4-865E-4FCD9DBD3FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc0:*:*:*:*:*:*","matchCriteriaId":"1CE35011-D35C-4B9C-9A79-962D7DD0DB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"0591418E-F324-4061-9719-90B64122FC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"B367B4F4-4D87-4BDA-B0A1-2603AA85B52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"37E42FDB-3F1C-4810-91F2-2E7292A3C425"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc4:*:*:*:*:*:*","matchCriteriaId":"FF735C84-651F-4971-A7EE-C73CE79828B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C1E3BF8D-CE7D-4810-B4C2-F7D1ACC5A350"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.4:rc0:*:*:*:*:*:*","matchCriteriaId":"B865666D-3AD2-4F8E-9371-A2CFB40DDE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D6283995-B660-4015-881C-36A8CC1869BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:rc0:*:*:*:*:*:*","matchCriteriaId":"36D7DF04-644D-4DF3-9005-6C52B00D0A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"224559B0-1A22-427A-AB55-51D6E7084617"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"B2AAEF6E-A978-4C2A-BBCB-1726C76E4DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D1D43081-A6F2-4E50-A4C7-9037EE36C830"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6E6A4797-85E9-4CE2-A751-F63CEEE07603"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.7:rc0:*:*:*:*:*:*","matchCriteriaId":"DA4B1901-CC70-4C02-9133-E7DEA251C316"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4497A7-8D80-4F2C-9A92-C171D5497056"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A98BE423-C6CA-4C34-859E-25D891FDC7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"7E158EB7-8424-4822-96DF-6308FCA77138"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"BB8BC6F9-C78A-4B76-9498-646C03EBDBDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.11:rc0:*:*:*:*:*:*","matchCriteriaId":"785057A7-9ECA-4A8C-8497-3AC344D69BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"97F39F8B-21F7-4D8D-838B-97B5B2B0658B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"C6CE0063-9A70-43F4-9427-067BD665BE3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"5CAD09DE-8D68-4DE6-B1E1-4308B2D0BCD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0D427FB0-D97B-40D7-A03D-FDB972C219FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha0:*:*:*:*:*:*","matchCriteriaId":"B9B1ACB4-A7B4-4207-8C71-045B4E066474"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"9EBB87BA-6FFA-40F1-9075-CACC03ECF964"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"53C17181-13E0-47F2-B35C-2375CC25B0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"6D2ACDC9-9FF6-4A25-9296-2E088606B38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta0:*:*:*:*:*:*","matchCriteriaId":"8665FE23-C558-4346-9920-36F0AE8A47AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3B19D912-0A07-4EED-A7D2-81C7493AE481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta10:*:*:*:*:*:*","matchCriteriaId":"DB95EB3C-61C4-46FB-AF57-1AEED089D014"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta11:*:*:*:*:*:*","matchCriteriaId":"96B26040-AAD7-4CE2-AFA5-FD711C36A4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta12:*:*:*:*:*:*","matchCriteriaId":"27027709-B180-4DAE-9385-3E407E3EF4A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta14:*:*:*:*:*:*","matchCriteriaId":"4E580541-5375-46AA-B42C-55B0F8C15758"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta15:*:*:*:*:*:*","matchCriteriaId":"DB9AA914-09E3-4346-BC9A-9DCBD0D1EA8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta16:*:*:*:*:*:*","matchCriteriaId":"803B064D-32BF-4137-A320-8B8579C269DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta17:*:*:*:*:*:*","matchCriteriaId":"7B5C42D8-5A59-4A23-A86D-538F285497FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"47FF0752-AB64-4352-9B55-2198EA927625"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7F933B53-4F01-42B8-AC09-1C31D4836093"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"CFD54477-BAE2-4833-AEDF-FAFD80F64F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"9C407D54-6828-4298-9331-7F94E0BF28E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"9861AD14-AFFB-4A4E-91BF-BF323230012A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta7:*:*:*:*:*:*","matchCriteriaId":"F8EC131C-BE8C-4F1C-AC83-8E84CF4199C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta8:*:*:*:*:*:*","matchCriteriaId":"CCF4C1FC-9F4C-4763-A7D9-9FFC8F0B392F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta9:*:*:*:*:*:*","matchCriteriaId":"06E74876-6E82-412C-8B74-019BF7CC71CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:betax:*:*:*:*:*:*","matchCriteriaId":"B8410DED-A0E5-4318-9370-7994D476CBBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc0:*:*:*:*:*:*","matchCriteriaId":"547FEA12-F46C-4585-92D1-B390452D982A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3956FC00-6776-42B6-8386-50F99F91833D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E1C831B8-C865-444D-A18B-569D80D27AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"47E41EF8-5DD7-4018-ABF9-1FCEFA631351"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"32EDB585-7123-40F1-84B2-36F0282E7C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6FEA754C-343D-4FB3-BA64-4C7691285126"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C1CFEDA-5F30-48B9-8B0F-E36CB579DDED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"586B69D3-7734-4ECA-8E84-8FEB2A914471"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre0:*:*:*:*:*:*","matchCriteriaId":"D61DE1A4-36B9-4EDD-9628-B736318973C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre1:*:*:*:*:*:*","matchCriteriaId":"C981EEAA-1D2B-44BC-9ED5-D3851F31A67F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre2:*:*:*:*:*:*","matchCriteriaId":"6A7D5DD4-EB54-4C4C-8090-421C3319EDEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre3:*:*:*:*:*:*","matchCriteriaId":"ADB640DA-460C-45EC-8F02-A03E055ED15F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc0:*:*:*:*:*:*","matchCriteriaId":"079E0899-2130-431E-9805-013A8B853BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"10681635-C15C-44C8-BFB5-67912D4D39E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E75B9E0D-D7CD-47EA-AB0C-86645CA2DF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"A877189B-8D9E-4A09-AC1C-831D0E15E686"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A411147B-CE7E-4277-A5DF-83B90C4FC97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.1:rc0:*:*:*:*:*:*","matchCriteriaId":"0615E5DF-590A-454D-BEE3-ACEB16DD83E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B83BFC82-97CF-40FF-B087-3B2B2DC5EE4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:pre0:*:*:*:*:*:*","matchCriteriaId":"B5DE9EF1-22BC-4182-8905-038AA06F8A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:pre1:*:*:*:*:*:*","matchCriteriaId":"3DAB11DB-4B81-4DDA-A29F-DEE72658E903"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc0:*:*:*:*:*:*","matchCriteriaId":"2CCEF874-0F28-40F3-84D7-9B2F1510054A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"84A6F86D-B74A-467E-A16C-25A255CC61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"C1BC12C8-98F4-4F41-979C-540F08908199"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"B4B5666F-C034-4656-A2D8-5D804CA3AA66"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc4:*:*:*:*:*:*","matchCriteriaId":"F7EC937F-3C86-4E63-86E2-0118DAD15430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc5:*:*:*:*:*:*","matchCriteriaId":"699F1242-4422-4134-B191-F42CA8EAA91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B7810EC-58C5-4BB4-B2E5-6196364B3F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"56644769-E21B-46E3-9131-4078500F9B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.4:rc0:*:*:*:*:*:*","matchCriteriaId":"812CC60A-71D8-47E2-BE60-BCE975418047"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"3B860EF7-0F72-45D6-B4B6-D3E29B07F88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A2C2A9E3-8C89-4D2D-AECA-55415DDD4BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.5:rc0:*:*:*:*:*:*","matchCriteriaId":"F3550007-F89A-4164-BA45-30104347E463"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5A8E5744-F4FB-4D67-9DEA-938FDC66B7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.6:rc0:*:*:*:*:*:*","matchCriteriaId":"80BFA8A6-2EC8-4BD4-BAA8-768246EC277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.6:rc1:*:*:*:*:*:*","matchCriteriaId":"CC92AA15-22D9-4213-BC7D-C36FBE4B249D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DC998D08-61EC-45EE-AC67-41CB2B96BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.8:*:*:*:*:*:*:*","matchCriteriaId":"717F839C-2DDC-4D1F-84EE-8F87F4030904"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.9:*:*:*:*:*:*:*","matchCriteriaId":"66649F13-2EAE-4F76-B21C-585C57921655"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.10:*:*:*:*:*:*:*","matchCriteriaId":"BBD66FB6-F007-46DA-82B6-5083C75E5C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2D85A1B1-4E94-4F7C-B363-1F8C18999E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:*:*:*:*:*:*:*","matchCriteriaId":"DF21570D-1EEF-4254-9BF2-8CAE8B408407"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc1:*:*:*:*:*:*","matchCriteriaId":"01A59DB6-B292-4040-9945-5ADADFBDFC6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc2:*:*:*:*:*:*","matchCriteriaId":"41419D41-EE7A-4464-94E7-847BD72EAAE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc3:*:*:*:*:*:*","matchCriteriaId":"5E16D7BC-9BCE-4FFD-9289-E7D951DA254A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc4:*:*:*:*:*:*","matchCriteriaId":"859687C2-C15E-4D6B-B109-39F9AE80397C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc5:*:*:*:*:*:*","matchCriteriaId":"F6563B61-601D-4C8A-9572-BD848C3A8313"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.14:*:*:*:*:*:*:*","matchCriteriaId":"D05A27CC-C36F-425A-B72B-8F3DE19D5587"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:*:*:*:*:*:*:*","matchCriteriaId":"76857BA7-99D9-489B-8ED5-292DAA083931"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:pre0:*:*:*:*:*:*","matchCriteriaId":"2C4AE268-006A-4EDE-8D2E-3CCD35F8EC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc2:*:*:*:*:*:*","matchCriteriaId":"8F726A16-C432-4679-A904-37C0FE820883"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc3:*:*:*:*:*:*","matchCriteriaId":"81586EBF-EDFB-42C9-B5E2-BE29B66CE968"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc4:*:*:*:*:*:*","matchCriteriaId":"20E0FB52-1B22-46E5-B83D-D88513A3E314"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc5:*:*:*:*:*:*","matchCriteriaId":"1D9C76FD-3612-410F-AB14-A36D2C520439"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.16:*:*:*:*:*:*:*","matchCriteriaId":"F1A35CE4-EAA9-4CDB-A54D-79AA844AF279"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8F616992-6D50-457F-B699-D0DCA3D46C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.20:*:*:*:*:*:*:*","matchCriteriaId":"DAE13225-F90F-4ABC-87A0-DBE63E91FC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.21:*:*:*:*:*:*:*","matchCriteriaId":"2CC32E7B-FCFD-492A-970C-FA4C4AD49709"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E8DF87A1-6CE0-4232-8801-43DE4D0D38E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:m1:*:*:*:*:*:*","matchCriteriaId":"87F81322-4604-43D5-B57E-3E56A66F22B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:m2:*:*:*:*:*:*","matchCriteriaId":"DE2B8741-83A1-411A-AF03-706030DB695E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:pre0:*:*:*:*:*:*","matchCriteriaId":"8C6457AD-D323-446C-969D-9714FA13ECB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:pre1:*:*:*:*:*:*","matchCriteriaId":"9104207F-ACD0-4B65-B29B-5F071F7980B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:pre3:*:*:*:*:*:*","matchCriteriaId":"08C7BEF3-B0F2-451A-8470-59FEDB8B0D36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=143387688830075&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/47408","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/48981","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/903934","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nruns.com/_downloads/advisory28122011.pdf","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2011-003.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1026475","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1429-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72017","source":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20190307-0004/","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143387688830075&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/47408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/903934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nruns.com/_downloads/advisory28122011.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2011-003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1429-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20190307-0004/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-0930","sourceIdentifier":"cve@mitre.org","published":"2012-01-28T01:55:01.547","lastModified":"2026-06-16T23:38:31.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en PLCs Modicon Quantum de Schneider Electric permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:schneider-electric:modicon_quantum_plc:-:*:*:*:*:*:*:*","matchCriteriaId":"8E2B3D6F-F83D-4778-9C5F-6BB6131FA78D"}]}]}],"references":[{"url":"http://secunia.com/advisories/47723","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/51605","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72590","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://secunia.com/advisories/47723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/51605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2011-1573","sourceIdentifier":"secalert@redhat.com","published":"2012-02-02T04:09:47.690","lastModified":"2026-06-16T23:29:39.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data."},{"lang":"es","value":"net/sctp/sm_make_chunk.c del kernel de Linux en versiones anteriores a 2.6.34, si se utiliza addip_enable y auth_enable, no considera la cantidad de \"padding\" durante el cálculo de la longitud para los segmentos (\"chunks\")(1) INIT y (2) INIT ACK, lo que permite a atacantes remotos provocar una denegación de servicio (OOPS) a través de paquetes modificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-682"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.34","matchCriteriaId":"6BA10979-D59C-4A33-ACC8-A110A5ACFF74"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8170c35e738d62e9919ce5b109cf4ed66e95bde","source":"secalert@redhat.com"},{"url":"http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.34","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://openwall.com/lists/oss-security/2011/04/11/12","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/04/11/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2011-0927.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=695383","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8170c35e738d62e9919ce5b109cf4ed66e95bde","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.34","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://openwall.com/lists/oss-security/2011/04/11/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/04/11/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2011-0927.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=695383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2012-0767","sourceIdentifier":"psirt@adobe.com","published":"2012-02-16T19:55:01.303","lastModified":"2026-06-16T23:38:13.193","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS),\" as exploited in the wild in February 2012."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en Adobe Flash Player antes de v10.3.183.15 y v11.x antes de v11.1.102.62 en Windows, Mac OS X, Linux y Solaris. Antes de v11.1.111.6 en Android v2.x y v3.x; y antes de v11.1.115.6 en Android v4.x permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados. Se trata de un problema también conocido como \"Universal XSS (UXSS)\". Tal y como se explotó en Febrero de 2012."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-04T22:03:58.859713Z","id":"CVE-2012-0767","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-06-08","cisaActionDue":"2022-06-22","cisaRequiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","cisaVulnerabilityName":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndExcluding":"10.3.183.15","matchCriteriaId":"CEAE5A28-12B7-40FF-A76D-A105BCF477FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionEndExcluding":"11.1.102.62","matchCriteriaId":"7F17F0EC-55D8-4EC8-99B3-7E0F01A207E6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"},{"vulnerable":false,"criteria":"cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*","matchCriteriaId":"F5027746-8216-452D-83C5-2F8E9546F2A5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndExcluding":"11.1.111.6","matchCriteriaId":"5C53FEAC-FCCE-4B1F-8487-DA8BC5E26B9A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"3.2","matchCriteriaId":"82EF984A-D3B9-4648-BC39-A565D8F94144"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndExcluding":"11.1.115.6","matchCriteriaId":"0C863379-CB4E-49A5-B2C3-710FA4F2404A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0144.html","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48265","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48819","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201204-07.xml","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb12-03.html","source":"psirt@adobe.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14806","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15933","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201204-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb12-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0767","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2011-3637","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:31.540","lastModified":"2026-06-16T23:33:40.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vectors that trigger an m_start error."},{"lang":"es","value":"La función m_stop en fs/proc/task_mmu.c en el kernel de Linux antes de v2.6.39 permite a usuarios locales provocar una denegación de servicio a través de vectores que provocan un error m_start."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.39","matchCriteriaId":"176353CE-F17E-4776-AD9F-19014DA75B76"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}]}]}],"references":[{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=76597cd31470fa130784c78fadb4dab2e624a723","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/02/06/1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747848","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/76597cd31470fa130784c78fadb4dab2e624a723","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=76597cd31470fa130784c78fadb4dab2e624a723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/02/06/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/76597cd31470fa130784c78fadb4dab2e624a723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-4097","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:32.303","lastModified":"2026-06-16T23:34:25.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a certain large amount of memory."},{"lang":"es","value":"Desbordamiento de entero en la función oom_badness en mm/oom_kill.c en el núcleo de Linux anteriores a v3.1.8 en plataformas de 64 bits, que permite a usuarios locales causar una denegación de servicio (consumo de memoria y terminación del proceso) mediante el uso de una cierta cantidad grande de memoria."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:x64:*","versionEndExcluding":"3.1.8","matchCriteriaId":"7AC86F0A-F1BE-4A46-B027-0C982228BD25"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}]}]}],"references":[{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/01/2","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=750399","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/56c6a8a4aadca809e04276eabe5552935c51387f","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/01/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=750399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/56c6a8a4aadca809e04276eabe5552935c51387f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-4112","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:32.757","lastModified":"2026-06-16T23:34:26.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability to access /proc/net/pktgen/pgctrl, and then using the pktgen package in conjunction with a bridge device for a VLAN interface."},{"lang":"es","value":"El subsistema de red en el kernel de Linux antes de v3.1 no restringe adecuadamente el uso de la bandera IFF_TX_SKB_SHARING, lo que permite a usuarios locales causar una denegación de servicio (panic) mediante el aprovechamiento de la funcionalidad CAP_NET_ADMIN para acceder a /proc/net/pktgen/pgctrl para, a continuación, usar el paquete pktgen junto con un dispositivo de puente para una interfaz VLAN."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"156989A4-23D9-434A-B512-9C0F3583D13D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:9608_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.6.0","matchCriteriaId":"F84E862C-FBF3-416E-8EF0-58A84B5F3F73"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:avaya:9608:-:*:*:*:*:*:*:*","matchCriteriaId":"A19365A8-CCD5-410E-BB2D-1B8C1E995768"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:9608g_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.6.0","matchCriteriaId":"83FC5CEA-4EF1-4CA1-9094-6E40DCF3FAC3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:avaya:9608g:-:*:*:*:*:*:*:*","matchCriteriaId":"787289FF-AD0C-4E55-9521-F99D26412C35"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:9611g_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.6.0","matchCriteriaId":"A8895429-A1B6-4B39-A93F-EDD5D49F03B0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:avaya:9611g:-:*:*:*:*:*:*:*","matchCriteriaId":"5CEDBEB4-D9F2-4BBB-940A-D887F2C7A86F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:9621g_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.6.0","matchCriteriaId":"BCEA36DC-17F8-4535-AB2E-329C076A8831"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:avaya:9621g:-:*:*:*:*:*:*:*","matchCriteriaId":"337D5E48-6AC6-4723-862A-1F7A9180322C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:9641g_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.6.0","matchCriteriaId":"3FC48708-1F19-430B-A84A-4F853B247B6B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:avaya:9641g:-:*:*:*:*:*:*:*","matchCriteriaId":"0C5EC883-7D5F-48E9-A3A9-A2E2A6903483"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:9641gs_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.6.0","matchCriteriaId":"BE9207F2-B3B2-4312-9D32-4FD800AC0463"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:avaya:9641gs:-:*:*:*:*:*:*:*","matchCriteriaId":"09AF8F44-9695-4F82-9943-4406A3B9879B"}]}]}],"references":[{"url":"http://downloads.avaya.com/css/P8/documents/100156038","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=550fd08c2cebad61c548def135f67aba284c6162","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/21/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751006","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/550fd08c2cebad61c548def135f67aba284c6162","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://downloads.avaya.com/css/P8/documents/100156038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=550fd08c2cebad61c548def135f67aba284c6162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/21/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/550fd08c2cebad61c548def135f67aba284c6162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-4594","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:35.087","lastModified":"2026-06-16T23:35:06.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an incorrect pointer dereference."},{"lang":"es","value":"La función __ sys_sendmsg en net/socket.c en el kernel de Linux antes de v3.1 permite a usuarios locales causar una denegación de servicio (caída del sistema) mediante el uso de una llamada a la 'system call' sendmmsg debidamente modificada, dando lugar a una eliminación de referencia a puntero incorrecto."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"156989A4-23D9-434A-B512-9C0F3583D13D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc909d9ddbf7778371e36a651d6e4194b1cc7d4c","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/12/08/4","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761646","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/bc909d9ddbf7778371e36a651d6e4194b1cc7d4c","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc909d9ddbf7778371e36a651d6e4194b1cc7d4c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/12/08/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/bc909d9ddbf7778371e36a651d6e4194b1cc7d4c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-4621","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:35.617","lastModified":"2026-06-16T23:35:09.713","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local users to cause a denial of service (system hang) via an application that executes code in a loop."},{"lang":"es","value":"El kernel de Linux antes de v2.6.37 no aplica la optimización de una actualización de reloj, lo que permite a usuarios locales provocar una denegación de servicio (bloqueo del sistema) a través de una aplicación que ejecuta código en un bucle."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.37","matchCriteriaId":"76630B45-B590-4651-972E-F938A83010C0"}]}]}],"references":[{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f26f9aff6aaf67e9a430d16c266f91b13a5bff64","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2011/12/21/6","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769711","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/f26f9aff6aaf67e9a430d16c266f91b13a5bff64","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f26f9aff6aaf67e9a430d16c266f91b13a5bff64","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2011/12/21/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/f26f9aff6aaf67e9a430d16c266f91b13a5bff64","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2012-0038","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:35.820","lastModified":"2026-06-16T23:36:33.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función xfs_acl_from_disk en fs/xfs/xfs_acl.c en el núcleo de Linux anterior a v3.1.9 que permite a usuarios locales causar una denegación de servicio (panic) a través del sistema de ficheros con una lista ACL mal construida, dando lugar a un desbordamiento de búfer basado en heap."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1.9","matchCriteriaId":"08C8D736-17F1-4164-80A1-A5FED77C0129"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/01/10/11","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773280","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/093019cf1b18dd31b2c3b77acce4e000e2cbc9ce","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/01/10/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/093019cf1b18dd31b2c3b77acce4e000e2cbc9ce","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2012-0058","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:36.227","lastModified":"2026-06-16T23:36:35.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that trigger incorrect iocb management."},{"lang":"es","value":"La función kiocb_batch_free en fs/aio.c en el kernel de Linux antes de v3.2.2 permite a usuarios locales provocar una denegación de servicio a través de vectores que provocan una gestión incorrecta de IOCB."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.2","matchCriteriaId":"D5AEDA47-7122-4C1A-A764-32500A089909"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=139447903326211&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/01/18/7","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1027085","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782696","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/802f43594d6e4d2ac61086d239153c17873a0428","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139447903326211&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/01/18/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1027085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/802f43594d6e4d2ac61086d239153c17873a0428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2012-0879","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:36.850","lastModified":"2026-06-16T23:38:26.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context."},{"lang":"es","value":"La implementación I/O para dispositivos de bloque en el núcleo de Linux anteriores a v2.6.33 no maneja adecuadamente la característica CLONE_IO, lo cual permite a usuarios locales causar una denegación de servicio (inestabilidad I/O) arrancando múltiples procesos que comparten un contexto I/O."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.33","matchCriteriaId":"A01490AB-675E-4BA1-916D-F2A0D6CB27FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*","matchCriteriaId":"60FBDD82-691C-4D9D-B71B-F9AFF6931B53"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*","matchCriteriaId":"00720D8C-3FF3-4B1C-B74B-91F01A544399"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:*","matchCriteriaId":"EB74DEB4-2BD1-4A65-AFDA-C331BC20C178"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*","matchCriteriaId":"EE26596F-F10E-44EF-88CA-0080646E91B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:vmware:*:*","matchCriteriaId":"A6B7CDCA-6F39-4113-B5D3-3AA9D7F3D809"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:*:*:*","matchCriteriaId":"F084E6C1-8DB0-4D1F-B8EB-5D2CD9AD6E87"}]}]}],"references":[{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=61cc74fbb87af6aa551a06a370590c9bc07e29d9","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69f2292063d2caf37ca9aec7d63ded203701bf3","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139447903326211&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0481.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0531.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48545","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/48842","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.debian.org/security/2012/dsa-2469","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/02/23/5","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1027086","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1408-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1410-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1411-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=796829","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/61cc74fbb87af6aa551a06a370590c9bc07e29d9","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/b69f2292063d2caf37ca9aec7d63ded203701bf3","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=61cc74fbb87af6aa551a06a370590c9bc07e29d9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69f2292063d2caf37ca9aec7d63ded203701bf3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139447903326211&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0531.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/48842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.debian.org/security/2012/dsa-2469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/02/23/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1027086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1410-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1411-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=796829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/61cc74fbb87af6aa551a06a370590c9bc07e29d9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/b69f2292063d2caf37ca9aec7d63ded203701bf3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2012-1090","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:37.053","lastModified":"2026-06-16T23:39:00.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO."},{"lang":"es","value":"La función cifs_lookup en fs/cifs/dir.c en el núcleo de Linux anteriores a v3.2.10 permite a usuarios locales causar una denegación de servicio (OOPS) a través de intentos de acceso a un archivo especial, como lo demuestra un FIFO."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.10","matchCriteriaId":"3C16692B-B239-405B-998B-114907D6243D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C60FA8B1-1802-4522-A088-22171DCF7A93"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*","matchCriteriaId":"60FBDD82-691C-4D9D-B71B-F9AFF6931B53"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*","matchCriteriaId":"00720D8C-3FF3-4B1C-B74B-91F01A544399"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:*","matchCriteriaId":"EB74DEB4-2BD1-4A65-AFDA-C331BC20C178"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp2:*:*:*:*:*:*","matchCriteriaId":"DF49412C-CF41-4251-B1FB-F0E63AC9E019"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*","matchCriteriaId":"EE26596F-F10E-44EF-88CA-0080646E91B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:vmware:*:*","matchCriteriaId":"A6B7CDCA-6F39-4113-B5D3-3AA9D7F3D809"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*","matchCriteriaId":"DB4D6749-81A1-41D7-BF4F-1C45A7F49A22"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:-:*:*:*","matchCriteriaId":"1A9E2971-0D30-4A8D-8BF8-99E4E9E4CF86"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0481.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0531.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48842","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48964","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/02/28/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798293","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df08","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0531.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/02/28/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2012-1146","sourceIdentifier":"secalert@redhat.com","published":"2012-05-17T11:00:37.397","lastModified":"2026-06-16T23:39:07.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events."},{"lang":"es","value":"La función mem_cgroup_usage_unregister_event en mm/memcontrol.c en el núcleo de Linux anteriores a v3.2.10 no maneja apropiadamente múltiples eventos que son asociados al mismo eventfd, lo cual permite a usuarios locales causar una denegación de servicio (puntero nulo sin referencia y caída del sistema) o posiblemente tener un impacto no especificado por el registro de eventos en el límite de la memoria."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.10","matchCriteriaId":"3C16692B-B239-405B-998B-114907D6243D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*","matchCriteriaId":"706C6399-CAD1-46E3-87A2-8DFE2CF497ED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*","matchCriteriaId":"00720D8C-3FF3-4B1C-B74B-91F01A544399"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp2:*:*:*:*:*:*","matchCriteriaId":"DF49412C-CF41-4251-B1FB-F0E63AC9E019"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*","matchCriteriaId":"DB4D6749-81A1-41D7-BF4F-1C45A7F49A22"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:-:*:*:*","matchCriteriaId":"1A9E2971-0D30-4A8D-8BF8-99E4E9E4CF86"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=371528caec553785c37f73fa3926ea0de84f986f","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48898","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48964","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/07/3","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800813","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73711","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/371528caec553785c37f73fa3926ea0de84f986f","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=371528caec553785c37f73fa3926ea0de84f986f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/07/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/371528caec553785c37f73fa3926ea0de84f986f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-2707","sourceIdentifier":"secalert@redhat.com","published":"2012-05-24T23:55:02.010","lastModified":"2026-06-16T23:31:50.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACE_SETXTREGS request."},{"lang":"es","value":"La función ptrace_setxregs en ??arch/xtensa/kernel/ptrace.c en el kernel de Linux antes de v3.1 no valida los punteros de espacio de usuario, lo que permite a usuarios locales obtener información sensible de las posiciones de memoria del kernel a través de una solicitud PTRACE_SETXTREGS modificada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:P","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"156989A4-23D9-434A-B512-9C0F3583D13D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d0138ebe24b94065580bd2601f8bb7eb6152f56","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/07/20/18","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/0d0138ebe24b94065580bd2601f8bb7eb6152f56","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d0138ebe24b94065580bd2601f8bb7eb6152f56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/07/20/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/0d0138ebe24b94065580bd2601f8bb7eb6152f56","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-2898","sourceIdentifier":"secalert@redhat.com","published":"2012-05-24T23:55:02.057","lastModified":"2026-06-16T23:32:12.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"net/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application."},{"lang":"es","value":"net/packet/af_packet.c en el kernel de Linux antes de v2.6.39.3 no restringe adecuadamente el acceso al espacio de usuario a ciertas estructuras de paquetes de datos asociados VLAN Tag Control Information, lo que permite a usuarios locales obtener información sensible a través de una aplicación modificada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.39.3","matchCriteriaId":"D83B3E02-C11C-4F8E-8CAC-F2270BC8190C"}]}]}],"references":[{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13fcb7bd322164c67926ffe272846d4860196dc6","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2011/08/03/7","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=728023","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/13fcb7bd322164c67926ffe272846d4860196dc6","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13fcb7bd322164c67926ffe272846d4860196dc6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2011/08/03/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=728023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/13fcb7bd322164c67926ffe272846d4860196dc6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-2906","sourceIdentifier":"secalert@redhat.com","published":"2012-05-24T23:55:02.120","lastModified":"2026-06-16T23:32:13.547","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"secalert@redhat.com","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor."},{"lang":"es","value":"** DISPUTADA ** Error de signo de enteros en la función pmcraid_ioctl_passthrough en drivers/scsi/pmcraid.c en el kernel de Linux anterior a 3.1 podría permitir a usuarios locales causar una denegación de servicio (consumo de memoria o corrupción de memoria) a través de un valor de tamaño negativo en una llamada ioctl. NOTA: esto podría tratarse de una vulnerabilidad exclusivamente en entornos inusuales que proporcionan un programa privilegiado para para obtener el descriptor de ficheros requerido."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"156989A4-23D9-434A-B512-9C0F3583D13D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5b515445f4f5a905c5dd27e6e682868ccd6c09d","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/08/09/8","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/b5b515445f4f5a905c5dd27e6e682868ccd6c09d","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5b515445f4f5a905c5dd27e6e682868ccd6c09d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/08/09/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/b5b515445f4f5a905c5dd27e6e682868ccd6c09d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-2918","sourceIdentifier":"secalert@redhat.com","published":"2012-05-24T23:55:02.167","lastModified":"2026-06-16T23:32:15.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events, which allows local users to cause a denial of service (system hang) via a crafted application."},{"lang":"es","value":"El subsistema Performance Events en el kernel de Linux antes de v3.1 no trata correctamente los desbordamientos de eventos asociados con eventos PERF_COUNT_SW_CPU_CLOCK, lo que permite a usuarios locales causar una denegación de servicio (bloqueo del sistema) a través de una aplicación modificada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"156989A4-23D9-434A-B512-9C0F3583D13D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8b0ca17b80e92faab46ee7179ba9e99ccb61233","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/08/16/1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730706","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/a8b0ca17b80e92faab46ee7179ba9e99ccb61233","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8b0ca17b80e92faab46ee7179ba9e99ccb61233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/08/16/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/a8b0ca17b80e92faab46ee7179ba9e99ccb61233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-3353","sourceIdentifier":"secalert@redhat.com","published":"2012-05-24T23:55:02.307","lastModified":"2026-06-16T23:33:07.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem."},{"lang":"es","value":"Desbordamiento de búfer en la función fuse_notify_inval_entry function in fs/fuse/dev.c en el kernel de Linux antes de v3.1 permite a usuarios locales causar una denegación de servicio (BUG_ON y caída del sistema) mediante el aprovechamiento de la capacidad de montar un sistema de archivos FUSE."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"156989A4-23D9-434A-B512-9C0F3583D13D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/09/09/6","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736761","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/09/09/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-3363","sourceIdentifier":"secalert@redhat.com","published":"2012-05-24T23:55:02.387","lastModified":"2026-06-16T23:33:09.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share."},{"lang":"es","value":"La función setup_cifs_sb function en fs/cifs/connect.cen el kernel de Linux antes de v2.6.39 no maneja correctamente las referencias de la DFS, lo que permite a servidores CIFS remotos provocar una denegación de servicio (caída del sistema) mediante la colocación de una derivación en la raíz de una acción."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.39","matchCriteriaId":"176353CE-F17E-4776-AD9F-19014DA75B76"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6172AF57-B26D-45F8-BE3A-F75ABDF28F49"}]}]}],"references":[{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70945643722ffeac779d2529a348f99567fa5c33","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2011/09/14/12","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=738291","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/70945643722ffeac779d2529a348f99567fa5c33","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70945643722ffeac779d2529a348f99567fa5c33","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2011/09/14/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=738291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/70945643722ffeac779d2529a348f99567fa5c33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-4081","sourceIdentifier":"secalert@redhat.com","published":"2012-05-24T23:55:02.480","lastModified":"2026-06-16T23:34:23.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket."},{"lang":"es","value":"crypto/ghash-generic.c en el kernel de Linux antes de v3.1 permite a usuarios locales causar una denegación de servicio (desreferencia de puntero NULL y OOPS) o posiblemente tener un impacto no especificado mediante la activación de un fallo o ausencia de llamada a la función ghash_setkey, seguido por una (1) llamada a la función ghash_update o (2) llamada a la función ghash_final, como se demuestra por una operación de escritura en un socket AF_ALG."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"156989A4-23D9-434A-B512-9C0F3583D13D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed47b7d142ec99ad6880bbbec51e9f12b3af74c","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/10/27/2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749475","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/7ed47b7d142ec99ad6880bbbec51e9f12b3af74c","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed47b7d142ec99ad6880bbbec51e9f12b3af74c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/10/27/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/7ed47b7d142ec99ad6880bbbec51e9f12b3af74c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2012-0248","sourceIdentifier":"cret@cert.org","published":"2012-06-05T22:55:07.027","lastModified":"2026-06-16T23:36:59.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF."},{"lang":"es","value":"ImageMagick v6.7.5-7 y anteriores permite a atacantes remotos causar una denegación de servicio (bucle infinito y bloqueo) a través de una imagen hecha a mano, cuya IFD contiene etiquetas IOP que referencian al principio del IDF."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndIncluding":"6.7.5-7","matchCriteriaId":"433E8E55-B4EC-4425-AF8F-12D4C491B986"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*","matchCriteriaId":"A9BD9DD2-B468-4732-ABB1-742D83709B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"EF49D26F-142E-468B-87C1-BABEA445255C"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage:2.0:*:*:*:*:*:*:*","matchCriteriaId":"52B90A04-DD6D-4AE7-A0E5-6B381127D507"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C0554C89-3716-49F3-BFAE-E008D5E4E29C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"AD6D0378-F0F4-4AAA-80AF-8287C790EC96"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C462C17E-DEB3-4E28-9D3E-FEE97907EC14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2012-0544.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0545.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/47926","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48247","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48259","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49043","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49063","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49068","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-1435-1","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.cert.fi/en/reports/2012/vulnerability595210.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2427","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286","source":"cret@cert.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/79003","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/51957","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027032","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/47926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-1435-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cert.fi/en/reports/2012/vulnerability595210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/79003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/51957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2012-0259","sourceIdentifier":"cret@cert.org","published":"2012-06-05T22:55:07.733","lastModified":"2026-06-16T23:37:00.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read."},{"lang":"es","value":"La función GetEXIFProperty en magick/property.c en ImageMagick antes de v6.7.6-3 permite a atacantes remotos causar una denegación de servicio (caída) a través de un valor cero en el número de componentes de una etiqueta EXIF Xresolution en un archivo JPEG, lo que desencadena una lectura fuera de límites."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndExcluding":"6.7.6-3","matchCriteriaId":"3AB89905-82BC-4F41-A237-B377A9D330D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*","matchCriteriaId":"A9BD9DD2-B468-4732-ABB1-742D83709B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"EF49D26F-142E-468B-87C1-BABEA445255C"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0544.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48679","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48974","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49043","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49063","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49317","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/55035","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-1435-1","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.cert.fi/en/reports/2012/vulnerability635606.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2462","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629","source":"cret@cert.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/81021","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/52898","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027032","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259","source":"cret@cert.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74657","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/55035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-1435-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cert.fi/en/reports/2012/vulnerability635606.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/81021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/52898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2012-0260","sourceIdentifier":"cret@cert.org","published":"2012-06-05T22:55:07.793","lastModified":"2026-06-16T23:37:00.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers."},{"lang":"es","value":"La función de JPEGWarningHandler en coders/jpeg.c en ImageMagick antes de v6.7.6-3 permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de una imagen JPEG con una secuencia de marcadores de reinicio hecha a mano."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndExcluding":"6.7.6-3","matchCriteriaId":"3AB89905-82BC-4F41-A237-B377A9D330D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*","matchCriteriaId":"7F61F047-129C-41A6-8A27-FFCBB8563E91"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage:2.0:*:*:*:*:*:*:*","matchCriteriaId":"52B90A04-DD6D-4AE7-A0E5-6B381127D507"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_aus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"D68FB2BB-D103-4CA6-A51E-83DB349DDDE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C0554C89-3716-49F3-BFAE-E008D5E4E29C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C462C17E-DEB3-4E28-9D3E-FEE97907EC14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0544.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0545.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48974","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49063","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49068","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49317","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/55035","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/57224","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.cert.fi/en/reports/2012/vulnerability635606.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2462","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629","source":"cret@cert.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/81022","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/52898","source":"cret@cert.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027032","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2132-1","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74658","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/55035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/57224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cert.fi/en/reports/2012/vulnerability635606.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/81022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/52898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2132-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2012-1186","sourceIdentifier":"secalert@redhat.com","published":"2012-06-05T22:55:09.950","lastModified":"2026-06-16T23:39:12.933","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248."},{"lang":"es","value":"Un desbordamiento de entero en la función SyncImageProfiles en profile.c en ImageMagick v6.7.5-8 y anteriores permite a atacantes remotos causar una denegación de servicio (por un bucle infinito) a través de las desplazamientos (offsets) de etiquetas IOP modificadas en el IFD en una imagen. NOTA: esta vulnerabilidad existe debido a una solución incompleta al CVE-2012-0248."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndIncluding":"6.7.5-8","matchCriteriaId":"156C4C25-69CB-4D67-9D9A-C5EAB82BCA9C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*","matchCriteriaId":"A9BD9DD2-B468-4732-ABB1-742D83709B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"EF49D26F-142E-468B-87C1-BABEA445255C"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/47926","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48974","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49043","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49317","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/profile.c","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-1435-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2012/dsa-2462","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/19/5","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.osvdb.org/80555","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/51957","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1186","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/76139","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/47926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/49317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/profile.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-1435-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2012/dsa-2462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/19/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.osvdb.org/80555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/51957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/76139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2012-1798","sourceIdentifier":"cret@cert.org","published":"2012-06-05T22:55:10.060","lastModified":"2026-06-16T23:40:19.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image."},{"lang":"es","value":"La función de TIFFGetEXIFProperties en coders/tiff.c en ImageMagick antes de v6.7.6-3 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de los límites y caída de la aplicación) a través de un IFD EXIF modificado en una imagen TIFF."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndExcluding":"6.7.6-3","matchCriteriaId":"3AB89905-82BC-4F41-A237-B377A9D330D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage:2.0:*:*:*:*:*:*:*","matchCriteriaId":"52B90A04-DD6D-4AE7-A0E5-6B381127D507"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C0554C89-3716-49F3-BFAE-E008D5E4E29C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"AD6D0378-F0F4-4AAA-80AF-8287C790EC96"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C462C17E-DEB3-4E28-9D3E-FEE97907EC14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0544.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48974","source":"cret@cert.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/49063","source":"cret@cert.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/49068","source":"cret@cert.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/49317","source":"cret@cert.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/55035","source":"cret@cert.org","tags":["Not Applicable"]},{"url":"http://www.debian.org/security/2012/dsa-2462","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/81023","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/52898","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027032","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74659","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/49063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/49068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/49317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/55035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.debian.org/security/2012/dsa-2462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/81023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/52898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2012-0037","sourceIdentifier":"secalert@redhat.com","published":"2012-06-17T03:41:40.107","lastModified":"2026-06-16T23:36:32.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document."},{"lang":"es","value":"Redland Raptor (también conocido como libraptor) anterior a v2.0.7, utilizado por OpenOffice v3.3 y v3.4 Beta, LibreOffice anterior a v3.4.6 y v3.5.x anterior a v3.5.1, y otros productos, permite a atacantes remotos asistidos por el usuario leer archivos arbitrarios a través de una declaración de entidad externa (XXE) en xml y con referencia a un documento RDF."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:librdf:raptor:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.7","matchCriteriaId":"FAA8084B-D726-4B05-B766-9BCB15B3B84D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*","versionEndExcluding":"3.4.6","matchCriteriaId":"AC85B57C-F9E8-4266-A854-480A45ED3C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libreoffice:libreoffice:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9EA7346A-7B1F-4887-81D5-DE36F9273E49"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:openoffice:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A1A3D8DF-2A27-4054-B748-F8F4B6C013F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:openoffice:3.4.0:beta:*:*:*:*:*:*","matchCriteriaId":"EBFF2F3E-67EB-4A54-BE16-9A8BC078781A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*","matchCriteriaId":"706C6399-CAD1-46E3-87A2-8DFE2CF497ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*","matchCriteriaId":"2DA9D861-3EAF-42F5-B0B6-A4CD7BDD6188"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gluster_storage_server_for_on-premise:2.0:*:*:*:*:*:*:*","matchCriteriaId":"59D47E43-886E-4114-96A2-DBE719EA3A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage:2.0:*:*:*:*:*:*:*","matchCriteriaId":"52B90A04-DD6D-4AE7-A0E5-6B381127D507"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage_for_public_cloud:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F0257753-51C3-45F2-BAA4-4C1F2DEAB7A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C0554C89-3716-49F3-BFAE-E008D5E4E29C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"AD6D0378-F0F4-4AAA-80AF-8287C790EC96"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]}],"references":[{"url":"http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://librdf.org/raptor/RELEASE.html#rel2_0_7","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078242.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0410.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0411.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48479","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48493","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48494","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48526","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48529","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48542","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48649","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50692","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/60799","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-05.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://vsecurity.com/resources/advisory/20120324-1/","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2438","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.libreoffice.org/advisories/CVE-2012-0037/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:061","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:062","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:063","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openoffice.org/security/cves/CVE-2012-0037.html","source":"secalert@redhat.com","tags":["Mitigation","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/27/4","source":"secalert@redhat.com","tags":["Exploit","Mailing List"]},{"url":"http://www.osvdb.org/80307","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/52681","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1026837","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74235","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://librdf.org/raptor/RELEASE.html#rel2_0_7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078242.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0410.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0411.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/48526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/60799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://vsecurity.com/resources/advisory/20120324-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.libreoffice.org/advisories/CVE-2012-0037/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openoffice.org/security/cves/CVE-2012-0037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/27/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.osvdb.org/80307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/52681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1026837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]}]}},{"cve":{"id":"CVE-2012-1342","sourceIdentifier":"psirt@cisco.com","published":"2012-08-06T17:55:00.867","lastModified":"2026-06-16T23:39:24.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975."},{"lang":"es","value":"Cisco Carrier Routing System (CRS) v3.9, v4.0, y v4.1 permite a atacantes remotos a evitar las entradas ACL a través de paquetes fragmentados, también conocido como Bug ID CSCtj10975."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:carrier_routing_system:3.9.0:*:*:*:*:*:*:*","matchCriteriaId":"93F09765-2595-4463-A053-12119220920A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:carrier_routing_system:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B723D4A0-B5E4-4BDB-A90F-BF2A8A3979F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:carrier_routing_system:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E5BAF2A8-3D7C-4F4E-A165-27C64A126A59"}]}]}],"references":[{"url":"http://www.cisco.com/cisco/software/release.html?mdfid=279506669&catid=268437899&flowid=1915&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/cisco/software/release.html?mdfid=279506669&catid=268437899&flowid=1915&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2012-2993","sourceIdentifier":"cret@cert.org","published":"2012-09-18T03:48:28.507","lastModified":"2026-06-16T23:42:28.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1) POP3, (2) IMAP, or (3) SMTP protocol via an arbitrary valid certificate."},{"lang":"es","value":"Microsoft Windows Phone 7 no comprueba el nombre de dominio en el campo nombre común(CN) del sujeto en un certificado X.509, lo que permite ataques hombre-en-el-medio (MITM) falseando un servidor SSL para los protocolos (1) POP3, (2) IMAP, o (3) SMTP a través válidos de su elección.\r\n"}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-16T21:19:19.103167Z","id":"CVE-2012-2993","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_phone_7_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"530B4DD8-07A0-46B8-8E68-EFCE29A895F1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:microsoft:windows_phone_7:-:*:*:*:*:*:*:*","matchCriteriaId":"368E0B07-BD7D-44CB-BC13-450E2CF0D46D"}]}]}],"references":[{"url":"http://osvdb.org/85619","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/389795","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/55569","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027541","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78620","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/85619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/389795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/55569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1027541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}],"evaluatorImpact":"Per http://www.kb.cert.org/vuls/id/389795 \"A remote attacker with the ability to pose as a man-in-the-middle may be able to view the login or session data in the corresponding protocol (e.g., SMTP, POP3, etc.).\""}},{"cve":{"id":"CVE-2012-3552","sourceIdentifier":"secalert@redhat.com","published":"2012-10-03T11:02:57.220","lastModified":"2026-06-16T23:43:27.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending packets to an application that sets socket options during the handling of network traffic."},{"lang":"es","value":"La aplicación IP en el kernel de Linux antes de v3.0 podría permitir a atacantes remotos provocar una denegación de servicio mediante el envío de paquetes a una aplicación que configura las opciones de socket durante el manejo de tráfico de red."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0","matchCriteriaId":"E0135A6D-9FB7-4E1B-B471-914E37494942"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C0554C89-3716-49F3-BFAE-E008D5E4E29C"}]}]}],"references":[{"url":"http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6d8bd051c391c1c0458a30b2a7abcd939329259","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1540.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/08/31/11","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853465","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6d8bd051c391c1c0458a30b2a7abcd939329259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/08/31/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2012-3489","sourceIdentifier":"secalert@redhat.com","published":"2012-10-03T21:55:00.813","lastModified":"2026-06-16T23:43:19.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue."},{"lang":"es","value":"La función xml_parse en el soporte libxml2 en el componente de servidor central en PostgreSQL v8.3 antes de v8.3.20, v8.4 antes de v8.4.13, v9.0 antes de v9.0.9, y v9.1 antes de v9.1.5, permite a atacantes remotos determinar la existencia de archivos o URLs arbitrarias y, posiblemente, obtener el archivo o el contenido de URL que desencadena un error de validación, a través de un valor XML que se refiere a (1) una DTD o (2) una entidad, relacionada con una cuestión XML External Entity (también conocido como XXE)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndExcluding":"8.3.20","matchCriteriaId":"DC9F6237-F38D-4EB0-95EB-5209D05994CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.4.13","matchCriteriaId":"C07C667D-726E-4E7C-848D-5EE8749B7F87"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.9","matchCriteriaId":"B8674F6A-2AD2-4687-9733-47348BC25C78"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndExcluding":"9.1.5","matchCriteriaId":"13E098C4-9AAD-4F9C-AB51-D025F3A71A15"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*","matchCriteriaId":"D806A17E-B8F9-466D-807D-3F1E77603DC8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.7.0","versionEndIncluding":"10.7.5","matchCriteriaId":"9BF245F9-84B9-4269-B17F-DBC49715B674"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.8:*:*:*:*:*:*:*","matchCriteriaId":"A557D31B-4614-41E0-85EA-804C2DDF4919"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"EF49D26F-142E-468B-87C1-BABEA445255C"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*","matchCriteriaId":"8382A145-CDD9-437E-9DE7-A349956778B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1263.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/50635","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50718","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50859","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50946","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2534","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:139","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.postgresql.org/about/news/1407/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/8.3/static/release-8-3-20.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.postgresql.org/docs/8.4/static/release-8-4-13.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.postgresql.org/docs/9.0/static/release-9-0-9.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.postgresql.org/docs/9.1/static/release-9-1-5.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.postgresql.org/support/security/","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/55074","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1542-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_postgresql2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849173","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Release Notes"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1263.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/50635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2012/dsa-2534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.postgresql.org/about/news/1407/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/8.3/static/release-8-3-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.postgresql.org/docs/8.4/static/release-8-4-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.postgresql.org/docs/9.0/static/release-9-0-9.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.postgresql.org/docs/9.1/static/release-9-1-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.postgresql.org/support/security/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/55074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1542-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_postgresql2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Release Notes"]}]}},{"cve":{"id":"CVE-2012-0518","sourceIdentifier":"secalert_us@oracle.com","published":"2012-10-16T23:55:03.087","lastModified":"2026-06-16T23:37:27.830","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Server Single Sign-On en Oracle Fusion Middleware 10.1.4.3.0 permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionado con Redirects, una vulnerabilidad diferente a CVE-2012-3175."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-10T19:02:23.021923Z","id":"CVE-2012-0518","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-28","cisaActionDue":"2022-04-18","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:fusion_middleware:10.1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"410C2981-D85A-4EF2-A335-0FB413DC74A2"}]}]}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0518","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2012-3446","sourceIdentifier":"secalert@redhat.com","published":"2012-11-04T22:55:03.060","lastModified":"2026-06-16T23:43:14.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate."},{"lang":"es","value":"Apache Libcloud antes de v0.11.1 usa una expresión regular incorrecta durante la comprobación de si el nombre del servidor coincide con un nombre de dominio en el nombre común (CN) del sujeto o con el campo subjectAltName del certificado X.509, lo que permite falsificar servidores SSL a atacantes man-in-the-middle mediante un certificado válido de su elección."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:libcloud:*:*:*:*:*:*:*:*","versionEndExcluding":"0.11.0","matchCriteriaId":"5BA84103-FCEF-4050-A42D-3CDFACD04B52"}]}]}],"references":[{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://svn.apache.org/repos/asf/libcloud/trunk/CHANGES","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://svn.apache.org/repos/asf/libcloud/trunk/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2012-5810","sourceIdentifier":"cve@mitre.org","published":"2012-11-04T22:55:04.390","lastModified":"2026-06-16T23:47:22.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Chase mobile banking application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to overriding the default X509TrustManager. NOTE: this vulnerability was fixed in the summer of 2012, but the version number was not changed or is not known."},{"lang":"es","value":"La aplicación de banca móvil Chase para Android no verifica que el nombre de host del servidor coincida con un nombre de dominio en el Common Name (CN) del sujeto o el campo subjectAltName del certificado X.509, lo que permite a atacantes man-in-the-middle suplantar servidores SSL a través de un certificado válido arbitrario, relacionado con la sobreescritura del X509TrustManager por defecto. NOTA: esta vulnerabilidad fue solucionada en el verano de 2012, pero el número de versión no fue cambiado o no se conoce."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jpmorganchase:chase_mobile:-:-:*:*:*:android:*:*","matchCriteriaId":"2479BD7A-5082-46D1-A674-D0ED3F7FF61D"}]}]}],"references":[{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://docs.google.com/document/pub?id=1roBIeSJsYq3Ntpf6N0PIeeAAvu4ddn7mGo6Qb7aL7ew","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://docs.google.com/document/pub?id=1roBIeSJsYq3Ntpf6N0PIeeAAvu4ddn7mGo6Qb7aL7ew","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2012-5821","sourceIdentifier":"cve@mitre.org","published":"2012-11-04T22:55:04.827","lastModified":"2026-06-16T23:47:24.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function."},{"lang":"es","value":"Lynx no verifica que el certificado del servidor está firmado por una autoridad de certificación de confianza, lo que permite ataques man-in-the-middle con los que se falsifican servidores SSL mediante  certificados hechos a mano. Se trata de un problema relacionado con el uso indebido de una función GnuTLS determinada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:-:*:*:*:*:*:*:*","matchCriteriaId":"88A939DB-9F4D-4130-893E-4EE90BDF294E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"}]}]}],"references":[{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:101","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1642-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79930","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0351","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1642-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2013-0375","sourceIdentifier":"secalert_us@oracle.com","published":"2013-01-17T01:55:04.297","lastModified":"2026-06-16T23:49:19.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Servidor de Oracle MySQL v5.1.66 y anteriores y v5.1.28 y anteriores, permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad a través de vectores desconocidos relacionados con los servidores de replicación (Replication Server)."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.66","matchCriteriaId":"2F05D9C6-7438-457C-A6CC-18CF0DB500CB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndExcluding":"5.1.67","matchCriteriaId":"88ED7479-C3D3-41F5-B6A3-06F6A699CD19"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndExcluding":"5.2.14","matchCriteriaId":"F26667EE-39AA-4BA1-B40D-37FBCB43B50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.12","matchCriteriaId":"607658C7-318E-489B-926C-0B818EA172F0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*","matchCriteriaId":"8382A145-CDD9-437E-9DE7-A349956778B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-0219.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/53372","source":"secalert_us@oracle.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201308-06.xml","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"secalert_us@oracle.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1703-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17175","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0219.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/53372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201308-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1703-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2012-5656","sourceIdentifier":"secalert@redhat.com","published":"2013-01-18T11:48:40.323","lastModified":"2026-06-16T23:47:11.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack."},{"lang":"es","value":"El proceso de rasterización en Inkscape antes de v0.48.4 permite a los usuarios locales leer archivos de su elección a través de entidades externas en un archivo SVG. Se trata de un ataque también conocido como ataque de inyección XML a una entidad externa (XXE)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inkscape:inkscape:*:*:*:*:*:*:*:*","versionEndExcluding":"0.48.4","matchCriteriaId":"2FBD7F12-C6DE-401D-8EF8-0E0D33C40EEA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*","matchCriteriaId":"706C6399-CAD1-46E3-87A2-8DFE2CF497ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*","matchCriteriaId":"2DA9D861-3EAF-42F5-B0B6-A4CD7BDD6188"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*","matchCriteriaId":"E14271AE-1309-48F3-B9C6-D7DEEC488279"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*","matchCriteriaId":"D806A17E-B8F9-466D-807D-3F1E77603DC8"}]}]}],"references":[{"url":"http://bazaar.launchpad.net/~inkscape.dev/inkscape/trunk/revision/11931","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-December/095024.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095380.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095398.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2012/12/20/3","source":"secalert@redhat.com","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/56965","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1712-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/inkscape/+bug/1025185","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking"]},{"url":"https://launchpad.net/inkscape/+milestone/0.48.4","source":"secalert@redhat.com","tags":["Product"]},{"url":"http://bazaar.launchpad.net/~inkscape.dev/inkscape/trunk/revision/11931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-December/095024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095380.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095398.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2012/12/20/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/56965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1712-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/inkscape/+bug/1025185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://launchpad.net/inkscape/+milestone/0.48.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2011-2479","sourceIdentifier":"secalert@redhat.com","published":"2013-03-01T12:37:53.693","lastModified":"2026-06-16T23:31:25.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a MAP_PRIVATE mmap system call on /dev/zero, which allows local users to cause a denial of service (system crash) via a crafted application."},{"lang":"es","value":"El kernel de Linux anterior a v2.6.39  no crea correctamente páginas grandes en respuesta a una llamada al sistema mmap MAP_PRIVATE en /dev/zero, permitiendo a usuarios locales provocar una denegación de servicio (caída del sistema) a través de una aplicación especialmente diseñada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.39","matchCriteriaId":"176353CE-F17E-4776-AD9F-19014DA75B76"}]}]}],"references":[{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78f11a255749d09025f54d4e2df4fbcb031530e2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2011/06/20/14","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=714761","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/78f11a255749d09025f54d4e2df4fbcb031530e2","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78f11a255749d09025f54d4e2df4fbcb031530e2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2011/06/20/14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=714761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/78f11a255749d09025f54d4e2df4fbcb031530e2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2013-2566","sourceIdentifier":"cve@mitre.org","published":"2013-03-15T21:55:01.047","lastModified":"2026-06-16T23:53:38.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext."},{"lang":"es","value":"El algoritmo RC4, tal como se usa en el protocolo TLS y protocolo SSL, tiene muchos \"single-byte biases\", lo que hace que sea más fácil para atacantes remotos realizar ataques de recuperación de texto claro a través de análisis estadístico de texto cifrado en un gran número de sesiones que utilizan el mismo texto claro."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-22T10:41:15.474383Z","id":"CVE-2013-2566","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_application_session_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.9.1","matchCriteriaId":"9750DF83-22E8-4299-BC95-33217B968211"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:11.1.1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"911FBD5E-213D-482F-81A9-C3B8CE7D903A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:11.1.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"EBD2676F-EE9D-4462-ABA5-C11CE726849C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:12.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6505AE29-5091-4C72-AF6B-932DEF53A8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:12.2.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4EC475C1-A339-4C49-B6BA-A0E4D6FDF5DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:12.2.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"38A45A86-3B7E-4245-B717-2A6E868BE6BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.2.11","matchCriteriaId":"24EDBB8B-1AFB-498D-B78C-7BC72B8C1085"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.4","matchCriteriaId":"F3024389-3D4A-4E19-BE42-DAF9EA51D471"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:sparc_enterprise_m3000_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp","versionEndExcluding":"xcp_1121","matchCriteriaId":"9DBE3B60-DED8-4F47-A60F-410ECB873BAE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:sparc_enterprise_m3000:-:*:*:*:*:*:*:*","matchCriteriaId":"AB54B753-F066-4387-B0C3-43E647A42EBE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:sparc_enterprise_m4000_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp","versionEndExcluding":"xcp_1121","matchCriteriaId":"5BBD38A2-1B17-4B28-9FE1-6D62A6337C12"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:sparc_enterprise_m4000:-:*:*:*:*:*:*:*","matchCriteriaId":"1846C0CA-AE13-435F-BF91-EEE0CC311DD5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:sparc_enterprise_m5000_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp","versionEndExcluding":"xcp_1121","matchCriteriaId":"5884F45B-F822-46B9-A0DC-6B59A3C3E7E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:sparc_enterprise_m5000:-:*:*:*:*:*:*:*","matchCriteriaId":"C2EDCD99-9677-45A7-9221-3A6A41917A7C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:sparc_enterprise_m8000_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp","versionEndExcluding":"xcp_1121","matchCriteriaId":"9ED7A13F-9510-4FA0-96A6-D2D34D49545F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:sparc_enterprise_m8000:-:*:*:*:*:*:*:*","matchCriteriaId":"9581ABD4-5ED6-4EC5-8A0B-1D7A449C10D5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:sparc_enterprise_m9000_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp","versionEndExcluding":"xcp_1121","matchCriteriaId":"0C4C1EC1-19BE-4E1E-8F56-47A83AD0410D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:sparc_enterprise_m9000:-:*:*:*:*:*:*:*","matchCriteriaId":"0A2CEAD6-9F8C-411C-9107-BA858CB8A31B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp","versionEndExcluding":"xcp2280","matchCriteriaId":"0AB4298E-79C7-418D-B843-8EBDC6682342"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*","matchCriteriaId":"983D27DE-BC89-454E-AE47-95A26A3651E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp","versionEndExcluding":"xcp2280","matchCriteriaId":"6F45C5EA-556E-47A5-81FB-F6A85342FAC4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*","matchCriteriaId":"5825AEE1-B668-40BD-86A9-2799430C742C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp","versionEndExcluding":"xcp2280","matchCriteriaId":"04F93A4F-97A9-4B32-A460-86B5EBCEB263"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*","matchCriteriaId":"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*","matchCriteriaId":"EFAA48D9-BEB4-4E49-AD50-325C262D46D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*","matchCriteriaId":"7F61F047-129C-41A6-8A27-FFCBB8563E91"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.11","matchCriteriaId":"74242CE4-EB52-4765-A5E9-94C808EFC997"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"25.0.1","matchCriteriaId":"7E547DD8-D3E3-4CA9-BE68-313A476A4B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"24.1.0","versionEndExcluding":"24.1.1","matchCriteriaId":"F7236D2E-3A8D-48DF-817E-0B536EF66891"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"2.22.1","matchCriteriaId":"BAA54653-EDA1-4B8E-B328-51B0D77D2027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"24.1.1","matchCriteriaId":"FBBD7730-3DCA-4448-A912-1B6AE4658355"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.11","matchCriteriaId":"19BF5469-96AF-43B2-B875-C5241BD406F2"}]}]}],"references":[{"url":"http://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://cr.yp.to/talks/2013.03.12/slides.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143039468003789&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://my.opera.com/securitygroup/blog/2013/03/20/on-the-precariousness-of-rc4","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-19.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.isg.rhul.ac.uk/tls/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-103.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unified/1215/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.opera.com/security/advisory/1046","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/58796","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2031-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2032-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://cr.yp.to/talks/2013.03.12/slides.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143039468003789&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://my.opera.com/securitygroup/blog/2013/03/20/on-the-precariousness-of-rc4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.isg.rhul.ac.uk/tls/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unified/1215/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.opera.com/security/advisory/1046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/58796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2031-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2032-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2013-1937","sourceIdentifier":"secalert@redhat.com","published":"2013-04-16T14:04:31.253","lastModified":"2026-06-16T23:52:26.117","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"secalert@redhat.com","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the (1) visualizationSettings[width] or (2) visualizationSettings[height] parameter. NOTE: a third party reports that this is \"not exploitable."},{"lang":"es","value":"** EN DISPUTA ** Múltiples vulnerabilidades Cross-Site Scripting (XSS) en tbl_gis_visualization.php en phpMyAdmin, en versiones 3.5.x anteriores a la 3.5.8, permiten que atacantes remotos inyecten scripts web o HTML arbitrarios mediante los parámetros (1) visualizationSettings[width] o (2) visualizationSettings[height]. NOTA: un tercero reporta que esto \"no puede explotarse\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:rc1:*:*:*:*:*:*","versionEndIncluding":"3.5.8","matchCriteriaId":"8256D77D-B4D1-4D2C-8F49-D080B805F238"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2577DB75-9893-4496-B9B8-22F4D7C70D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3BBC76AB-567B-4081-8520-D4BB2211CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EDFD7186-12C3-4FA6-951E-288063262EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C4E23EA5-8FD8-441A-8CB6-F1E77AA0D73B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B5FE1328-F2E1-45C8-80ED-0560DAB666EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC675B47-0373-442E-9BCD-35D79355073C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"96E2C613-B1E9-4DB5-AA7D-165E5093452F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7188-E3DE-4A9C-9B9B-31E7276F74AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6D5B72-CA57-4054-B002-56C03856D740"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"71325EEA-441A-4D04-85E1-B7627C15ECE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.7:rc1:*:*:*:*:*:*","matchCriteriaId":"EE098CE1-0FA0-48C0-8F9F-CC9150E96C40"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2013-04/0101.html","source":"secalert@redhat.com"},{"url":"http://immunityservices.blogspot.com/2019/02/cvss.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103184.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103188.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103195.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00181.html","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2013/04/09/13","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/121205/phpMyAdmin-3.5.7-Cross-Site-Scripting.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:144","source":"secalert@redhat.com"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2013-1.php","source":"secalert@redhat.com"},{"url":"http://www.waraxe.us/advisory-102.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/79089c9bc02c82c15419fd9d6496b8781ae08a5a","source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2013-04/0101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://immunityservices.blogspot.com/2019/02/cvss.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103184.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103188.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103195.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00181.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2013/04/09/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/121205/phpMyAdmin-3.5.7-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2013-1.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/79089c9bc02c82c15419fd9d6496b8781ae08a5a","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-1675","sourceIdentifier":"security@mozilla.org","published":"2013-05-16T11:45:30.877","lastModified":"2026-06-16T23:51:53.300","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site."},{"lang":"es","value":"Mozilla Firefox anterior a v21.0, Firefox ESR v17.x anterior a v17.0.6, Thunderbird anterior a v17.0.6, y Thunderbird ESR v17.x anterior a v17.0.6 no inicializan estructuras de datos correctamente para las funciones nsDOMSVGZoomEvent::mPreviousScale y nsDOMSVGZoomEvent::mNewScale functions, lo que permite a atacantes remotos obtener información sensible desde la memoria de un proceso mediante un sitio web especialmente diseñado."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T12:51:27.223141Z","id":"CVE-2013-1675","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-03","cisaActionDue":"2022-03-24","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Mozilla Firefox Information Disclosure Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"21.0","matchCriteriaId":"DBE90626-80E9-42AF-B3D6-1BC1A198134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"17.0","versionEndExcluding":"17.0.6","matchCriteriaId":"00DB2973-F49D-4FB9-9692-9C8ED7E5A4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.6","matchCriteriaId":"C932E9FE-70EB-472A-B4A8-8947E89087AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*","versionStartIncluding":"17.0","versionEndExcluding":"17.0.6","matchCriteriaId":"83CBB1DA-7360-4268-876F-7E69BA2A9C69"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*","matchCriteriaId":"EFAA48D9-BEB4-4E49-AD50-325C262D46D9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gluster_storage_server_for_on-premise:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC489F35-07F1-4C3E-80B9-78F0689BC54B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.9:*:*:*:*:*:*:*","matchCriteriaId":"6252E88C-27FF-420D-A64A-C34124CF7E6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*","matchCriteriaId":"8A8E07B7-3739-4BEB-88F8-C7F62431E889"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:5.0_s390x:*:*:*:*:*:*:*","matchCriteriaId":"90BE67DA-1F52-43DD-8610-8F8D414C0189"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:*","matchCriteriaId":"C84EAAE7-0249-4EA1-B8D3-E039B03ACDC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:5.9_s390x:*:*:*:*:*:*:*","matchCriteriaId":"CF88F74A-2BD3-4AE1-B0F0-F1D6868DA154"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:6.4_s390x:*:*:*:*:*:*:*","matchCriteriaId":"8DC5B615-5B9E-40EC-98DE-9FD16DAC9FEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:5.0_ppc:*:*:*:*:*:*:*","matchCriteriaId":"29BBF1AC-F31F-4251-8054-0D89A8E6E990"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"6D8D654F-2442-4EA0-AF89-6AC2CD214772"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:5.9_ppc:*:*:*:*:*:*:*","matchCriteriaId":"8535D453-1063-4D47-803A-DB09D1D8EEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:6.4_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"FE4E4888-46C6-4DE0-B591-A7FB914F5238"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:*","matchCriteriaId":"634C23AC-AC9C-43F4-BED8-1C720816D5E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:*","matchCriteriaId":"92C9F1C4-55B0-426D-BB5E-01372C23AF97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*","matchCriteriaId":"AF83BB87-B203-48F9-9D06-48A5FE399050"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus_from_rhui:5.9:*:*:*:*:*:*:*","matchCriteriaId":"54F65E6D-500C-4C13-9EB8-FEA1B6912117"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus_from_rhui:6.4:*:*:*:*:*:*:*","matchCriteriaId":"AFBD04ED-609B-4B67-8C4F-BEB8FD6260F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*","matchCriteriaId":"D806A17E-B8F9-466D-807D-3F1E77603DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0820.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0821.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2699","source":"security@mozilla.org","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:165","source":"security@mozilla.org","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-47.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/59858","source":"security@mozilla.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1822-1","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1823-1","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=866825","source":"security@mozilla.org","tags":["Exploit","Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976","source":"security@mozilla.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0820.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0821.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/59858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1822-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1823-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=866825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1675","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2013-2128","sourceIdentifier":"secalert@redhat.com","published":"2013-06-07T14:03:18.533","lastModified":"2026-06-16T23:52:47.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to cause a denial of service (system crash) via a crafted splice system call for a TCP socket."},{"lang":"es","value":"La función tcp_read_sock en net/ipv4/tcp.c del kernel de Linux antes de v2.6.34 no gestiona correctamente el consumo skb, lo que permite a usuarios locales causar una denegación de servicios (caída del sistema) a través de la llamada al sistema manipulada splice para un socket TCP."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.34","matchCriteriaId":"6BA10979-D59C-4A33-ACC8-A110A5ACFF74"}]}]}],"references":[{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=baff42ab1494528907bf4d5870359e31711746ae","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1051.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/05/29/11","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=968484","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/baff42ab1494528907bf4d5870359e31711746ae","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=baff42ab1494528907bf4d5870359e31711746ae","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/05/29/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=968484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/baff42ab1494528907bf4d5870359e31711746ae","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2013-3896","sourceIdentifier":"secure@microsoft.com","published":"2013-10-09T14:53:25.230","lastModified":"2026-06-16T23:55:58.700","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka \"Silverlight Vulnerability.\""},{"lang":"es","value":"Microsoft Silverlight 5 anterior a la versión 5.1.20913.0 no valida punteros adecuadamente durante el acceso a elementos Silverlight, lo que permite a atacantes remotos obtener información sensible a través de una aplicación Silverlight manipulada, también conocido como \"Vulnerabilidad en Silverlight\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-10T18:53:29.489098Z","id":"CVE-2013-3896","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-05-25","cisaActionDue":"2022-06-15","cisaRequiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","cisaVulnerabilityName":"Microsoft Silverlight Information Disclosure Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:silverlight:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.1.20913.0","matchCriteriaId":"260778BC-1CC3-4487-A334-BAD7FF050E8C"}]}]}],"references":[{"url":"http://www.us-cert.gov/ncas/alerts/TA13-288A","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-087","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19003","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19055","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA13-288A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3896","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2013-5223","sourceIdentifier":"cve@mitre.org","published":"2013-11-19T04:50:12.063","lastModified":"2026-06-16T23:58:32.217","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the (1) ntpServer1 parameter to sntpcfg.cgi, username parameter to (2) ddnsmngr.cmd or (3) todmngr.tod, (4) TodUrlAdd parameter to urlfilter.cmd, (5) appName parameter to scprttrg.cmd, (6) fltName in an add action or (7) rmLst parameter in a remove action to scoutflt.cmd, (8) groupName parameter to portmapcfg.cmd, (9) snmpRoCommunity parameter to snmpconfig.cgi, (10) fltName parameter to scinflt.cmd, (11) PolicyName in an add action or (12) rmLst parameter in a remove action to prmngr.cmd, (13) ippName parameter to ippcfg.cmd, (14) smbNetBiosName or (15) smbDirName parameter to samba.cgi, or (16) wlSsid parameter to wlcfg.wl."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en D-Link DSL-2760U Gateway (Rev. E1) permite a usuarios remotos autenticados inyectar script web o HTML a través de (1) parámetro ntpServer1 a sntpcfg.cgi, parámetro username a (2) ddnsmngr.cmd o (3) todmngr.tod, (4) parámetro TodUrlAdd a urlfilter.cmd, (5) parámetro appName a scprttrg.cmd, (6) fitName en una acción add o (7) parámetro rmLst en una acción remove a scoutfit.cmd, (8) parámetro groupName a portmapcfg.cmd, (9) parámetro snmpRoCommunity a snmpconfig.cgi, (10) parámetro fitName a scinfit.cmd, (11) PolicyName en una acción add o (12) parámetro rmLst en una acción remove a prmngr.cmd, (13) parámetro ippName a ippcfg.cmd, (14) smbNetBiosName o (15) parámetro smbDirName a samba.cgi, o (16) parámetro wISsid a wicfg.wi."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T14:11:58.190782Z","id":"CVE-2013-5223","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-25","cisaActionDue":"2022-04-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dsl-2760u_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.12","matchCriteriaId":"C6898225-0F82-4BF7-9601-C979B12FED23"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dsl-2760u:e1:*:*:*:*:*:*:*","matchCriteriaId":"CA475707-6991-4344-8FFF-36FA7AC0F23E"}]}]}],"references":[{"url":"http://osvdb.org/99603","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99604","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99605","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99606","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99607","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99608","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99609","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99610","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99611","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99612","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99613","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99615","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/99616","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://packetstormsecurity.com/files/123976","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2013/Nov/76","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10002","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/88723","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/88724","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/99603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/99616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://packetstormsecurity.com/files/123976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2013/Nov/76","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/88723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/88724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-5223","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2013-6673","sourceIdentifier":"security@mozilla.org","published":"2013-12-11T15:55:13.323","lastModified":"2026-06-17T00:00:47.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user."},{"lang":"es","value":"Mozilla Firefox anterior a  26.0, Firefox ESR 24.x anterior a  24.2, Thunderbird anterior a  24.2, y  SeaMonkey anterior a  2.23 no reconoce la eliminación de un certificado de confianza X.509, lo que facilita a atacantes que realicen un Man-in-the-middle suplantar servidores SSL en circunstancias especiales a través de un certificado que es inaceptable por el usuario."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*","matchCriteriaId":"E14271AE-1309-48F3-B9C6-D7DEEC488279"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"26.0","matchCriteriaId":"50A3A702-C2B1-4311-9EBC-D62079E3DCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"24.0","versionEndExcluding":"24.2","matchCriteriaId":"E21DDED1-A30C-43AE-B589-E93FEEF13F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"2.23","matchCriteriaId":"D337932C-EF9D-4511-87DB-54262C6635D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"24.2","matchCriteriaId":"7BD42C60-4027-4EDE-A61B-84C80154A5C3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*","matchCriteriaId":"C3407560-6D54-4B1B-9977-AD4F6EB5D6BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*","matchCriteriaId":"D806A17E-B8F9-466D-807D-3F1E77603DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*","matchCriteriaId":"3ED68ADD-BBDA-4485-BC76-58F011D72311"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*","matchCriteriaId":"E534C201-BCC5-473C-AAA7-AAB97CEB5437"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*","matchCriteriaId":"2470C6E8-2024-4CF5-9982-CFF50E88EAE9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*","matchCriteriaId":"EFAA48D9-BEB4-4E49-AD50-325C262D46D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*","matchCriteriaId":"7F61F047-129C-41A6-8A27-FFCBB8563E91"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-113.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/64213","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029470","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029476","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2052-1","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2053-1","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=917380","source":"security@mozilla.org","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/64213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2052-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2053-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=917380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2013-3572","sourceIdentifier":"cve@mitre.org","published":"2013-12-31T20:55:15.133","lastModified":"2026-06-16T23:55:25.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted client hostname."},{"lang":"es","value":"Cross-site scripting (XSS) en la interfaz de administracion en el controlador  UniFi de Ubiquiti Networks UniFi 2.3.5  y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un nombre de host del cliente manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ui:unifi_controller:*:*:*:*:*:*:*:*","versionEndExcluding":"2.3.6","matchCriteriaId":"A9171AEB-6BC3-42C1-803E-42747D649391"}]}]}],"references":[{"url":"http://dl.ubnt.com/unifi/static/cve-2013-3572.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://spaceblogs.org/shackspace/2013/10/shackspace-hacker-finds-flaw-in-ubiquiti-networks-unifi-products/","source":"cve@mitre.org","tags":["Broken Link","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/64601","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://community.ubnt.com/t5/UniFi/Security-Advisory-CVE-2013-3572/m-p/601047#U601047","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://dl.ubnt.com/unifi/static/cve-2013-3572.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://spaceblogs.org/shackspace/2013/10/shackspace-hacker-finds-flaw-in-ubiquiti-networks-unifi-products/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/64601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://community.ubnt.com/t5/UniFi/Security-Advisory-CVE-2013-3572/m-p/601047#U601047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-2019","sourceIdentifier":"cve@mitre.org","published":"2014-02-18T11:55:17.027","lastModified":"2026-06-17T00:05:56.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associate this service with a different Apple ID account, by entering an arbitrary iCloud Account Password value and a blank iCloud Account Description value."},{"lang":"es","value":"El subsistema iCloud en Apple iOS anterior a 7.1 permite a atacantes físicamente próximos evadir un requisito de contraseña, y apagar el servicio Find My iPhone o completar una acción Delete Account y luego asociar este servicio con una cuenta diferente de Apple ID, mediante la introducción de un valor de iCloud Account Password arbitrario y un valor iCloud Account Description en blanco."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"2F586A33-057B-4BE7-B7BD-6E8D634AB3A3"}]}]}],"references":[{"url":"http://news.softpedia.com/news/Major-iOS-7-Security-Flaw-Discovered-Video-425011.shtml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.youtube.com/watch?v=QnPk4RRWjic","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://news.softpedia.com/news/Major-iOS-7-Security-Flaw-Discovered-Video-425011.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.youtube.com/watch?v=QnPk4RRWjic","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-2532","sourceIdentifier":"cve@mitre.org","published":"2014-03-18T05:18:19.000","lastModified":"2026-06-17T00:06:46.293","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character."},{"lang":"es","value":"sshd en OpenSSH anterior a 6.6 no soporta debidamente comodines en líneas AcceptEnv en sshd_config, lo que permite a atacantes remotos evadir restricciones de entorno mediante el uso de una subcadena localizada antes de un caracter de comodín."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-28T17:40:36.482638Z","id":"CVE-2014-2532","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-266"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_user_data_repository:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0473C6C9-B0C5-43F0-AC8C-C0DAD30DACF8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"87697D9A-08E0-462D-ABAC-71A48036CE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A9754B4A-3042-49B8-86F7-2D60E25400C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.1:*:*:*:*:*:*:*","matchCriteriaId":"3872787F-2C1C-40C0-B9CF-A3C0CEAAB400"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.2:*:*:*:*:*:*:*","matchCriteriaId":"39D1E296-3040-4CC9-B95B-3E07D73F1150"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.3:*:*:*:*:*:*:*","matchCriteriaId":"FCEE2677-16EE-484F-B2FB-FCA377E0D76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.4:*:*:*:*:*:*:*","matchCriteriaId":"90798B9A-A1C6-4EC5-96BF-AF9C6FEFB63D"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2014-0143.html","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141576985122836&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1552.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/57488","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/57574","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59313","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59855","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2014/dsa-2894","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:068","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:095","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/66355","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1029925","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2155-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91986","source":"cve@mitre.org"},{"url":"https://support.apple.com/HT205267","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2014-0143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141576985122836&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1552.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/66355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1029925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2155-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-2120","sourceIdentifier":"psirt@cisco.com","published":"2014-03-19T01:15:04.007","lastModified":"2026-06-17T00:06:05.827","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025."},{"lang":"es","value":"Vulnerabilidad de XSS en la página de inicio de sesión de WebVPN en el software Cisco Adaptive Security Appliance (ASA) permite a atacantes remotos inyectar script Web o HTML arbitrarios a través de un parámetro no especificado, también conocido como Bug ID CSCun19025."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"cisco","product":"adaptive_security_appliance_software","defaultStatus":"unknown","cpes":["cpe:2.3:a:cisco:adaptive_security_appliance_software:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-20T03:56:10.566308Z","id":"CVE-2014-2120","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2024-11-12","cisaActionDue":"2024-12-03","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:-:*:*:*:*:*:*:*","matchCriteriaId":"8F7FDABB-8C67-4E56-A533-233B50047603"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2120","source":"psirt@cisco.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/66290","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029935","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/66290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-2120","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2014-1496","sourceIdentifier":"security@mozilla.org","published":"2014-03-19T10:55:06.303","lastModified":"2026-06-17T00:05:00.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update."},{"lang":"es","value":"Mozilla Firefox anterior a 28.0, Firefox ESR 24.x anterior a 24.4, Thunderbird anterior a 24.4 y SeaMonkey anterior a 2.25 podría permitir a usuarios locales ganar privilegios mediante la modificación de los contenidos Mar extraídos durante una actualización."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"28.0","matchCriteriaId":"422EC5FE-DA03-4C14-ADED-D6212BE074D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"24.0","versionEndExcluding":"24.4","matchCriteriaId":"767BCE0C-E257-4241-BEAB-6AD5C5B1A3AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"2.25","matchCriteriaId":"097F1C3A-4546-43F3-8CC2-50F8AF05B791"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"24.4","matchCriteriaId":"507FBFAF-784E-4C0E-B959-9380C31EBD1B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*","matchCriteriaId":"C3407560-6D54-4B1B-9977-AD4F6EB5D6BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:*:*:*","matchCriteriaId":"F4BC592E-17CC-4DD4-8B2C-CFD99383649C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*","matchCriteriaId":"DD4BBD63-E038-45CE-9537-D96831E99A06"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*","matchCriteriaId":"0EA03350-8702-43D5-8605-5FB765A3F60B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-16.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=925747","source":"security@mozilla.org","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=925747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-2526","sourceIdentifier":"cve@mitre.org","published":"2014-03-25T18:21:48.263","lastModified":"2026-06-17T00:06:45.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive before 6.7 allow remote attackers to inject arbitrary web script or HTML via the (1) sForumName or (2) sDescription parameter to Forum/manage/ForumManager.lsp; (3) sHint, (4) sWord, or (5) nId parameter to Forum/manage/hangman.lsp; (6) user parameter to rtl/protected/admin/wizard/setuser.lsp; (7) name or (8) email parameter to feedback.lsp; (9) lname or (10) url parameter to private/manage/PageManager.lsp; (11) cmd parameter to fs; (12) newname, (13) description, (14) firstname, (15) lastname, or (16) id parameter to rtl/protected/mail/manage/list.lsp; or (17) PATH_INFO to fs/."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en BarracudaDrive anterior a 6.7 permiten a atacantes remotos inyectar script Web o HTML arbitrarios a través del parámetro (1) sForumName o (2) sDescription hacia Forum/manage/ForumManager.lsp; el parámetro (3) sHint, (4) sWord o (5) nId hacia Forum/manage/hangman.lsp; (6) el parámetro user hacia rtl/protected/admin/wizard/setuser.lsp; el parámetro (7) name o (8) email hacia feedback.lsp; el parámetro (9) lname o (10) url hacia private/manage/PageManager.lsp; (11) el parámetro cmd hacia fs; (12) newname, (13) description, (14) firstname, (15) lastname o (16) el parámetro id hacia rtl/protected/mail/manage/list.lsp o (17) PATH_INFO hacia fs/."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:barracudadrive:barracudadrive:*:*:*:*:*:*:*:*","versionEndExcluding":"6.7","matchCriteriaId":"A63AC4A6-84E7-42AD-A984-27C0474E2FE2"}]}]}],"references":[{"url":"http://barracudadrive.com/readme.txt","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/125766","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secpod.org/advisories/SecPod_BarracudaDrive_Mult_XSS_Vuln.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secpod.org/blog/?p=2158","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/57451","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/66269","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91920","source":"cve@mitre.org","tags":["VDB Entry","Vendor Advisory"]},{"url":"http://barracudadrive.com/readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/125766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secpod.org/advisories/SecPod_BarracudaDrive_Mult_XSS_Vuln.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secpod.org/blog/?p=2158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/57451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/66269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-1523","sourceIdentifier":"security@mozilla.org","published":"2014-04-30T10:49:04.800","lastModified":"2026-06-17T00:05:03.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image."},{"lang":"es","value":"Desbordamiento de buffer basado en memoria dinámica en la función read_u32 en Mozilla Firefox anterior a 29.0, Firefox ESR 24.x anterior a 24.5, Thunderbird anterior a 24.5 y SeaMonkey anterior a 2.26 permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de la aplicación) a través de un imagen JPEG manipulado."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"29.0","matchCriteriaId":"22E1CD48-0EA1-446C-B475-40A858298C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"24.0","versionEndExcluding":"24.5","matchCriteriaId":"E165A136-B39B-43FA-A5EB-34ACF718503B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"2.26","matchCriteriaId":"33C546F7-EF68-452F-BD96-A3D1B267D321"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"24.5","matchCriteriaId":"5BDF3381-F067-4638-8B96-2BCD4FEE65BB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*","matchCriteriaId":"7F61F047-129C-41A6-8A27-FFCBB8563E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"569964DA-31BE-4520-A66D-C3B09D557AB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"45010D45-2FF2-4B04-B115-6B6FE606D598"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"835AE071-CEAE-49E5-8F0C-E5F50FB85EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp4:*:*:ltss:*:*:*","matchCriteriaId":"61853C27-E1A3-49BC-993D-6B32802F668F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:ltss:*:*:*","matchCriteriaId":"ED960EC0-D881-428E-ACE7-516B92C44EF4"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0448.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0449.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2918","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2924","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-37.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/67129","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030163","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030164","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030165","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2185-1","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2189-1","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=969226","source":"security@mozilla.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0448.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0449.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-37.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/67129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2185-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2189-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=969226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-1530","sourceIdentifier":"security@mozilla.org","published":"2014-04-30T10:49:05.003","lastModified":"2026-06-17T00:05:05.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation."},{"lang":"es","value":"La implementación docshell en Mozilla Firefox anterior a  29.0, Firefox ESR 24.x anterior a 24.5, Thunderbird anterior a 24.5 y SeaMonkey anterior a 2.26 permite a atacantes remotos provocar la carga de una URL con una propiedad baseURI falsificada, y realizar ataques de XSS, a través de un sitio web manipulado que realiza el historial de navegación."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"29.0","matchCriteriaId":"22E1CD48-0EA1-446C-B475-40A858298C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"24.0","versionEndExcluding":"24.5","matchCriteriaId":"E165A136-B39B-43FA-A5EB-34ACF718503B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"2.26","matchCriteriaId":"33C546F7-EF68-452F-BD96-A3D1B267D321"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"24.5","matchCriteriaId":"5BDF3381-F067-4638-8B96-2BCD4FEE65BB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*","matchCriteriaId":"7F61F047-129C-41A6-8A27-FFCBB8563E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"569964DA-31BE-4520-A66D-C3B09D557AB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"45010D45-2FF2-4B04-B115-6B6FE606D598"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"835AE071-CEAE-49E5-8F0C-E5F50FB85EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp4:*:*:ltss:*:*:*","matchCriteriaId":"61853C27-E1A3-49BC-993D-6B32802F668F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:ltss:*:*:*","matchCriteriaId":"ED960EC0-D881-428E-ACE7-516B92C44EF4"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html","source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0448.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0449.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59866","source":"security@mozilla.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2014/dsa-2918","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2924","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-43.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/67137","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030163","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030164","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030165","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2185-1","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2189-1","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=895557","source":"security@mozilla.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0448.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0449.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2014/dsa-2918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2014/mfsa2014-43.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/67137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2185-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2189-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=895557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-0203","sourceIdentifier":"secalert@redhat.com","published":"2014-06-23T11:21:17.170","lastModified":"2026-06-17T00:02:30.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call."},{"lang":"es","value":"La función __do_follow_link en fs/namei.c en el kernel de Linux anterior a 2.6.33 no maneja debidamente el componente de último nombre de ruta durante el uso de ciertos sistemas de ficheros, lo que permite a usuarios locales causar una denegación de servicio (operaciones libres incorrectas y caída del sistema) a través de una llamada de sistema abierto."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.33","matchCriteriaId":"A01490AB-675E-4BA1-916D-F2A0D6CB27FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*","matchCriteriaId":"62A2AC02-A933-4E51-810E-5D040B476B7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*","matchCriteriaId":"D7B037A8-72A6-4DFF-94B2-D688A5F6F876"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=86acdca1b63e6890540fa19495cfc708beff3d8b","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-0771.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-3043.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/59262","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/59309","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/59406","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/59560","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/68125","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094363","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/86acdca1b63e6890540fa19495cfc708beff3d8b","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=86acdca1b63e6890540fa19495cfc708beff3d8b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-0771.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-3043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/59262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/59309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/59406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/59560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/68125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/86acdca1b63e6890540fa19495cfc708beff3d8b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-2005","sourceIdentifier":"vultures@jpcert.or.jp","published":"2014-06-25T11:19:21.713","lastModified":"2026-06-17T00:05:55.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen."},{"lang":"es","value":"Sophos Disk Encryption (SDE) 5.x en Sophos Enterprise Console (SEC) 5.x anterior a 5.2.2 no fuerza los requisitos de autenticación para una acción de reactivación del equipo desde un modo de suspensión, lo que permite a atacantes físicamente próximos obtener acceso a la pantalla del escritorio mediante el aprovechamiento de la ausencia de una pantalla de inicio de sesión."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:enterprise_console:*:r2:*:*:*:*:*:*","versionEndIncluding":"5.2.1","matchCriteriaId":"D973896D-BEE7-4602-8DA1-494C3D682151"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:enterprise_console:5.1:*:*:*:*:*:*:*","matchCriteriaId":"9F91E028-6AE3-4CED-B98D-12E0443BA1D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:enterprise_console:5.2:*:*:*:*:*:*:*","matchCriteriaId":"91393B90-C731-4549-8F54-5BA0FE08C21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:enterprise_console:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"481A31FA-14A1-416C-8F38-3208ED16E725"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN63940326/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000061","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/68169","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.sophos.com/en-us/support/knowledgebase/121066.aspx","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN63940326/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/68169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.sophos.com/en-us/support/knowledgebase/121066.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-4806","sourceIdentifier":"psirt@us.ibm.com","published":"2014-08-29T09:55:08.353","lastModified":"2026-06-17T00:10:36.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The installation process in IBM Security AppScan Enterprise 8.x before 8.6.0.2 iFix 003, 8.7.x before 8.7.0.1 iFix 003, 8.8.x before 8.8.0.1 iFix 002, and 9.0.x before 9.0.0.1 iFix 001 on Linux places a cleartext password in a temporary file, which allows local users to obtain sensitive information by reading this file."},{"lang":"es","value":"El proceso de instalación en IBM Security AppScan Enterprise 8.x anterior a 8.6.0.2 iFix 003, 8.7.x anterior a 8.7.0.1 iFix 003, 8.8.x anterior a 8.8.0.1 iFix 002, y 9.0.x anterior a 9.0.0.1 iFix 001 en Linux coloca una contraseña en texto plano en un fichero temporal, lo que permite a usuarios locales obtener información sensible mediante la lectura de este fichero."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"8.0.0.0","versionEndExcluding":"8.6.0.2","matchCriteriaId":"B9B3DB34-0269-4BD1-8740-3593C856086F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"8.7.0.0","versionEndExcluding":"8.7.0.1","matchCriteriaId":"F9BA334F-1C90-4877-B43E-2E5CDE748660"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"8.8.0.0","versionEndExcluding":"8.8.0.1","matchCriteriaId":"8DB5A0AC-923D-4388-BDEA-DAA5C610AC66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"9.0.0.0","versionEndExcluding":"9.0.0.1","matchCriteriaId":"02197BFD-4145-425E-B697-08B69817DCB7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682642","source":"psirt@us.ibm.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/69435","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95354","source":"psirt@us.ibm.com","tags":["VDB Entry","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/69435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-4364","sourceIdentifier":"product-security@apple.com","published":"2014-09-18T10:55:08.923","lastModified":"2026-06-17T00:09:52.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong authentication methods, which allows remote attackers to calculate credentials by offering LEAP authentication from a crafted Wi-Fi AP and then performing a cryptographic attack against the MS-CHAPv1 hash."},{"lang":"es","value":"El subsistema 802.1X en Apple iOS anterior a 8 y Apple TV anterior a 7 no requiere métodos de autenticación fuertes, lo que permite a atacantes remotos calcular las credenciales mediante el ofrecimiento de la autenticación LEAP desde un punto de acceso Wi-Fi manipulado y entonces realizando un ataque criptográfico contra el hash MS-CHAPv1."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:N/A:N","baseScore":2.9,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":5.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.2","matchCriteriaId":"4B2B0F1C-DDAC-476D-A908-CE338CF5D7A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*","matchCriteriaId":"07A11433-B725-4BD6-B998-4B3637F061EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4FD62141-07B1-4E3D-80BC-25D519F90DBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D9737BD4-B4F4-4291-A1E9-B692ECBC657E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B6160869-944D-4E34-BB81-6A1259D692B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"090CAC3C-4B20-46E5-A8C7-950B7E1DB5E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E96F77DD-0962-4E55-97A2-9BC2FE01D8A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8BD9ACBF-34A4-4181-A6E0-78ABD4FC9ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*","matchCriteriaId":"EDF40E86-E5D2-4D66-B296-ADFA78B42113"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"997D8B0E-44AC-4598-B533-AB31CBE5E2F2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"68138EEE-F622-4E94-BC41-1106671EC927"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:*","matchCriteriaId":"5365205F-B91D-4123-8CFD-EA42E0DEA944"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D8C7F676-5ACC-4330-9591-465CA8AF77AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D5314D7F-8352-41F5-A155-5E5392C58ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.1:*:*:*:*:*:*:*","matchCriteriaId":"36567F18-DE70-4189-A52E-A0376C779B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5EA1745A-E240-462A-BDA9-200DB6AC112F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EC814F33-E1D4-4910-BD1C-2C002D734415"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html","source":"product-security@apple.com"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html","source":"product-security@apple.com"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html","source":"product-security@apple.com"},{"url":"http://support.apple.com/kb/HT6441","source":"product-security@apple.com"},{"url":"http://support.apple.com/kb/HT6442","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/69882","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/69913","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1030866","source":"product-security@apple.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96097","source":"product-security@apple.com"},{"url":"https://support.apple.com/kb/HT6535","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT6441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT6442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT6535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-4373","sourceIdentifier":"product-security@apple.com","published":"2014-09-18T10:55:09.233","lastModified":"2026-06-17T00:09:53.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The IntelAccelerator driver in the IOAcceleratorFamily subsystem in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service (NULL pointer dereference and device restart) via a crafted application."},{"lang":"es","value":"El controlador IntelAccelerator en el subsistema IOAcceleratorFamily en Apple iOS anterior a 8 y Apple TV anterior a 7 permite a atacantes causar una denegación de servicio (referencia a puntero nulo y cuelgue del dispositivo) a través de una aplicación manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.2","matchCriteriaId":"4B2B0F1C-DDAC-476D-A908-CE338CF5D7A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*","matchCriteriaId":"07A11433-B725-4BD6-B998-4B3637F061EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4FD62141-07B1-4E3D-80BC-25D519F90DBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D9737BD4-B4F4-4291-A1E9-B692ECBC657E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B6160869-944D-4E34-BB81-6A1259D692B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"090CAC3C-4B20-46E5-A8C7-950B7E1DB5E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E96F77DD-0962-4E55-97A2-9BC2FE01D8A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8BD9ACBF-34A4-4181-A6E0-78ABD4FC9ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*","matchCriteriaId":"EDF40E86-E5D2-4D66-B296-ADFA78B42113"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"997D8B0E-44AC-4598-B533-AB31CBE5E2F2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"68138EEE-F622-4E94-BC41-1106671EC927"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:*","matchCriteriaId":"5365205F-B91D-4123-8CFD-EA42E0DEA944"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D8C7F676-5ACC-4330-9591-465CA8AF77AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D5314D7F-8352-41F5-A155-5E5392C58ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.1:*:*:*:*:*:*:*","matchCriteriaId":"36567F18-DE70-4189-A52E-A0376C779B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5EA1745A-E240-462A-BDA9-200DB6AC112F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EC814F33-E1D4-4910-BD1C-2C002D734415"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.9.5","matchCriteriaId":"9C3A0363-F05A-49C3-A9D2-E4F31B60CD4D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html","source":"product-security@apple.com"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html","source":"product-security@apple.com"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html","source":"product-security@apple.com"},{"url":"http://support.apple.com/kb/HT6441","source":"product-security@apple.com"},{"url":"http://support.apple.com/kb/HT6442","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/69882","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/69934","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1030866","source":"product-security@apple.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96108","source":"product-security@apple.com"},{"url":"https://support.apple.com/kb/HT6535","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT6441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT6442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT6535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\" target=\"_blank\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2014-4406","sourceIdentifier":"product-security@apple.com","published":"2014-09-19T10:55:04.060","lastModified":"2026-06-17T00:09:56.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Xcode Server en CoreCollaboration en Apple OS X Server anterior a 3.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.2","matchCriteriaId":"416C945B-8A31-4813-94EF-FB9FB9050CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"09166614-1225-4B0A-AC24-050E8E968A81"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F879169-CFCE-4343-8F51-EF55DE4557B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F5046CE5-A089-4D6F-A363-9A07BCD87630"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"4B43AF62-55A4-441C-96FB-2FC91B8B6C87"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"55E441E1-15A8-4551-B333-B2F96C0F6398"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"649211DF-A52C-4DD7-A166-BCC78D96442F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE40E1C5-5B08-47CC-961C-35B65595B48D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D96B0AD-349C-4E08-9F16-0AB0A43D3AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"98F09140-1981-469B-8F65-46AE3DF4AC56"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"18A8DD58-9568-4A50-AB13-199A47379BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"AA056CE2-1CE2-49AA-9239-D47F14219980"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:os_x_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1D9D6310-064E-48B6-A29A-D0241AAC16EF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html","source":"product-security@apple.com"},{"url":"http://secunia.com/advisories/61307","source":"product-security@apple.com"},{"url":"http://support.apple.com/kb/HT6448","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.cloudscan.me/2014/09/cve-2014-4406-apple-sa-2014-09-17-5-os.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/69935","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1030870","source":"product-security@apple.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96047","source":"product-security@apple.com"},{"url":"https://support.apple.com/kb/HT6536","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT6448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cloudscan.me/2014/09/cve-2014-4406-apple-sa-2014-09-17-5-os.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT6536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-7970","sourceIdentifier":"cve@mitre.org","published":"2014-10-13T10:55:08.497","lastModified":"2026-06-17T00:16:02.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot directory, which allows local users to cause a denial of service (mount-tree loop) via . (dot) values in both arguments to the pivot_root system call."},{"lang":"es","value":"La implementación pivot_root en fs/namespace.c en el kernel de Linux hasta 3.17 no interactúa debidamente con ciertas localizaciones de un directorio chroot, lo que permite a usuarios locales causar una denegación de servicio (bucle de montaje de árbol) a través de valores . (punto) en ambos argumentos en la llamada de sistema pivot_root."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:*:*:*:*","matchCriteriaId":"623DB4CD-8CB3-445A-B9B5-1238CF195235"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17","matchCriteriaId":"2EDC011A-F5BE-496E-857F-8586DD6E33E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/60174","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/61142","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/08/21","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70319","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030991","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.spinics.net/lists/linux-fsdevel/msg79153.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2419-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2420-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2513-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2514-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1842","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2077","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151095","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96921","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d0826019e529f21c84687521d03f60cd241ca7d","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/60174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/61142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/08/21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.spinics.net/lists/linux-fsdevel/msg79153.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2419-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2420-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2513-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2514-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d0826019e529f21c84687521d03f60cd241ca7d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-7975","sourceIdentifier":"cve@mitre.org","published":"2014-10-13T10:55:09.263","lastModified":"2026-06-17T00:16:02.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability for do_remount_sb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNT_LOCKED flag, and making an MNT_FORCE umount system call."},{"lang":"es","value":"La función do_umount en fs/namespace.c en el kernel de Linux hasta 3.17 no requiere la capacidad CAP_SYS_ADMIN para llamadas do_remount_sb que cambian el sistema de ficheros root a sólo lectura, lo que permite a usuarios locales causar una denegación de servicio (pérdida de la habilidad de escritura) mediante la realización de ciertas llamadas a la liberación de sistemas, la limpieza del indicador / MNT_LOCKED, y la realización de una llamada al sistema umount MNT_FORCE."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17","matchCriteriaId":"2EDC011A-F5BE-496E-857F-8586DD6E33E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ef3a56b1c466629cd0bf482b09c7b0e5a085bb5","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/60174","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/61145","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62633","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62634","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://thread.gmane.org/gmane.linux.kernel.stable/109312","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/08/22","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70314","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031180","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2415-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2416-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2419-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2420-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2421-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1842","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2077","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151108","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96994","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ef3a56b1c466629cd0bf482b09c7b0e5a085bb5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/60174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/61145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://thread.gmane.org/gmane.linux.kernel.stable/109312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/08/22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2415-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2416-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2419-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2420-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2421-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2014-8086","sourceIdentifier":"cve@mitre.org","published":"2014-10-13T10:55:09.590","lastModified":"2026-06-17T00:16:12.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag."},{"lang":"es","value":"Condición de carrera en la función ext4_file_write_iter en fs/ext4/file.c en el kernel de Linux hasta 3.17 permite a usuarios locales causar una denegación de servicio (no disponibilidad de ficheros) a través de una combinación de una acción de escritura y una operación F_SETFL fcntl para el indicador O_DIRECT."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17","matchCriteriaId":"2EDC011A-F5BE-496E-857F-8586DD6E33E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"C202F75B-221A-40BB-8A0D-451335B39937"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0290.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0694.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/09/25","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70376","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.spinics.net/lists/linux-ext4/msg45683.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.spinics.net/lists/linux-ext4/msg45685.html","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151353","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96922","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lkml.org/lkml/2014/10/8/545","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/9/129","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0290.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0694.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/09/25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.spinics.net/lists/linux-ext4/msg45683.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.spinics.net/lists/linux-ext4/msg45685.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lkml.org/lkml/2014/10/8/545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/9/129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-3610","sourceIdentifier":"secalert@redhat.com","published":"2014-11-10T11:55:06.330","lastModified":"2026-06-17T00:08:36.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c."},{"lang":"es","value":"La funcionalidad de procesamiento WRMSR en el subsistema KVM en el kernel de Linux hasta 3.17.2 no maneja debidamente la escritura de direcciones no canónicas en un registro especifico a modelos, lo que permite a usuarios del sistema operativo invitado causar una denegación de servicio (caída del sistema operativo anfitrión) mediante el aprovechamiento de los privilegios del sistema operativo invitado, relacionado con la función wrmsr_interception en arch/x86/kvm/svm.c y la función handle_wrmsr en arch/x86/kvm/vmx.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.17.2","matchCriteriaId":"0FA12E64-02D2-4452-A4C8-7B636EC1BCBD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*","matchCriteriaId":"CCE4D64E-8C4B-4F21-A9B0-90637C85C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"C202F75B-221A-40BB-8A0D-451335B39937"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=854e8bb1aa06c578c2c9145fa6bfe3680ef63b23","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0869.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/24/9","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70742","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2394-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2491-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144883","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/854e8bb1aa06c578c2c9145fa6bfe3680ef63b23","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=854e8bb1aa06c578c2c9145fa6bfe3680ef63b23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0869.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/24/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2394-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2491-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/854e8bb1aa06c578c2c9145fa6bfe3680ef63b23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-3611","sourceIdentifier":"secalert@redhat.com","published":"2014-11-10T11:55:06.393","lastModified":"2026-06-17T00:08:36.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash) by leveraging incorrect PIT emulation."},{"lang":"es","value":"Condición de carrera en la función __kvm_migrate_pit_timer en arch/x86/kvm/i8254.c en el subsistema KVM en el kernel de Linux hasta 3.17.2 permite a usuarios del sistema operativo invitado causar una denegación de servicio (caída del sistema operativo anfitrión) mediante el aprovechamiento de la emulación PIT incorrecta."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17.2","matchCriteriaId":"D5362594-2AE6-4AFD-A1FB-FCB55482F71E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2febc839133280d5a5e8e1179c94ea674489dae2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0284.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0869.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/24/9","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2394-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2491-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144878","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/2febc839133280d5a5e8e1179c94ea674489dae2","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2febc839133280d5a5e8e1179c94ea674489dae2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0284.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0869.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/24/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2394-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2491-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/2febc839133280d5a5e8e1179c94ea674489dae2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-3646","sourceIdentifier":"secalert@redhat.com","published":"2014-11-10T11:55:06.487","lastModified":"2026-06-17T00:08:40.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application."},{"lang":"es","value":"arch/x86/kvm/vmx.c en el subsistema KVM en el kernel de Linux hasta 3.17.2 no tiene un manejador de salida para la instrucción INVVPID, lo que permite a usuarios del sistema operativo invitado causar una denegación de servicio (caída del sistema operativo invitado) a través de una aplicación manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17.2","matchCriteriaId":"D5362594-2AE6-4AFD-A1FB-FCB55482F71E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*","matchCriteriaId":"CCE4D64E-8C4B-4F21-A9B0-90637C85C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"C202F75B-221A-40BB-8A0D-451335B39937"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a642fc305053cc1c6e47e4f4df327895747ab485","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0284.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/24/9","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2394-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144825","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/a642fc305053cc1c6e47e4f4df327895747ab485","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a642fc305053cc1c6e47e4f4df327895747ab485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0284.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/24/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2394-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/a642fc305053cc1c6e47e4f4df327895747ab485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-3647","sourceIdentifier":"secalert@redhat.com","published":"2014-11-10T11:55:06.533","lastModified":"2026-06-17T00:08:40.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application."},{"lang":"es","value":"arch/x86/kvm/emulate.c en el subsistema KVM en el kernel de Linux hasta 3.17.2 no realiza debidamente los cambios RIP, lo que permite a usuarios del sistema operativo invitado causar una denegación de servicio (caída del sistema operativo invitado) a través de una aplicación manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17.2","matchCriteriaId":"D5362594-2AE6-4AFD-A1FB-FCB55482F71E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*","matchCriteriaId":"CCE4D64E-8C4B-4F21-A9B0-90637C85C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"C202F75B-221A-40BB-8A0D-451335B39937"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*","matchCriteriaId":"44B8FEDF-6CB0-46E9-9AD7-4445B001C158"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=234f3ce485d54017f15cf5e0699cff4100121601","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d1442d85cc30ea75f7d399474ca738e0bc96f715","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/24/9","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70748","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2394-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144897","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/234f3ce485d54017f15cf5e0699cff4100121601","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/d1442d85cc30ea75f7d399474ca738e0bc96f715","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=234f3ce485d54017f15cf5e0699cff4100121601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d1442d85cc30ea75f7d399474ca738e0bc96f715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/24/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2394-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/234f3ce485d54017f15cf5e0699cff4100121601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/d1442d85cc30ea75f7d399474ca738e0bc96f715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-3690","sourceIdentifier":"secalert@redhat.com","published":"2014-11-10T11:55:07.783","lastModified":"2026-06-17T00:08:45.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU."},{"lang":"es","value":"arch/x86/kvm/vmx.c en el subsistema KVM en el kernel de Linux anterior a 3.17.2 en los procesadores Intel no asegura que el valor en el registro de control CR4 queda igual después de una entrada VM, lo que permite a usuarios del sistema operativo anfitrión cancelar varios procesos o causar una denegación de servicio (interrupción del sistema) mediante el aprovechamiento del acceso a /dev/kvm, tal y como fue demostrado por llamadas a prctl PR_SET_TSC dentro de una copia modificada de QEMU."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.17.2","matchCriteriaId":"0FA12E64-02D2-4452-A4C8-7B636EC1BCBD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:*","matchCriteriaId":"5767DAFA-095A-45F6-BCFD-0F0FE10CC0F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"FD7EDC2D-1DA4-414F-A100-4F02C76A557B"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:*","matchCriteriaId":"1B097F99-D0D7-4B32-9E1A-BE5E653CFA7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*","matchCriteriaId":"CCE4D64E-8C4B-4F21-A9B0-90637C85C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:*","matchCriteriaId":"3DB41B45-D94D-4A58-88B0-B3EC3EC350E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:*","matchCriteriaId":"9DFA18B6-2642-470A-A350-68947529EE5D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d974baa398f34393db76be45f7d4d04fbdbb4a0a","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0290.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0782.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0864.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60174","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:058","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/21/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/29/7","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70691","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2419-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2420-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2421-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153322","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/d974baa398f34393db76be45f7d4d04fbdbb4a0a","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d974baa398f34393db76be45f7d4d04fbdbb4a0a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0290.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0782.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0864.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2014/dsa-3060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/21/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/29/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2417-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2418-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2419-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2420-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2421-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/d974baa398f34393db76be45f7d4d04fbdbb4a0a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-8559","sourceIdentifier":"cve@mitre.org","published":"2014-11-10T11:55:09.813","lastModified":"2026-06-17T00:16:56.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application."},{"lang":"es","value":"La función d_walk en fs/dcache.c en el kernel de Linux hasta 3.17.2 no mantiene debidamente la semántica de rename_lock, lo que permite a usuarios locales causar una denegación de servicio (bloqueo y cuelgue del sistema) a través de una aplicación manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17.2","matchCriteriaId":"D5362594-2AE6-4AFD-A1FB-FCB55482F71E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*","matchCriteriaId":"CCE4D64E-8C4B-4F21-A9B0-90637C85C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:*","matchCriteriaId":"3DB41B45-D94D-4A58-88B0-B3EC3EC350E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:*","matchCriteriaId":"9DFA18B6-2642-470A-A350-68947529EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"C202F75B-221A-40BB-8A0D-451335B39937"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*","matchCriteriaId":"44B8FEDF-6CB0-46E9-9AD7-4445B001C158"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1976.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1978.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/62801","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2015/dsa-3170","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/30/7","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70854","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034051","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2492-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2493-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2515-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2516-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2517-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2518-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159313","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=946e51f2bf37f1656916eb75bd0742ba33983c28","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca5358ef75fc69fee5322a38a340f5739d997c10","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://lkml.org/lkml/2014/10/25/171","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/25/179","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/25/180","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/26/101","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/26/116","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/26/128","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/26/129","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K05211147","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1976.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/62801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2015/dsa-3170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/30/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/70854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2492-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2493-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2515-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2516-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2517-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2518-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=946e51f2bf37f1656916eb75bd0742ba33983c28","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca5358ef75fc69fee5322a38a340f5739d997c10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://lkml.org/lkml/2014/10/25/171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/25/179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/25/180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/26/101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/26/116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/26/128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lkml.org/lkml/2014/10/26/129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K05211147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-5312","sourceIdentifier":"cve@mitre.org","published":"2014-11-24T16:59:00.087","lastModified":"2026-06-16T23:26:32.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option."},{"lang":"es","value":"Vulnerabilidad de XSS en jquery.ui.dialog.js en el widget Dialog en jQuery UI anterior a 1.10.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de la opción del título."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:jquery:*:*","versionEndExcluding":"1.10.0","matchCriteriaId":"92023DA6-EAD6-4690-850D-9DB11CFAB33B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","matchCriteriaId":"80E516C0-98A4-4ADE-B69F-66A772E2BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:drill:1.16.0:*:*:*:*:*:*:*","matchCriteriaId":"235DC57F-22B8-4219-9499-7D005D90A654"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.86","matchCriteriaId":"013FAABA-8CDD-46AD-B321-9908634C880A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"http://bugs.jqueryui.com/ticket/6016","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0442.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1462.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2014/q4/613","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2014/q4/616","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3249","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/71106","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037035","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/98696","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190416-0007/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.drupal.org/sa-core-2022-002","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://bugs.jqueryui.com/ticket/6016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0442.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1462.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2014/q4/613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2014/q4/616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/71106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/98696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190416-0007/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.drupal.org/sa-core-2022-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-9271","sourceIdentifier":"cve@mitre.org","published":"2015-01-09T18:59:02.587","lastModified":"2026-06-17T00:18:01.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extension, related to inline attachments, as demonstrated by a .swf.jpeg filename."},{"lang":"es","value":"Vulnerabilidad de XSS en file_download.php en MantisBT anterior a 1.2.18 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un fichero Flash con un extensión de imagen, relacionado con adjuntos de línea interior (inline), tal y como fue demostrado por un nombre de fichero .swf.jpeg."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:a1:*:*:*:*:*:*","matchCriteriaId":"45FF2B45-AA64-4428-8F6E-65C5171990CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:a2:*:*:*:*:*:*","matchCriteriaId":"CC868663-1E48-4F9A-B687-5B48D016611B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:a3:*:*:*:*:*:*","matchCriteriaId":"4F04ED02-4D99-45CF-9BEC-AC0F648748EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:a4:*:*:*:*:*:*","matchCriteriaId":"0AC08731-C4BB-4D84-ADBE-80054149BF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"35AAF0B4-31B5-4849-813F-63D9546C2E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"FB98EF06-7D6E-4D5F-819D-21B437E91B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"66AB409E-5A5B-4455-8B68-22C32152681B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D6F2BA78-D054-4E49-ABCA-637922898BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4595B1E3-25AB-489E-A847-FDBF2554DD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E6A13A38-E149-42A7-9309-BC991521320B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C11A8F17-5253-475B-89FF-A26EA7531E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4A88B09D-CDCF-45FD-B004-13B597DA4F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"49583BE8-B832-4E9F-B154-47A26C72489D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"E2501F40-3630-4528-BE0A-61D4BB6EC7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9223DAF7-D03E-4A4E-8AB5-5CEB87DFF2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"078C0943-C27C-44A9-B00D-5A261C58D6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CFF77ABF-0A03-437A-B241-1EF2BBB83D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"9DA2615A-CD65-4765-AB0A-D72C2BEB00F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"7D09CC46-DFA2-408D-8720-05C23E73C859"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"3461212B-A96B-4D38-A722-84E7418C2A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7B6DEE14-744B-4DE4-BDCF-E4E4D37F70A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D4462BEE-39B6-47BD-B08F-5BE1FD918221"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5F096CD6-534E-4ABF-B2DF-D4B55B8C5F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A66AB537-6FBA-4A51-B10C-BF61F54BC01B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A50835BF-D28B-47FF-81F0-C34D95D6F2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BA0EB9A6-1DFD-4C17-A002-0899DA252A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BBA33285-3EE7-43FD-8347-E7D9A18DC134"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8827C2B4-EBEC-4D64-9AC8-07A048467F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1F32DFF4-6448-46FD-9358-4FB1C310EC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"20328CE4-0488-43B8-AA64-A6CB2230C74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"0BDEB950-D3F4-4B96-B456-B8441DC403D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"FE69E6A6-8CD2-4C8A-A30A-CB0A04AC539F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"D464F7CF-A156-4EE5-BB59-6C759448EB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"C97BF96E-2FD0-4D5E-B736-8CCE6E8A34B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"5F1BFB72-CDD6-466E-ACAD-EA442D11C22F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"DD11DD1B-EC1C-48F4-B4C6-1CF6A0F80970"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"5899A557-AC72-4CB0-984F-F274AE5932BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F75A6F79-C5D5-4612-9976-B54664A5E29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"4C54ABCB-AD1B-4C34-927A-D9D560EA4C07"}]}]}],"references":[{"url":"http://seclists.org/oss-sec/2014/q4/867","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2014/q4/902","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2014/q4/924","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/62101","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3120","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/mantisbt/mantisbt/commit/9fb8cf36f","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.mantisbt.org/bugs/view.php?id=17874","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://seclists.org/oss-sec/2014/q4/867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2014/q4/902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2014/q4/924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/62101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/mantisbt/mantisbt/commit/9fb8cf36f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.mantisbt.org/bugs/view.php?id=17874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0071","sourceIdentifier":"secure@microsoft.com","published":"2015-02-11T03:01:12.497","lastModified":"2026-06-17T00:19:30.960","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \"Internet Explorer ASLR Bypass Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 9 hasta 11 permite a atacantes remotos evadir el mecanismo de protección ASLR a través de un sitio web manipulado, también conocido como 'vulnerabilidad de la evasión de ASRL de Internet Explorer.'"}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-10T18:49:00.421578Z","id":"CVE-2015-0071","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-05-25","cisaActionDue":"2022-06-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Internet Explorer ASLR Bypass Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*","matchCriteriaId":"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*","matchCriteriaId":"0D229E41-A971-4284-9657-16D78414B93F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*","matchCriteriaId":"ABC7A32C-4A4A-4533-B42E-350E728ADFEB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*","matchCriteriaId":"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*","matchCriteriaId":"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/72455","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031723","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/72455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0071","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2015-1793","sourceIdentifier":"secalert@redhat.com","published":"2015-07-09T19:17:00.093","lastModified":"2026-06-17T00:23:00.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate."},{"lang":"es","value":"La función de verificación de certificado X509 en crypto/x509/x509_vfy.c en OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, y 1.0.2c no procesa correctamente los valores cA de restricción básica del X.509 durante la identificación de cadenas de certificado alternativo, lo que permite a atacantes remotos suplantar una función de autoridad de certificación y propiciar verificaciones de certificado involuntarias a través de un leaf certificate válido."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:supply_chain_products_suite:6.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F958CB89-F7D2-4773-86D9-4C225ED44128"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:supply_chain_products_suite:6.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5BF690CE-E83D-4C92-A0F2-5A5A450F73F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:supply_chain_products_suite:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4D4C8E58-FD8C-4269-98B2-FAB85271C9C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1:*:*:*:*:*:*:*","matchCriteriaId":"3581A634-36D3-4EA1-A08F-973E216B6DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*","matchCriteriaId":"41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:opus_10g_ethernet_switch_family:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.6","matchCriteriaId":"D5646853-D852-45B8-8835-2C77C937FC9D"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"secalert@redhat.com"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161747.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161782.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144370846326989&w=2","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv_20150709.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/75652","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032817","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.561427","source":"secalert@redhat.com"},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454058.htm","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=9a0db453ba017ebcaccbee933ee6511a9ae4d1c8","source":"secalert@redhat.com"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822825","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"secalert@redhat.com"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10125","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201507-15","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/38640/","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15:12.openssl.asc","source":"secalert@redhat.com"},{"url":"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161747.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161782.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144370846326989&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv_20150709.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/75652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.561427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454058.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=9a0db453ba017ebcaccbee933ee6511a9ae4d1c8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201507-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/38640/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5521","sourceIdentifier":"cve@mitre.org","published":"2015-07-14T16:59:08.047","lastModified":"2026-06-17T00:29:16.173","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comando en BlackCat CMS 1.1.2, permite a un atacante remoto inyectar arbitrariamente secuencias de comandos web o HTML a través del nombre de un nuevo grupo de backend/groups/index.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackcat-cms:blackcat_cms:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53200774-9820-415A-A10D-77673B1E7AB1"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/132589/Black-Cat-CMS-1.1.2-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/BlackCatDevelopment/BlackCatCMS/issues/408","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/132589/Black-Cat-CMS-1.1.2-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/BlackCatDevelopment/BlackCatCMS/issues/408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-2890","sourceIdentifier":"cret@cert.org","published":"2015-08-01T01:59:13.943","lastModified":"2026-06-17T00:24:55.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-dependent firmware before A21 does not enforce a BIOS_CNTL locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging console access, a similar issue to CVE-2015-3692."},{"lang":"es","value":"Vulnerabilidad en la implementación de la BIOS en dispositivos Dell Latitude, OptiPlex, Precisision Mobile Workstation y Precision Workstation Client Solutions (CS) con modelo dependiente del firmware anterior a A21, no impone un mecanismo de protección de bloqueo BIOS_CNTL al ser despertado de la suspensión, lo que permite a usuarios locales conducir ataques de flash EFI mediante el aprovechamiento de acceso a la consola, un problema similar a CVE-2015-3692."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*","versionEndIncluding":"a20","matchCriteriaId":"F96D27AD-EB5B-487E-8235-F05956F183BA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e6420_atg:*:*:*:*:*:*:*:*","matchCriteriaId":"DCC5428F-8648-430F-8CE8-08C772D5BDED"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e6420_xfr:*:*:*:*:*:*:*:*","matchCriteriaId":"9C74F0B2-05AF-49EE-B076-D6DEFDBE41CB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*","versionEndIncluding":"a12","matchCriteriaId":"8392EFC5-B9AB-452E-9AD6-8B32A635481C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e6220:*:*:*:*:*:*:*:*","matchCriteriaId":"2B3FE1C2-B072-436E-96CB-22D23BDCE8C0"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_xt3:*:*:*:*:*:*:*:*","matchCriteriaId":"39513230-B59E-49F7-88A3-F445D03EA27B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*","versionEndIncluding":"a15","matchCriteriaId":"502A1AD4-229B-4FE7-931D-10742D113F5A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e4310:*:*:*:*:*:*:*:*","matchCriteriaId":"7E89E008-BD0E-437D-9B9B-CF7DD9203AE3"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e5410:*:*:*:*:*:*:*:*","matchCriteriaId":"78DF7412-FAD0-4E61-B30F-85E2A566795A"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e5510:*:*:*:*:*:*:*:*","matchCriteriaId":"953DF818-61F0-4ED4-9666-722C798205D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e6410_atg:*:*:*:*:*:*:*:*","matchCriteriaId":"77B33C69-A368-454F-A052-2B46F3CECF7F"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e6510:*:*:*:*:*:*:*:*","matchCriteriaId":"FF3067E4-E9F1-46A8-A9B3-E0A8F488A9EC"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:precision_mobile_m4600:*:*:*:*:*:*:*:*","matchCriteriaId":"A11853A7-601B-4E8F-8582-8958A59D8AB9"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:precision_t1600:*:*:*:*:*:*:*:*","matchCriteriaId":"AFC18C0F-E3EC-48F3-B990-DB4ACEABB6A4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*","versionEndIncluding":"a18","matchCriteriaId":"C66608F6-FA56-453C-BBCD-DFF64BB8C95E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e6320:*:*:*:*:*:*:*:*","matchCriteriaId":"810B5BA9-8DB3-4A62-8CD5-AC1FBA4298FC"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e6520:*:*:*:*:*:*:*:*","matchCriteriaId":"3107B874-0B9D-4243-9194-2F2E7DEFBFD0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*","versionEndIncluding":"a14","matchCriteriaId":"1E7904EB-673A-4DD1-A73E-CED4A1B13CDF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:precision_mobile_m4500:*:*:*:*:*:*:*:*","matchCriteriaId":"D124B8F0-156B-46C2-933B-2E1CF3F15871"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:precision_mobile_m6600:*:*:*:*:*:*:*:*","matchCriteriaId":"C03D4B2E-FB0E-45E8-8DBE-A3B578C8B3D8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:bios:a13:*:*:*:*:*:*:*","matchCriteriaId":"4EA431FC-1121-4246-A4BD-1347F6D2C293"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e4310:*:*:*:*:*:*:*:*","matchCriteriaId":"7E89E008-BD0E-437D-9B9B-CF7DD9203AE3"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e5420:*:*:*:*:*:*:*:*","matchCriteriaId":"7B7A9D4F-814C-4D09-95FF-C35D5B9DD2C5"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_e5520:*:*:*:*:*:*:*:*","matchCriteriaId":"0D8FA4C7-80B6-49EA-9FCF-504ACFAB0EBB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*","versionEndIncluding":"a11","matchCriteriaId":"A69BD5BB-CEE8-4DB4-B7CE-20B6373FBB3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:precision_t3600:*:*:*:*:*:*:*:*","matchCriteriaId":"E605E0D0-2320-44FE-97A7-39FD8D9D88C0"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:precision_t5600:*:*:*:*:*:*:*:*","matchCriteriaId":"22E90D88-3C7D-4C6A-BBA0-1F7AE623EB85"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:precision_t5600_xl:*:*:*:*:*:*:*:*","matchCriteriaId":"23652CE5-3B58-4067-94E0-334D987A87A1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*","versionEndIncluding":"a10","matchCriteriaId":"9B0C2091-2FB9-49CD-8B38-840BEAD78109"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:optiplex_390:*:*:*:*:*:*:*:*","matchCriteriaId":"A8E08E38-3D9D-4E1E-8CEB-0160D768BF41"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*","versionEndIncluding":"a17","matchCriteriaId":"DE8947B0-DA10-4A54-B03D-C2AE3D917732"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:optiplex_790:*:*:*:*:*:*:*:*","matchCriteriaId":"935B84EB-4EE8-4A44-83CE-FFEA1A480ACA"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:optiplex_990:*:*:*:*:*:*:*:*","matchCriteriaId":"C30A4609-2EE6-4AB5-BE64-1D03029EC547"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/577140","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/BLUU-9XXQ9L","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/577140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/BLUU-9XXQ9L","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-3238","sourceIdentifier":"secalert@redhat.com","published":"2015-08-24T14:59:04.010","lastModified":"2026-06-17T00:25:35.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password."},{"lang":"es","value":"Vulnerabilidad en la función _unix_run_helper_binary en el módulo pam_unix en Linux-PAM (también conocido como pam) en versiones anteriores a 1.2.1, cuando no es posible acceder directamente a las contraseñas, permite a usuarios locales enumerar los nombres de usuario o causar una denegación de servicio (colgado) a través de una contraseña larga."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"97736CA5-0370-4CA9-B5D4-E157B3E699F5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:sparc-opl_service_processor:*:*:*:*:*:*:*:*","versionEndIncluding":"1121","matchCriteriaId":"6AF02A45-1811-44F2-B3C9-90C11F5DF6DF"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161350.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161249.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1640.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/06/25/13","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/75428","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2935-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2935-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2935-3","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1228571","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201605-05","source":"secalert@redhat.com"},{"url":"https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-011/?fid=6551","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://www.trustwave.com/Resources/SpiderLabs-Blog/Username-Enumeration-against-OpenSSH-SELinux-with-CVE-2015-3238/","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1640.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/06/25/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2935-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2935-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2935-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1228571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-011/?fid=6551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.trustwave.com/Resources/SpiderLabs-Blog/Username-Enumeration-against-OpenSSH-SELinux-with-CVE-2015-3238/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-3195","sourceIdentifier":"secalert@redhat.com","published":"2015-12-06T20:59:05.973","lastModified":"2026-06-17T00:25:30.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application."},{"lang":"es","value":"La implementación ASN1_TFLG_COMBINE en crypto/asn1/tasn_dec.c en OpenSSL en versiones anteriores a 0.9.8zh, 1.0.0 en versiones anteriores a 1.0.0t, 1.0.1 en versiones anteriores a 1.0.1q y 1.0.2 en versiones anteriores a 1.0.2e no maneja correctamente los errores provocados por datos X509_ATTRIBUTE malformados, lo que permite a atacantes remotos obtener información sensible de memoria de proceso desencadenando un fallo de decodificación en una aplicación PKCS#7 o CMS."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.4","matchCriteriaId":"7A594A00-699D-4899-AEE5-E6B9B948FB62"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:api_gateway:11.1.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0F27F67F-FE01-4D53-8A89-96C84DE49F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5553591-073B-45E3-999F-21B8BA2EEE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_webrtc_session_controller:7.0:*:*:*:*:*:*:*","matchCriteriaId":"EFDB5ADE-F4DF-4054-8628-5EF6C5DB864B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_webrtc_session_controller:7.1:*:*:*:*:*:*:*","matchCriteriaId":"59C4F882-5B42-43E6-9CCC-D2AB23117A7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:*","matchCriteriaId":"726DB59B-00C7-444E-83F7-CB31032482AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:exalogic_infrastructure:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CB059A52-DE6D-47FB-98E8-5A788E1C0FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:exalogic_infrastructure:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D70580AD-2134-49D3-BE15-020023A10E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"ECBEAF3E-B4AA-48DE-AD14-A1B79630DD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:life_sciences_data_hub:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C4DAF41-56BC-4AFA-9189-C7F6555FE05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:sun_ray_software:11.1:*:*:*:*:*:*:*","matchCriteriaId":"44A1C87F-DB77-4BD7-93BF-ADB70F2E9DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:transportation_management:6.1:*:*:*:*:*:*:*","matchCriteriaId":"606B0DB7-A09D-47A2-B9FC-2852C149D5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:transportation_management:6.2:*:*:*:*:*:*:*","matchCriteriaId":"D0216F26-3BA1-48A2-9BE2-31EA3F0239F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_server:3.2:*:*:*:*:*:x86:*","matchCriteriaId":"FC9E8528-0FB8-4BF0-A9EF-6CC84A2631A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3.36","matchCriteriaId":"3F2DB6DC-9A66-47D3-BE56-6E89E2682417"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.14","matchCriteriaId":"1D516C30-6F10-4531-B0A4-4479815CD966"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndIncluding":"4.0.4","matchCriteriaId":"D5DF5E36-74D2-4DFB-B1D0-A5D3D709C252"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*","matchCriteriaId":"62A2AC02-A933-4E51-810E-5D040B476B7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*","matchCriteriaId":"D7B037A8-72A6-4DFF-94B2-D688A5F6F876"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*","matchCriteriaId":"44B8FEDF-6CB0-46E9-9AD7-4445B001C158"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.8zh","matchCriteriaId":"93668270-B838-483C-8BE7-F1D8FBF45A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.0t","matchCriteriaId":"4A4E8B83-D5BA-4026-AE58-41A6775C25E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.1","versionEndExcluding":"1.0.1q","matchCriteriaId":"D5080085-7307-47DE-8CB4-90E5EB43E735"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2e","matchCriteriaId":"4C72E267-D0DC-4B13-80D4-6425FFE290BB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*","matchCriteriaId":"35BBD83D-BDC7-4678-BE94-639F59281139"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00103.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145382583417444&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2616.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2617.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3413","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/78626","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=cc598f321fbac9c04da5766243ed55d55948637d","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145382583417444&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2616.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2617.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/78626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=cc598f321fbac9c04da5766243ed55d55948637d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-4993","sourceIdentifier":"psirt@us.ibm.com","published":"2015-12-21T11:59:02.110","lastModified":"2026-06-17T00:28:17.413","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-4998."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Portal 6.1.0 hasta la versión 6.1.0.6 CF27, 6.1.5 hasta la versión 6.1.5.3 CF27, 7.0.0 hasta la versión 7.0.0.2 CF29, 8.0.0 en versiones anteriores a 8.0.0.1 CF19 y 8.5.0 en versiones anteriores a CF08 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2015-4998."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5DB29F4-59AB-439C-91C4-CDF677676C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6CA922-11EF-4315-A09A-B4A8937E4CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"526738D7-1AF8-4A8F-B833-BA0E35973A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"13D6BE9C-16FD-4FB4-8A87-56B42C246316"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5B50CEA-AFC4-4B45-9954-519965237FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0902AC0F-EA4D-4E65-A70A-15DE9B904B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D808F95D-C6BD-43EB-B16C-66449977BCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6ECEE98-B276-4ED6-AA5A-109EA57E9925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E4FF84B-A17F-464B-A718-67C44D2C69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI47516","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970176","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/78609","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034284","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI47516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/78609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-4998","sourceIdentifier":"psirt@us.ibm.com","published":"2015-12-21T11:59:03.093","lastModified":"2026-06-17T00:28:17.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-4993."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Portal 6.1.0 hasta la versión 6.1.0.6 CF27, 6.1.5 hasta la versión 6.1.5.3 CF27, 7.0.0 hasta la versión 7.0.0.2 CF29, 8.0.0 en versiones anteriores a 8.0.0.1 CF19 y 8.5.0 en versiones anteriores a CF08 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2015-4993."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5DB29F4-59AB-439C-91C4-CDF677676C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6CA922-11EF-4315-A09A-B4A8937E4CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"526738D7-1AF8-4A8F-B833-BA0E35973A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"13D6BE9C-16FD-4FB4-8A87-56B42C246316"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5B50CEA-AFC4-4B45-9954-519965237FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0902AC0F-EA4D-4E65-A70A-15DE9B904B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D808F95D-C6BD-43EB-B16C-66449977BCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6ECEE98-B276-4ED6-AA5A-109EA57E9925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E4FF84B-A17F-464B-A718-67C44D2C69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI47712","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970176","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034284","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI47712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5001","sourceIdentifier":"psirt@us.ibm.com","published":"2015-12-21T11:59:04.047","lastModified":"2026-06-17T00:28:17.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote authenticated users to cause a denial of service (memory consumption) via a crafted document."},{"lang":"es","value":"IBM WebSphere Portal 6.1.0 hasta la versión 6.1.0.6 CF27, 6.1.5 hasta la versión 6.1.5.3 CF27, 7.0.0 hasta la versión 7.0.0.2 CF29, 8.0.0 en versiones anteriores a 8.0.0.1 CF19 y 8.5.0 en versiones anteriores a CF08 permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de memoria) a través de un documento manipulado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5DB29F4-59AB-439C-91C4-CDF677676C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6CA922-11EF-4315-A09A-B4A8937E4CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"526738D7-1AF8-4A8F-B833-BA0E35973A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"13D6BE9C-16FD-4FB4-8A87-56B42C246316"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5B50CEA-AFC4-4B45-9954-519965237FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0902AC0F-EA4D-4E65-A70A-15DE9B904B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D808F95D-C6BD-43EB-B16C-66449977BCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6ECEE98-B276-4ED6-AA5A-109EA57E9925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E4FF84B-A17F-464B-A718-67C44D2C69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI49540","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970176","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034284","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI49540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8373","sourceIdentifier":"cve@mitre.org","published":"2015-12-22T23:59:00.183","lastModified":"2026-06-17T00:34:24.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service (daemon crash) via a malformed packet."},{"lang":"es","value":"Los servidores kea-dhcp4 y kea-dhcp6 0.9.2 y 1.0.0-beta en ISC Kea, cuando se usan ciertas configuraciones de depuración, permiten a atacantes remotos causar una denegación de servicio (caída de demonio) a través de un paquete mal formado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:kea:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"984F9965-AF33-4F22-83C6-5CD8B427DDE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:kea:1.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"536EE5D2-C2AE-4E62-982C-94DBA97C9A65"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175218.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175337.html","source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175337.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.isc.org/article/AA-01318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-6431","sourceIdentifier":"psirt@cisco.com","published":"2015-12-23T03:59:00.153","lastModified":"2026-06-17T00:30:52.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405."},{"lang":"es","value":"Cisco IOS XE 16.1.1 permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de un paquete con la dirección MAC de fuente 00-00-00-00-00-00, también conocida como Bug ID CSCux48405."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0ED5527C-A638-4E20-9928-099E32E17743"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015-1221-iosxe","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79654","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1034514","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015-1221-iosxe","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-6471","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2015-12-23T03:59:01.170","lastModified":"2026-06-17T00:30:55.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data."},{"lang":"es","value":"Eaton Cooper Power Systems ProView 4.x y 5.x en versiones a anteriores a 5.1 en controles Form 6 e Idea e IdeaPLUS relay no inicializa correctamente los campos de relleno en los paquetes Ethernet, lo que permite a atacantes remotos obtener información sensible mediante la lectura de datos del paquete."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:4.0:*:*:*:*:*:*:*","matchCriteriaId":"09E9D87B-D0F2-48DD-97F1-9CB5D7B319E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BD294C06-DCE8-45B1-A59E-E45CB50CA089"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"91712733-5783-4B9A-8BD8-62A32229BC03"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FDCAC23C-22B9-4862-A967-453812EEAA3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"91DEAC57-6765-4470-963E-E9EC364657AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"955879A7-9F8F-47F2-B8F0-7D62AB69261D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ADF48CE1-EC38-4F11-82D1-514C993AF1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B9705072-55EE-46E6-B124-8C7A20D6DC03"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"04909702-7055-4822-BAB8-139EBF4E409C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7484B7D1-D109-4E5E-B26F-4FEB88E68EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E64750AD-BAA4-4837-BA51-87019A585C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:proview:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5BFA9727-CBCA-45BC-B4BA-0B5730C05450"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-295-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-295-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-6851","sourceIdentifier":"security_alert@emc.com","published":"2015-12-23T03:59:02.170","lastModified":"2026-06-17T00:31:31.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector."},{"lang":"es","value":"EMC RSA SecurID Web Agent en versiones a anteriores a 8.0 permite a atacantes físicamente próximos eludir el mecanismo de protección de privacidad de la pantalla aprovechando la desatención del equipo y ejecutando DOM Inspector."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:securid_web_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2.1","matchCriteriaId":"128403A2-0A4B-4006-9279-3FFB6EDF23EC"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135013/RSA-SecurID-Web-Agent-Authentication-Bypass.html","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2015/Dec/115","source":"security_alert@emc.com"},{"url":"http://www.securityfocus.com/bid/79646","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1034510","source":"security_alert@emc.com"},{"url":"http://packetstormsecurity.com/files/135013/RSA-SecurID-Web-Agent-Authentication-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2015/Dec/115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7927","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2015-12-23T11:59:03.017","lastModified":"2026-06-17T00:33:24.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en dispositivos eWON con firmware hasta la versión 10.1s0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ewon:ewon_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0s0","matchCriteriaId":"5B6FE7FC-1FA5-4300-B026-053085FF0420"}]}]}],"references":[{"url":"http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01","source":"ics-cert@hq.dhs.gov","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html","source":"ics-cert@hq.dhs.gov"},{"url":"http://seclists.org/fulldisclosure/2015/Dec/118","source":"ics-cert@hq.dhs.gov"},{"url":"http://www.securityfocus.com/bid/79625","source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2015/Dec/118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-7929","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2015-12-23T11:59:05.220","lastModified":"2026-06-17T00:33:24.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history."},{"lang":"es","value":"Dispositivos eWON con firmware hasta la versión 10.1s0 soportan peticiones GET no especificadas, lo que podría permitir a atacantes remotos obtener información sensible mediante la lectura de (1) registros de acceso de servidor web, (2) registros Referer de servidor web o (3) el historial del navegador."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ewon:ewon_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0s0","matchCriteriaId":"5B6FE7FC-1FA5-4300-B026-053085FF0420"}]}]}],"references":[{"url":"http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01","source":"ics-cert@hq.dhs.gov","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html","source":"ics-cert@hq.dhs.gov"},{"url":"http://seclists.org/fulldisclosure/2015/Dec/118","source":"ics-cert@hq.dhs.gov"},{"url":"http://www.securityfocus.com/bid/79625","source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2015/Dec/118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-6409","sourceIdentifier":"psirt@cisco.com","published":"2015-12-26T22:59:00.100","lastModified":"2026-06-17T00:30:50.790","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka Bug ID CSCuw87419."},{"lang":"es","value":"Cisco Jabber 10.6.x, 11.0.x y 11.1.x en Windows permite a atacantes man-in-the-middle llevar a cabo ataques de reducción de versión STARTTLS y desencadenar sesiones XMPP en texto plano a través de vectores no especificados, también conocida como Bug ID CSCuw87419."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:jabber:10.6\\(2\\):*:*:*:*:windows:*:*","matchCriteriaId":"5048C3FF-45AF-4F68-A3AE-92077A0E9D61"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151224-jab","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79678","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1034540","source":"psirt@cisco.com"},{"url":"http://www.synacktiv.com/ressources/cisco_jabber_starttls_downgrade.pdf","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151224-jab","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.synacktiv.com/ressources/cisco_jabber_starttls_downgrade.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8669","sourceIdentifier":"cve@mitre.org","published":"2015-12-26T22:59:01.240","lastModified":"2026-06-17T00:35:00.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message."},{"lang":"es","value":"libraries/config/messages.inc.php en phpMyAdmin 4.0.x en versiones anteriores a 4.0.10.12, 4.4.x en versiones anteriores a 4.4.15.2 y 4.5.x en versiones anteriores a 4.5.3.1 permite a atacantes remotos obtener información sensible a través de una petición manipulada, lo que revela la ruta completa en un mensaje de error."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F06DC95-76B1-4E24-A55F-1358A25ED0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA76CB4-6167-446A-8D4F-6D5B38046334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8D28655-7F37-474D-A4E2-772AF24B94E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1FA1951E-BD85-42BF-BF7F-79A14D165914"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"58DD0910-DBBA-4858-B9B1-FA93D08323D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DC8D93A3-8997-4EB9-A411-74B296D1341F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0245AF2D-F856-4CAA-A830-36D43026D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C69E253E-157D-45BA-A977-079A49F74A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6325E2AE-BB86-4953-AA9E-0433C00B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3C54B828-8B23-4C62-907E-8EE7E757B721"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"02DD18C8-172B-41CD-87DD-58BDEC0D9418"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"10666E30-D98A-47A9-881A-B281066F0EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3993826B-CA66-4BC2-8E1B-06CF9230B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"14928F51-761E-4FCA-B13C-A11530C7FC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"DB761644-20F5-4E0D-B301-7809EAECA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"896439D0-6C98-44A6-8C9D-0D57D57782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"978B828C-1FCB-4386-B685-5BEE5A8A500C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"51A3261B-23BE-42D7-8A52-AE2E8C274A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"F0B7EA51-27EC-4884-8D60-FB9477D2B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00014.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034806","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/c4d649325b25139d7c097e56e2e46cc7187fae45","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2015-6/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/c4d649325b25139d7c097e56e2e46cc7187fae45","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2015-6/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-6004","sourceIdentifier":"cret@cert.org","published":"2015-12-27T03:59:00.113","lastModified":"2026-06-17T00:30:14.423","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter to WrFreeFormText.asp in the Reports component or (2) the Find Device parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en IPSwitch WhatsUp Gold en versiones anteriores a la 16.4 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro (1) UniqueID (también conocido como sUniqueID) en WrFreeFormText.asp en el componente Reports o (2) Find Device."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*","versionEndIncluding":"16.3","matchCriteriaId":"0956392B-9072-4C26-BB8A-9DFD92594C57"}]}]}],"references":[{"url":"http://twitter.com/ipswitch/statuses/677558623229317121","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79506","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id/1034833","source":"cret@cert.org"},{"url":"https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems","source":"cret@cert.org","tags":["Exploit"]},{"url":"https://www.kb.cert.org/vuls/id/176160","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://twitter.com/ipswitch/statuses/677558623229317121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.kb.cert.org/vuls/id/176160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-6005","sourceIdentifier":"cret@cert.org","published":"2015-12-27T03:59:01.097","lastModified":"2026-06-17T00:30:14.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via (1) an SNMP OID object, (2) an SNMP trap message, (3) the View Names field, (4) the Group Names field, (5) the Flow Monitor Credentials field, (6) the Flow Monitor Threshold Name field, (7) the Task Library Name field, (8) the Task Library Description field, (9) the Policy Library Name field, (10) the Policy Library Description field, (11) the Template Library Name field, (12) the Template Library Description field, (13) the System Script Library Name field, (14) the System Script Library Description field, or (15) the CLI Settings Library Description field."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en IPSwitch WhatsUp Gold en versiones anteriores a la 16.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrario a través (1) de un objeto SNMP OID, (2) de un mensaje trap SNMP, (3) del campo View Names, (4) del campo Group Names, (5) del campo Flow Monitor Credentials, (6) del campo Flow Monitor Threshold Name, (7) del campo Task Library Name, (8) del campo Task Library Description, (9) del campo Policy Library Name, (10) del campo Policy Library Description, (11) del campo Template Library Name, (12) del campo Template Library Description, (13) del campo System Script Library Name, (14) del campo System Script Library Description o (15) del campo CLI Settings Library Description."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*","versionEndIncluding":"16.3","matchCriteriaId":"0956392B-9072-4C26-BB8A-9DFD92594C57"}]}]}],"references":[{"url":"http://twitter.com/ipswitch/statuses/677558623229317121","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79506","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id/1034833","source":"cret@cert.org"},{"url":"https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems","source":"cret@cert.org","tags":["Exploit"]},{"url":"https://www.kb.cert.org/vuls/id/176160","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://twitter.com/ipswitch/statuses/677558623229317121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.kb.cert.org/vuls/id/176160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-8252","sourceIdentifier":"cret@cert.org","published":"2015-12-27T03:59:02.083","lastModified":"2026-06-17T00:34:13.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext serial number, which allows remote attackers to determine a hardcoded key by sniffing the network and performing a \"jumbled up\" calculation with this number."},{"lang":"es","value":"El protocolo Frontel en versiones anteriores a la 3 en dispositivos RSI Video Technologies Videofied envía un número de serie en texto plano, lo que permite a atacantes remotos determinar una clave embebida husmeando la red y llevando a cabo un cálculo \"jumbled up\" con este número."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsi_video_technologies:frontel_protocol:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"96EAA137-6DEC-4F96-B353-0DB1B4F886B2"}]}]}],"references":[{"url":"http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/","source":"cret@cert.org","tags":["Exploit"]},{"url":"https://www.kb.cert.org/vuls/id/792004","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.kb.cert.org/vuls/id/792004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-8254","sourceIdentifier":"cret@cert.org","published":"2015-12-27T03:59:04.037","lastModified":"2026-06-17T00:34:13.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to (1) initiate a false alarm or (2) deactivate an alarm by modifying the client-server data stream."},{"lang":"es","value":"El protocolo Frontel en versiones anteriores a la 3 en dispositivos RSI Video Technologies Videofied no utiliza protección de integridad, lo que facilita a atacantes man-in-the-middle (1) iniciar una alarma falsa o (2) desactivar una alarma modificando el flujo de datos cliente-servidor."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsi_video_technologies:frontel_protocol:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"96EAA137-6DEC-4F96-B353-0DB1B4F886B2"}]}]}],"references":[{"url":"http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/","source":"cret@cert.org","tags":["Exploit"]},{"url":"https://www.kb.cert.org/vuls/id/792004","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.kb.cert.org/vuls/id/792004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-8262","sourceIdentifier":"cret@cert.org","published":"2015-12-27T03:59:04.973","lastModified":"2026-06-17T00:34:13.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value."},{"lang":"es","value":"Dispositivos Buffalo WZR-600DHP2 con firmware 2.09, 2.13 y 2.16 usan un algoritmo indebido para seleccionar el valor ID en la cabecera de una consulta DNS, lo que facilita a atacantes remotos suplantar respuestas mediante la predicción de este valor."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:airstation_extreme_n600_firmware:2.09:*:*:*:*:*:*:*","matchCriteriaId":"9BB03954-E4A1-402B-9C99-1C64479E70E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:airstation_extreme_n600_firmware:2.13:*:*:*:*:*:*:*","matchCriteriaId":"00E4130B-B1C3-4B8F-889A-81BBE82E95FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:airstation_extreme_n600_firmware:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F2F2E8F3-CB9E-4C20-9E19-09939654958E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:buffalotech:airstation_extreme_n600:*:*:*:*:*:*:*:*","matchCriteriaId":"20E4FFC3-A59A-4363-B27F-34B086C70456"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/78877","source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/646008","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/78877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/646008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/330.html\">CWE-330: Use of Insufficiently Random Values</a>"}},{"cve":{"id":"CVE-2015-7665","sourceIdentifier":"cve@mitre.org","published":"2015-12-27T19:59:02.173","lastModified":"2026-06-17T00:32:55.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command.  NOTE: within wget itself, the automatic fallback is not considered a vulnerability by CVE."},{"lang":"es","value":"Tails en versiones anteriores a 1.7 incluye el programa wget pero no previene el retorno automatico de FTP pasivo a FTP activo, lo que permite a servidores FTP remotos descubrir la dirección IP del cliente Tor mediante la lectura de un comando (1) PORT o (2) EPRT. NOTA: dentro de wget mismo, el retorno automatico no es considerado una vulnerabilidad por CVE."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tails_project:tails:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"51E2732A-7F5B-42C4-99BC-C5F5E4FA791A"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/wget.git/commit/?id=075d7556964f5a871a73c22ac4b69f5361295099","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/10/01/10","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/76678","source":"cve@mitre.org"},{"url":"https://labs.riseup.net/code/issues/10364","source":"cve@mitre.org"},{"url":"https://lists.gnu.org/archive/html/bug-wget/2015-08/msg00020.html","source":"cve@mitre.org"},{"url":"https://mailman.boum.org/pipermail/tails-dev/2015-August/009370.html","source":"cve@mitre.org"},{"url":"https://mailman.boum.org/pipermail/tails-dev/2015-October/009591.html","source":"cve@mitre.org"},{"url":"https://tails.boum.org/news/version_1.7/index.en.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/wget.git/commit/?id=075d7556964f5a871a73c22ac4b69f5361295099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/10/01/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/76678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://labs.riseup.net/code/issues/10364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.gnu.org/archive/html/bug-wget/2015-08/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://mailman.boum.org/pipermail/tails-dev/2015-August/009370.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://mailman.boum.org/pipermail/tails-dev/2015-October/009591.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tails.boum.org/news/version_1.7/index.en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7783","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-27T19:59:03.343","lastModified":"2026-06-17T00:33:07.720","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Let's PHP! p++BBS en versiones anteriores a 4.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:let\\'s_php\\!:pbbs:4.05:*:*:*:*:*:*:*","matchCriteriaId":"7A678524-9DD0-460D-BEF7-17C23A7B42F6"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN72891124/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000189","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://php.s3.to/bbs/bbs2.php","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN72891124/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://php.s3.to/bbs/bbs2.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-7446","sourceIdentifier":"cve@mitre.org","published":"2015-12-28T11:59:00.153","lastModified":"2026-06-17T00:01:58.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación de la memoria en net/unix/af_unix.c en el kernel de Linux en versiones anteriores a 4.3.3 permite a usuarios locales eludir los permisos destinados al socket AF_UNIX o provocar una denegación de servicio (panic) a través de llamadas epoll_ctl manipuladas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:C","baseScore":5.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.2","matchCriteriaId":"17376827-DFED-4E71-8D4A-5E5C44073D57"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d267278a9ece963d77eefec61630223fce08c6c","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00037.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00042.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00044.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3426","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/11/18/16","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/77638","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034557","source":"cve@mitre.org"},{"url":"http://www.spinics.net/lists/netdev/msg318826.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2887-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2887-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2889-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2889-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282688","source":"cve@mitre.org"},{"url":"https://forums.grsecurity.net/viewtopic.php?f=3&t=4150","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/7d267278a9ece963d77eefec61630223fce08c6c","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://groups.google.com/forum/#%21topic/syzkaller/3twDUI4Cpm8","source":"cve@mitre.org"},{"url":"https://lkml.org/lkml/2013/10/14/424","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://lkml.org/lkml/2014/5/15/532","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://lkml.org/lkml/2015/9/13/195","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d267278a9ece963d77eefec61630223fce08c6c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/11/18/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/77638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.spinics.net/lists/netdev/msg318826.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2887-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2887-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2889-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2889-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://forums.grsecurity.net/viewtopic.php?f=3&t=4150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/7d267278a9ece963d77eefec61630223fce08c6c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://groups.google.com/forum/#%21topic/syzkaller/3twDUI4Cpm8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lkml.org/lkml/2013/10/14/424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://lkml.org/lkml/2014/5/15/532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://lkml.org/lkml/2015/9/13/195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>"}},{"cve":{"id":"CVE-2015-7509","sourceIdentifier":"secalert@redhat.com","published":"2015-12-28T11:59:01.230","lastModified":"2026-06-17T00:32:40.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service (system crash) via a crafted no-journal filesystem, a related issue to CVE-2013-2015."},{"lang":"es","value":"fs/ext4/namei.c en el kernel Linux en versiones anteriores a 3.7 permite a atacantes físicamente próximos provocar una denegación de servicio (caída del sistema) a través de un archivo de sistema no-journal manipulado, un problema relacionado con CVE-2013-2015."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.11","matchCriteriaId":"FE285CDE-9D9F-41D7-94C2-E5E4A677A243"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c9b92530a723ac5ef8e352885a1862b18f31b2f5","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0855.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034559","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259222","source":"secalert@redhat.com"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=956709","source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/c9b92530a723ac5ef8e352885a1862b18f31b2f5","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7509","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c9b92530a723ac5ef8e352885a1862b18f31b2f5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0855.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=956709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/c9b92530a723ac5ef8e352885a1862b18f31b2f5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7990","sourceIdentifier":"cve@mitre.org","published":"2015-12-28T11:59:04.200","lastModified":"2026-06-17T00:33:31.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937."},{"lang":"es","value":"Condición de carrera en la función rds_sendmsg en net/rds/sendmsg.c en el kernel de Linux en versiones anteriores a 4.3.3 permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL y caída del sistema) o posiblemente tener otro impacto no especificado mediante el uso de un socket que no estaba vinculado adecuadamente. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2015-6937"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:C","baseScore":5.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.2","matchCriteriaId":"17376827-DFED-4E71-8D4A-5E5C44073D57"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8c7188b23474cca017b3ef354c4a58456f68303a","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3396","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/10/27/5","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/77340","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034453","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2887-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2887-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2889-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2889-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276437","source":"cve@mitre.org"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=952384","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/8c7188b23474cca017b3ef354c4a58456f68303a","source":"cve@mitre.org"},{"url":"https://lkml.org/lkml/2015/10/16/530","source":"cve@mitre.org"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8c7188b23474cca017b3ef354c4a58456f68303a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/10/27/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/77340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2887-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2887-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2889-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2889-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=952384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/8c7188b23474cca017b3ef354c4a58456f68303a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lkml.org/lkml/2015/10/16/530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8374","sourceIdentifier":"cve@mitre.org","published":"2015-12-28T11:59:05.170","lastModified":"2026-06-17T00:34:24.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action."},{"lang":"es","value":"fs/btrfs/inode.c en el kernel de Linux en versiones anteriores a 4.3.3 no maneja correctamente extensiones en línea comprimidas, lo que permite a usuarios locales obtener información sensible previa al truncamiento desde un archivo a través de una acción clone."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.2","matchCriteriaId":"17376827-DFED-4E71-8D4A-5E5C44073D57"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0305cd5f7fca85dae392b9ba85b116896eb7c1c7","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3426","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/11/27/2","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/78219","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034895","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2887-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2887-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2889-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2889-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286261","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/0305cd5f7fca85dae392b9ba85b116896eb7c1c7","source":"cve@mitre.org"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0305cd5f7fca85dae392b9ba85b116896eb7c1c7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/11/27/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/78219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2887-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2887-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2889-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2889-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/0305cd5f7fca85dae392b9ba85b116896eb7c1c7","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8660","sourceIdentifier":"secalert@redhat.com","published":"2015-12-28T11:59:08.093","lastModified":"2026-06-17T00:34:59.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application."},{"lang":"es","value":"La función ovl_setattr en fs/overlayfs/inode.c en el kernel de Linux hasta la versión 4.3.3 trata de fusionar distintas operaciones setattr, lo que permite a usuarios locales eludir las restricciones destinadas al acceso y modificar los atributos de archivos overlay arbitrarios a través de una aplicación manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.18","versionEndExcluding":"3.18.31","matchCriteriaId":"3C4188E9-F514-4ED6-BBF3-A05801ED9CD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19","versionEndExcluding":"4.1.22","matchCriteriaId":"D2D231A6-F06A-481A-8F4C-D1A7E1EC3742"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"4.4","matchCriteriaId":"8F38C207-7F29-43E1-BB0B-F202DD2CFCF7"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=acff81ec2c79492b180fade3c2894425cd35a545","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/135151/Ubuntu-14.04-LTS-15.10-overlayfs-Local-Root.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1532.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1539.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1541.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/23/5","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79671","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034548","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2857-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2857-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2858-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2858-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2858-3","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291329","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/acff81ec2c79492b180fade3c2894425cd35a545","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39166/","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/39230/","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40688/","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=acff81ec2c79492b180fade3c2894425cd35a545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/135151/Ubuntu-14.04-LTS-15.10-overlayfs-Local-Root.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1532.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1539.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1541.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/23/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2857-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2857-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2858-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2858-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2858-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/acff81ec2c79492b180fade3c2894425cd35a545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39166/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/39230/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40688/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2015-6852","sourceIdentifier":"security_alert@emc.com","published":"2015-12-28T15:59:01.077","lastModified":"2026-06-17T00:31:31.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la API en EMC Secure Remote Services Virtual Edition 3.x en versiones anteriores a 3.10 permite a usuarios remotos autenticados leer archivos log a través de un parámetro manipulado."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:secure_remote_services:3.0:*:*:*:virtual:*:*:*","matchCriteriaId":"E8FCC551-FE13-4B31-A766-7FCB301929E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:secure_remote_services:3.02:*:*:*:virtual:*:*:*","matchCriteriaId":"01FFD337-155A-403F-9270-09A0DF8D4161"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:secure_remote_services:3.03:*:*:*:virtual:*:*:*","matchCriteriaId":"0C9FDED1-65A7-44D3-A345-392F0B8C6D27"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135044/EMC-Secure-Remote-Services-Virtual-Edition-Path-Traversal.html","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2015/Dec/130","source":"security_alert@emc.com"},{"url":"http://www.securityfocus.com/bid/79661","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1034530","source":"security_alert@emc.com"},{"url":"http://packetstormsecurity.com/files/135044/EMC-Secure-Remote-Services-Virtual-Edition-Path-Traversal.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2015/Dec/130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7786","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-29T17:59:00.100","lastModified":"2026-06-17T00:33:08.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el módulo NTT DATA Smart Sourcing JavaScript 2003-11-26 hasta la versión 2013-07-09 para Web Analytics Service permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nttdata:web_analytics_service:*:*:*:*:*:*:*:*","matchCriteriaId":"5C19C759-CB3D-43D5-B16F-BA0706B45E69"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN70083512/995570/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN70083512/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000196","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.nttdata-smart.co.jp/information/2015/000040.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN70083512/995570/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN70083512/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nttdata-smart.co.jp/information/2015/000040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-3223","sourceIdentifier":"secalert@redhat.com","published":"2015-12-29T22:59:00.247","lastModified":"2026-06-17T00:25:34.170","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets."},{"lang":"es","value":"La función ldb_wildcard_compare en ldb_match.c en ldb en versiones anteriores a 1.1.24, como se utiliza en el servidor AD LDAP en Samba 4.x en versiones anteriores a 4.1.22, 4.2.x en versiones anteriores a 4.2.7 y 4.3.x en versiones anteriores a 4.3.3, no maneja correctamente valores cero, lo que permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de paquetes manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0DEEFFF7-DF7C-4641-81A9-1CD64DC29DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2855B3F6-49B6-4D25-BEAC-4D1797D1E100"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6C1F1993-70A2-4104-85AF-3BECB330AB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E955458C-8F5C-4D55-9F78-9E1CB4416F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"866FF7AC-19EA-49E7-B423-9FF57839B580"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1A64C7-B039-4724-B06C-EAC898EB3B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C572E25A-4B44-426D-B637-292A08766D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6D96D806-ED52-4010-9F5F-F84E33C245D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"643FC7D2-FC39-43FA-99E6-805553FE1DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E2B95519-0C9D-473C-912D-E350106DC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DC603E1A-7882-45F0-9E8D-157F191C0FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E4F9321C-B442-4081-8E4A-62BAD95239A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"012A397B-004D-489C-B06D-C0D67E26B1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"392E0C61-7718-4DBC-8F02-6F3C2CBE1783"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D893CD1C-31D7-4F7F-BD0B-BEF75DCB2DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"324AE9D7-C41F-493E-A1AD-FCD869D29D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"68519B1F-F315-4BBD-A4A3-4E1956D81E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"EF745E93-A92E-4AD7-8D42-36E9387C6915"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"30E4B760-417E-45D1-9CE1-AEBC8936BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"BD0DA221-078A-49DC-B0F1-F318FD785664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D72BCA7B-6338-4A7C-AE71-E0B8F6C9F2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"DD8F6AB9-A6C4-443E-A846-EE845BE24F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56C8F7D7-BAAD-4F3A-BA39-44BE0CCADFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EC522377-A6CD-4513-83B4-9ADC15F76B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"55BC4595-5699-4237-BCD7-FD233BA1AECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CB9C10B-284E-48CD-A524-1A6BF828AED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F70DD815-1DAA-4025-8C97-32C7D06D8AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A37DA6E-6EB7-429B-ACE0-2B1220BD62C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CA25E8C-9EFA-4A01-A2F0-CD63A39EDD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"41C33F47-0F28-4AE2-A895-82B5E0F4496D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6EEFF35-E903-4651-A4B4-D92FF26A7509"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B44BD172-80FA-4260-BAFB-251A95E8C7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F09116D2-F168-4305-9A1D-88A1D42739A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"558E0B71-F79E-47B5-90CC-9C165BB15507"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"E8D7E102-DD54-43F2-B008-66F7C243477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8066AB8C-1AE6-4DA3-91DB-4BF67DBBA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2A03CB9E-DEFC-4507-A314-5E0824A66462"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E6708D6E-2098-432D-820A-853032BD9A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"42BA346B-F7C6-4EB3-91BD-2CCC2B688AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F2B689AA-2074-4E9A-93BD-F910510A29AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"3EF22E49-B259-4E13-B371-0C0173E534FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE5C0A8F-A502-4BC1-AC8A-45AE1D16371D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D73876B7-A758-40CB-919D-6720AA7B9564"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"84925F68-F440-4677-B3DF-F87EAC39E235"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"CC0A0B3C-C011-4F27-BE8D-5A89BFC93F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"E7792A65-DB6E-49F4-9447-021EA9A82697"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"4EF3B982-B094-4B54-84A2-4CA199EE4E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6C0ACB4-F266-4118-AB53-4419D49243C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"72C395C0-160C-4D8A-A3B6-7E30DD8721EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B17EC5DF-2F00-479B-9775-45DA569BCED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0CC31CBA-10A4-417C-A381-2BB7A68CE0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"65D07800-4CCD-4B98-8D41-778295D1A3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1C4D3BA-781F-4C96-9234-73DB1593C7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4AACDFB6-841E-42A5-AA8D-58E8A38D11D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8643B45-1CE3-492F-BD82-65801F6C6FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7F009D18-204C-4E6D-9827-9FBA9A4FFBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"158DC9D2-2264-48B6-9116-CE6F0138D7C4"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3433","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/79731","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034493","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2855-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2855-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2856-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290287","source":"secalert@redhat.com"},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=aa6c27148b9d3f8c1e4fdd5dd46bfecbbd0ca465","source":"secalert@redhat.com"},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=ec504dbf69636a554add1f3d5703dd6c3ad450b8","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-47","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/security/CVE-2015-3223.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2855-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2855-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2856-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=aa6c27148b9d3f8c1e4fdd5dd46bfecbbd0ca465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=ec504dbf69636a554add1f3d5703dd6c3ad450b8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/security/CVE-2015-3223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5296","sourceIdentifier":"secalert@redhat.com","published":"2015-12-29T22:59:02.247","lastModified":"2026-06-17T00:28:50.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c, libsmb_server.c, and smbXcli_base.c."},{"lang":"es","value":"Samba 3.x y 4.x en versiones anteriores a 4.1.22, 4.2.x en versiones anteriores a 4.2.7 y 4.3.x en versiones anteriores a 4.3.3 admite conexiones que están cifradas pero no firmadas, lo que permite a atacantes man-in-the-middle llevar a cabo un ataque de degradación de cifrado-a-descifrado modificando el flujo de datos cliente-servidor, relacionado con clidfs.c, libsmb_server.c y smbXcli_base.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"4.1.22","matchCriteriaId":"B2B09153-EB3D-4DBB-BA55-C021359F0D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"AEE374EB-8CEF-4E2E-B323-22397E34BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3.0","versionEndExcluding":"4.3.3","matchCriteriaId":"6683E050-3788-41B4-BA5D-32ACDFE79648"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79732","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034493","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2855-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2855-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290292","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=1ba49b8f389eda3414b14410c7fbcb4041ca06b1","source":"secalert@redhat.com"},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a819d2b440aafa3138d95ff6e8b824da885a70e9","source":"secalert@redhat.com"},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=d724f835acb9f4886c0001af32cd325dbbf1f895","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-47","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2015-5296.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2855-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2855-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=1ba49b8f389eda3414b14410c7fbcb4041ca06b1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a819d2b440aafa3138d95ff6e8b824da885a70e9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=d724f835acb9f4886c0001af32cd325dbbf1f895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-47","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2015-5296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5299","sourceIdentifier":"secalert@redhat.com","published":"2015-12-29T22:59:03.217","lastModified":"2026-06-17T00:28:50.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORY_LIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy directory."},{"lang":"es","value":"La función shadow_copy2_get_shadow_copy_data en modules/vfs_shadow_copy2.c en Samba 3.x y 4.x en versiones anteriores a 4.1.22, 4.2.x en versiones anteriores a 4.2.7 y 4.3.x en versiones anteriores a 4.3.3 no verifica que el privilegio de acceso al DIRECTORY_LIST ha sido concedido, lo que permite a atacantes remotos acceder a instantáneas visitando un directorio shadow copy."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.20","versionEndExcluding":"4.1.22","matchCriteriaId":"0E18908F-2D8B-43EF-864A-8E166F519A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"AEE374EB-8CEF-4E2E-B323-22397E34BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3.0","versionEndExcluding":"4.3.3","matchCriteriaId":"6683E050-3788-41B4-BA5D-32ACDFE79648"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79729","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034493","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2855-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2855-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276126","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=675fd8d771f9d43e354dba53ddd9b5483ae0a1d7","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-47","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2015-5299.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2855-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2855-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=675fd8d771f9d43e354dba53ddd9b5483ae0a1d7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-47","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2015-5299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7791","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-29T22:59:06.547","lastModified":"2026-06-17T00:33:08.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) search[column] or (2) switch parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin.php en el plugin Collne Welcart en versiones anteriores a 1.5.3 para WordPress permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro (1) search[column] o (2) switch."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"4972F7A2-B830-439B-84FA-B27785B0E3DF"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN43344629/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000200","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79647","source":"vultures@jpcert.or.jp"},{"url":"http://www.welcart.com/community/archives/76035","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8356","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN43344629/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.welcart.com/community/archives/76035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7249","sourceIdentifier":"cret@cert.org","published":"2015-12-30T05:59:02.333","lastModified":"2026-06-17T00:32:07.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action."},{"lang":"es","value":"Dispositivos ZTE ZXHN H108N R1A en versiones anteriores a ZTE.bhs.ZXHNH108NR1A.k_PE permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso a través de una petición modificada, según lo demostrado aprovechando la cuenta de soporte para cambiar una contraseña a través de una acción accountpsd cgi-bin/webproc."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:C/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zte:zxhn_h108n_r1a_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"zte.bhs.zxhnh108nr1a.h_pe","matchCriteriaId":"B3F8294C-E254-4328-8884-C27B9F880D01"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zte:zxhn_h108n_r1a:*:*:*:*:*:*:*:*","matchCriteriaId":"5A0A9215-1F66-4A0B-BF01-0064769F6812"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/77421","source":"cret@cert.org"},{"url":"https://www.exploit-db.com/exploits/38773/","source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/391604","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/77421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/38773/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/391604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-7252","sourceIdentifier":"cret@cert.org","published":"2015-12-30T05:59:05.020","lastModified":"2026-06-17T00:32:08.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML via the errorpage parameter."},{"lang":"es","value":"Vulnerabilidad de XSS en cgi-bin/webproc en dispositivos ZTE ZXHN H108N R1A en versiones anteriores a ZTE.bhs.ZXHNH108NR1A.k_PE permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro errorpage."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zte:zxhn_h108n_r1a_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"zte.bhs.zxhnh108nr1a.h_pe","matchCriteriaId":"B3F8294C-E254-4328-8884-C27B9F880D01"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zte:zxhn_h108n_r1a:*:*:*:*:*:*:*:*","matchCriteriaId":"5A0A9215-1F66-4A0B-BF01-0064769F6812"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/77421","source":"cret@cert.org"},{"url":"https://www.exploit-db.com/exploits/38773/","source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/391604","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/77421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/38773/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/391604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-7782","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-30T05:59:06.020","lastModified":"2026-06-17T00:33:07.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Let's PHP! Frame high-speed chat en versiones anteriores a 2015-09-22 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:let\\'s_php\\!:frame_high-speed_chat:-:*:*:*:*:*:*:*","matchCriteriaId":"6ACCAA90-7BA2-4717-A055-9BA0927BB7D7"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN35845584/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000188","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN35845584/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7784","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-30T05:59:07.033","lastModified":"2026-06-17T00:33:07.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el plugin BOKUBLOCK (1) BbAdminViewsControl213 en versiones anteriores a 1.1 y (2) BbAdminViewsControl en versiones anteriores a 2.1 para EC-CUBE permite a usuarios remotos autenticados ejecutar secuencias de comandos SQL arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bokublock:bbadminviewscontrol:*:*:*:*:*:ec-cube:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D6FF1CAB-5473-4A79-B01B-BF42C6A6D784"},{"vulnerable":true,"criteria":"cpe:2.3:a:bokublock:bbadminviewscontrol213:*:*:*:*:*:ec-cube:*:*","versionEndIncluding":"1.0","matchCriteriaId":"50873773-FAC1-4D76-B3DC-854361E2A322"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN55545372/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000190","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/products/detail.php?product_id=288","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/products/detail.php?product_id=781","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN55545372/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/products/detail.php?product_id=288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/products/detail.php?product_id=781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7787","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-30T05:59:07.910","lastModified":"2026-06-17T00:33:08.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase via unspecified vectors."},{"lang":"es","value":"Dispositivos ASUS Japan WL-330NUL con firmware anterior a 3.0.0.42 permiten a atacantes remotos descubrir la frase de contraseña WPA2-PSK a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:asus:wl-330nul_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.0.41","matchCriteriaId":"4D0C9125-E338-4BAA-9CD9-524E5064501A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:asus:wl-330nul:*:*:*:*:*:*:*:*","matchCriteriaId":"BE0B137A-6A2A-4CB2-8EEB-8C31FF31C715"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN69462495/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000192","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.asus.com/jp/News/FX04LE8HN0qBoqFI","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN69462495/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.asus.com/jp/News/FX04LE8HN0qBoqFI","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7789","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-30T05:59:10.003","lastModified":"2026-06-17T00:33:08.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspecified vectors."},{"lang":"es","value":"Dispositivos ASUS Japan WL-330NUL con firmware anterior a 3.0.0.42 permiten a atacantes remotos provocar una denegación de servicio a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:P","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:asus:wl-33nul_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.0.41","matchCriteriaId":"A4F1AA8A-C3E7-40F4-BCB3-D050106ED43A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:asus:wl-330nul:*:*:*:*:*:*:*:*","matchCriteriaId":"BE0B137A-6A2A-4CB2-8EEB-8C31FF31C715"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN85359294/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000194","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.asus.com/jp/News/FX04LE8HN0qBoqFI","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN85359294/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.asus.com/jp/News/FX04LE8HN0qBoqFI","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7790","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-30T05:59:10.893","lastModified":"2026-06-17T00:33:08.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en dispositivos ASUS Japan WL-330NUL con firmware anterior a 3.0.0.42 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:asus:wl-330nul_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.0.41","matchCriteriaId":"4D0C9125-E338-4BAA-9CD9-524E5064501A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:asus:wl-330nul:*:*:*:*:*:*:*:*","matchCriteriaId":"BE0B137A-6A2A-4CB2-8EEB-8C31FF31C715"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN89965717/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000195","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.asus.com/jp/News/FX04LE8HN0qBoqFI","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN89965717/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.asus.com/jp/News/FX04LE8HN0qBoqFI","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7793","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-30T05:59:12.690","lastModified":"2026-06-17T00:33:08.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors."},{"lang":"es","value":"Dispositivos Corega CG-WLBARAGM proporcionan un servicio proxy abierto, lo que permite a atacantes remotos desencadenar tráfico de red saliente a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:corega:cg-wlbaragm_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1789677E-A882-4F4D-A8C8-4F074A483F86"}]}]}],"references":[{"url":"http://corega.jp/support/security/20151224_wlbaragm.htm","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN50775659/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000202","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://corega.jp/support/security/20151224_wlbaragm.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN50775659/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7794","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-12-30T05:59:13.940","lastModified":"2026-06-17T00:33:08.900","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service (traffic amplification) via crafted queries."},{"lang":"es","value":"Dispositivos Corega CG-WLNCM4G proporcionan un resolutor de DNS abierto, lo que permite a atacantes remotos provocar una denegación de servicio (amplificación de tráfico) a través de consultas manipuladas."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:corega:cg-wlncm4g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3AD6644C-B651-43B0-8412-1103F2274302"}]}]}],"references":[{"url":"http://corega.jp/support/security/20151224_wlncm4g.htm","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN51250073/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000203","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://corega.jp/support/security/20151224_wlncm4g.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN51250073/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8703","sourceIdentifier":"cret@cert.org","published":"2015-12-30T05:59:14.877","lastModified":"2026-06-17T00:35:03.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248."},{"lang":"es","value":"Dispositivos ZTE ZXHN H108N R1A en versiones anteriores a ZTE.bhs.ZXHNH108NR1A.k_PE y dispositivos ZXV10 W300 en versiones anteriores aW300V1.0.0f_ER1_PE permiten a usuarios remotos autenticados eludir las restricciones destinadas al acceso, y descubrir credenciales y claves, leyendo el archivo de configuración, una vulnerabilidad diferente a CVE-2015-7248."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zte:zxhn_h108n_r1a_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"zte.bhs.zxhnh108nr1a.h_pe","matchCriteriaId":"B3F8294C-E254-4328-8884-C27B9F880D01"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zte:zxhn_h108n_r1a:*:*:*:*:*:*:*:*","matchCriteriaId":"5A0A9215-1F66-4A0B-BF01-0064769F6812"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zte:zxv10_w300_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"w300v1.0.0f_er1_pe","matchCriteriaId":"EEAEB00D-3718-4908-869F-22BDE6C96EB3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zte:zxv10_w300:*:*:*:*:*:*:*:*","matchCriteriaId":"84553EC1-5EE0-4C4B-9DD6-011B75E6D5A8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/77421","source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/391604","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/77421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/391604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-2894","sourceIdentifier":"cret@cert.org","published":"2015-12-31T05:59:05.627","lastModified":"2026-06-17T00:24:55.907","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the up.time client in Idera Uptime Infrastructure Monitor 6.0 and 7.2 allows remote attackers to cause a denial of service (application crash) via format string specifiers."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en el cliente up.time en Idera Uptime Infrastructure Monitor 6.0 y 7.2 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de especificadores de cadena de formato."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idera:uptime_infrastructure_monitor:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7F562D90-64FB-44A8-90C5-153C7C09D485"},{"vulnerable":true,"criteria":"cpe:2.3:a:idera:uptime_infrastructure_monitor:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F8902A22-904D-47D4-9F64-4163A7C830EA"}]}]}],"references":[{"url":"https://www.kb.cert.org/vuls/id/377260","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/377260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-2896","sourceIdentifier":"cret@cert.org","published":"2015-12-31T05:59:07.703","lastModified":"2026-06-17T00:24:56.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The up.time client in Idera Uptime Infrastructure Monitor through 7.6 allows remote attackers to obtain potentially sensitive version, OS, process, and event-log information via a command."},{"lang":"es","value":"El cliente up.time en Idera Uptime Infrastructure Monitor hasta la versión 7.6 permite a atacantes remotos obtener información potencialmente sensible de versión, SO, proceso y registro de eventos a través de un comando."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idera:uptime_infrastructure_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6","matchCriteriaId":"8C4145E8-BD8D-4814-BB37-1B4AD5A64879"}]}]}],"references":[{"url":"https://www.kb.cert.org/vuls/id/377260","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/377260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2015-2913","sourceIdentifier":"cret@cert.org","published":"2015-12-31T05:59:09.470","lastModified":"2026-06-17T00:24:57.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of random Session ID values, which makes it easier for remote attackers to predict a value by determining the internal state of the PRNG in this class."},{"lang":"es","value":"server/network/protocol/http/OHttpSessionManager.java en el componente Studio en OrientDB Server Community Edition en versiones anteriores a 2.0.15 y 2.1.x en versiones anteriores a 2.1.1 confía indebidamente en la clase java.util.Random para la generación de valores de Session ID aleatorios, lo que hace más fácil a atacantes remotos predecir un valor determinando el estado interno de PRNG en esta clase."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orientdb:orientdb:2.0.14:*:*:*:community:*:*:*","matchCriteriaId":"6D3EEB60-F819-4F15-962C-06DDA45896E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:orientdb:orientdb:2.1.0:*:*:*:community:*:*:*","matchCriteriaId":"C913E0D2-2E28-4BB6-957C-9832193C3FB4"}]}]}],"references":[{"url":"https://github.com/orientechnologies/orientdb/commit/668ece96be210e742a4e2820a3085b215cf55104","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/845332","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://github.com/orientechnologies/orientdb/commit/668ece96be210e742a4e2820a3085b215cf55104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/845332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-2918","sourceIdentifier":"cret@cert.org","published":"2015-12-31T05:59:10.440","lastModified":"2026-06-17T00:24:58.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site."},{"lang":"es","value":"El componente Studio en OrientDB Server Community Edition en versiones anteriores a 2.0.15 y 2.1.x en versiones anteriores a 2.1.1 no restringe correctamente el uso de elementos FRAME, lo que hace más fácil para atacantes remotos llevar a cabo ataques de clickjacking a través de un sitio web manipulado."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orientdb:orientdb:2.0.14:*:*:*:community:*:*:*","matchCriteriaId":"6D3EEB60-F819-4F15-962C-06DDA45896E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:orientdb:orientdb:2.1.0:*:*:*:community:*:*:*","matchCriteriaId":"C913E0D2-2E28-4BB6-957C-9832193C3FB4"}]}]}],"references":[{"url":"https://www.kb.cert.org/vuls/id/845332","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/845332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-5994","sourceIdentifier":"cret@cert.org","published":"2015-12-31T05:59:11.487","lastModified":"2026-06-17T00:30:13.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web management interface on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 has a default password of admin for the admin account and a default password of password for the medialink account, which allows remote attackers to obtain administrative privileges by leveraging a Wi-Fi session."},{"lang":"es","value":"La interfaz de gestión web en dispositivos Mediabridge Medialink MWN-WAPR300N con firmware 5.07.50 tiene una contraseña por defecto de admin para la cuenta de admin y una contraseña por defecto de password para la cuenta medialink, lo que permite a atacantes remotos obtener privilegios administrativos aprovechando una sesión Wi-Fi."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:C/I:C/A:C","baseScore":7.9,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":5.5,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mediabridge:medialink_mwn-wapr300n_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.07.50","matchCriteriaId":"EF7E1046-1077-48E4-8D3B-EFA2CE9D5192"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:mediabridge:medialink_mwn-wapr300n:*:*:*:*:*:*:*:*","matchCriteriaId":"6C12FC1E-7238-4954-BCD7-602390EB25B6"}]}]}],"references":[{"url":"https://www.kb.cert.org/vuls/id/630872","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/630872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-6017","sourceIdentifier":"cret@cert.org","published":"2015-12-31T05:59:15.880","lastModified":"2026-06-17T00:30:15.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote attackers to inject arbitrary web script or HTML via the (1) LoginPassword or (2) hiddenPassword parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Forms/rpAuth_1 en dispositivos ZyXEL P-660HW-T1 2 con firmware ZyNOS 3.40(AXH.0) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro (1) LoginPassword o (2) hiddenPassword."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660hw-t1_v2_firmware:3.40\\(axh.0\\):*:*:*:*:*:*:*","matchCriteriaId":"E8E37EBA-A463-46CD-9D38-23C0332C9BF8"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034552","source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/870744","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securitytracker.com/id/1034552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/870744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-7279","sourceIdentifier":"cret@cert.org","published":"2015-12-31T05:59:21.337","lastModified":"2026-06-17T00:32:10.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value."},{"lang":"es","value":"Dispositivos Amped Wireless R10000 con firmware 2.5.2.11 utilizan un algoritmo indebido para seleccionar un valor ID en la cabecera de una consulta DNS, lo que hace más fácil para atacantes remotos suplantar respuestas prediciendo este valor."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ampedwireless:r10000_firmware:2.5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"181B62A0-3475-4358-90F6-E729CF0F87C2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ampedwireless:r10000:-:*:*:*:*:*:*:*","matchCriteriaId":"6581CEAE-F9A9-478C-882E-469209384DA4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/78818","source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/763576","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/78818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/763576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/331.html\">CWE-331: Insufficient Entropy</a>"}},{"cve":{"id":"CVE-2015-7282","sourceIdentifier":"cret@cert.org","published":"2015-12-31T05:59:24.340","lastModified":"2026-06-17T00:32:11.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port."},{"lang":"es","value":"Dispositivos ReadyNet WRT300N-DD con firmware 1.0.26 utilizan el mismo número de puerto origen para todas las consulta DNS, lo que hace más fácil para atacantes remotos suplantar respuestas seleccionando ese número para el puerto destino."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:readynet_solutions:wrt300n-dd_firmware:1.0.26:*:*:*:*:*:*:*","matchCriteriaId":"05F916B9-0067-443F-AB4D-C64ECF93A754"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:readynet_solutions:wrt300n-dd:-:*:*:*:*:*:*:*","matchCriteriaId":"75299693-129C-4040-A88E-DC9D4642E178"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/78814","source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/167992","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/78814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/167992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-7447","sourceIdentifier":"psirt@us.ibm.com","published":"2015-12-31T05:59:27.200","lastModified":"2026-06-17T00:32:33.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF09 allows remote attackers to bypass intended Portal AccessControl REST API access restrictions and obtain sensitive information via unspecified vectors."},{"lang":"es","value":"IBM WebSphere Portal 6.1.0 hasta la versión 6.1.0.6 CF27, 6.1.5 hasta la versión 6.1.5.3 CF27, 7.0.0 hasta la versión 7.0.0.2 CF29, 8.0.0 en versiones anteriores a 8.0.0.1 CF20 y 8.5.0 en versiones anteriores a CF09 permite a atacantes remotos eludir las restricciones destinadas al acceso de la API REST Portal AccessControl y obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5DB29F4-59AB-439C-91C4-CDF677676C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6CA922-11EF-4315-A09A-B4A8937E4CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"526738D7-1AF8-4A8F-B833-BA0E35973A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"13D6BE9C-16FD-4FB4-8A87-56B42C246316"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5B50CEA-AFC4-4B45-9954-519965237FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0902AC0F-EA4D-4E65-A70A-15DE9B904B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D808F95D-C6BD-43EB-B16C-66449977BCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6ECEE98-B276-4ED6-AA5A-109EA57E9925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E4FF84B-A17F-464B-A718-67C44D2C69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI51395","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973152","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79511","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034538","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI51395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7441","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-01T00:59:00.153","lastModified":"2026-06-17T00:32:32.780","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors."},{"lang":"es","value":"Remote Artifact Loader (RAL) en IBM WebSphere Process Server 7 y Business Process Manager Advanced 7.5 hasta la versión 7.5.1.2, 8.0 hasta la versión 8.0.1.3, 8.5.0 hasta la versión 8.5.0.2, 8.5.5 hasta la versión 8.5.5.0 y 8.5.6 hasta la versión 8.5.6.2 no utiliza adecuadamente el SSL para su conexión HTTPS, lo que permite a usuarios remotos autenticados obtener información sensible o modificar datos a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*","matchCriteriaId":"91BDDE54-95C6-4E95-9427-D83E61355E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*","matchCriteriaId":"A7B3E6D1-ADB3-4709-9E02-779EAA7A05E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*","matchCriteriaId":"1D338AF3-8FE6-4E51-B961-344E157EECFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*","matchCriteriaId":"8057C7D0-978D-490B-BE80-597A2CB27A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*","matchCriteriaId":"16617000-4388-43EF-AE14-8C108068155F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*","matchCriteriaId":"E4B6A964-F948-4FAA-A6C7-41641AF12504"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DAC02B89-813E-4B3D-B518-6565BE06C575"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*","matchCriteriaId":"3DEBE193-CDE1-406C-9042-4085AA0EED8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*","matchCriteriaId":"05B6C389-9332-4C33-A3AD-270A54AC564E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*","matchCriteriaId":"07630F25-A03C-401D-A16A-51B63014C963"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"06DFA125-9D52-4C16-9946-DB8D43700415"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*","matchCriteriaId":"EF781F2F-05FB-4DBD-8BC1-98A630CD375A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*","matchCriteriaId":"17E42B0A-0947-4799-993F-CBF8A84EBD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*","matchCriteriaId":"E95968B6-FF99-4234-9EC7-6EAA9C7DA753"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"613CC0CD-083E-439A-9A53-777E69CDE2DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*","matchCriteriaId":"0F1442C9-ED96-40C5-BE20-987C928BAD9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:express:*:*:*","matchCriteriaId":"50B6287C-5A45-46B7-A685-93D1CBA0CC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:standard:*:*:*","matchCriteriaId":"3693DBD8-F30F-44D0-A154-4C268120D7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"161542A0-E919-4105-AD4F-C881ACF8D26B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*","matchCriteriaId":"E71AC948-9F71-403E-8035-172D5F667B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*","matchCriteriaId":"FE68791B-B7AE-4715-810E-0C278E5C363F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*","matchCriteriaId":"37281A0A-3BE1-4B22-840F-65CA7B8AB360"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*","matchCriteriaId":"E77872E9-D66C-47FF-AA1D-7764D65997A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*","matchCriteriaId":"00CC8270-5ABE-428C-9090-16EC8298E50C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*","matchCriteriaId":"446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"32504DEB-7391-4452-BA2E-409959B24222"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*","matchCriteriaId":"7B3D03C8-B7F4-43AF-9270-555507AAC527"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*","matchCriteriaId":"A05F59A1-3063-45ED-B1E8-AABC4FC0A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*","matchCriteriaId":"3FC25EB0-CA22-4176-8752-8BD26B111F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D8F74820-DF10-499E-AF7A-93AC285843D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*","matchCriteriaId":"E69BBEFA-B321-4085-AEA1-BAE2B0B54524"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*","matchCriteriaId":"60F679C8-74FB-40F5-A5B8-FBD6BF424379"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*","matchCriteriaId":"7C097D2E-5BB7-4979-A755-E928094A92C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*","matchCriteriaId":"BE4F0900-83C3-4228-9F3B-2664C1C816F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*","matchCriteriaId":"0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*","matchCriteriaId":"021FABA7-6B97-4511-8E07-B7A34A387493"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"989C89DF-C6CB-45C9-9592-30A83896BD71"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*","matchCriteriaId":"9942841D-3E36-4159-AA5A-B534CB701B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*","matchCriteriaId":"8FE10C1D-2077-435A-8C14-2746A685681C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*","matchCriteriaId":"F6E31F25-6E71-4A5C-A940-0A935AF19035"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"783C2592-9669-4C75-9E63-C834482F6F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*","matchCriteriaId":"7A1FCB4E-DC46-4780-9017-1E8E789E785F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*","matchCriteriaId":"EE43BACD-D187-49C9-85D1-51E3F71D2274"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*","matchCriteriaId":"F646DABB-4C10-4308-8169-EC42C358CF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"7021B830-3EE4-446D-8D87-BBD2097A023E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*","matchCriteriaId":"00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*","matchCriteriaId":"80D84C06-5E93-4DA4-A333-D3CECB7D74E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*","matchCriteriaId":"DF7E8429-8750-4D3C-90E1-829031C7C306"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8ED3C32B-7397-434D-B084-E92C7C6E2FE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"1DDC7513-E826-42A7-B3DE-15EBAB836FFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"9E4B8D43-BD99-499E-B0D4-27BFC997DF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"116EA95E-3845-4045-9E9D-F370D6D48A5E"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54760","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034531","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034532","source":"psirt@us.ibm.com"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21971968","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21971968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-4941","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-01T05:59:00.097","lastModified":"2026-06-17T00:28:13.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service (MQXR service crash) via unspecified vectors."},{"lang":"es","value":"IBM WebSphere MQ Light 1.x en versiones anteriores a 1.0.2 no maneja correctamente el apretón de manos TLS abreviado, lo que permite a atacantes provocar una denegación de servicio (caída de servicio MQXR) a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq_light:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CA8E67B9-3E81-4A98-B9B5-CCA7ADCCFC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq_light:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE9296FA-DC39-46F7-BDB7-295E60C0F6BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972019","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79690","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034580","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-4943","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-01T05:59:01.283","lastModified":"2026-06-17T00:28:13.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than CVE-2015-4942."},{"lang":"es","value":"IBM WebSphere MQ Light 1.x en versiones anteriores a 1.0.2 permite a atacantes remotos provocar una denegación de servicio (caída de servicio MQXR) a través de una series de acciones de conexión y desconexión, una vulnerabilidad diferente a CVE-2015-4942."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq_light:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CA8E67B9-3E81-4A98-B9B5-CCA7ADCCFC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq_light:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE9296FA-DC39-46F7-BDB7-295E60C0F6BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79689","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034581","source":"psirt@us.ibm.com"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21972021","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21972021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5049","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-01T05:59:02.707","lastModified":"2026-06-17T00:28:21.673","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la API en IBM OpenPages GRC Platform 7.0 en versiones anteriores a 7.0.0.4 IF3 y 7.1 en versiones anteriores a 7.1.0.1 IF6 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:openpages_grc_platform:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F1D9B2D-B882-45A9-AF54-D560FE221C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:openpages_grc_platform:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FB412078-9212-4316-A45F-AF499644C0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:openpages_grc_platform:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D39E77EA-25FC-4A9F-B167-CBB59C8F03ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:openpages_grc_platform:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CFD2D230-E66B-45E8-A7F2-C94AC2BA75EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:openpages_grc_platform:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"074A183B-2C45-4B5F-A467-3DFA8C5D7E0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6A1371BD-17B2-4FA4-B5AA-B5A35F283277"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C0D85B86-EC7C-419C-9612-F869CC1FA243"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970590","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79682","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7415","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-01T05:59:04.690","lastModified":"2026-06-17T00:32:30.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en IBM UrbanCode Deploy 6.0 en versiones anteriores a 6.0.1.12, 6.1 en versiones anteriores a 6.1.3.2 y 6.2 en versiones anteriores a 6.2.0.2 permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B6C176CC-51F9-4C53-B0F8-D0E0A5387CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"49D22F1E-6827-4343-BD5E-376710FF9A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C35B3347-EE12-4E84-92D9-533DA7F1581E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"32C10FFF-250A-4530-B631-1B1DAA3B4BC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DE176DE5-BB60-4999-A2B4-D93C8AB776DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"751113D0-7085-4AE7-8F39-292293F297FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"31217ED6-C154-49CF-BD65-C272D630F58A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1F69D247-B168-40EC-BA4B-1C50879B64BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"1894FAF3-1E8E-4A4F-9044-B9176CB2BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C822B4AB-4032-4BEB-A413-A80398A28EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"FF310F06-6674-470E-B258-4DF042B1FA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AEF92016-8494-4EBE-A32F-A123C1517F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"744A36AB-5BC8-4FE1-BB91-9BC3019EBB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F9BA86C9-0A31-4EBB-B73E-346D6C425988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"70E082B0-B404-4E5E-9FC7-2B0B6F363A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1A5583AF-A3CE-4AEE-8D0F-5E0FE22BC3B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"054A3ED4-290A-484D-9F51-93A71968CAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7C5B4753-3685-4088-A4B1-C4AE58C11F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"32732445-6761-40F0-836B-E7EAC9B9239B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EF8034DC-C20D-4972-AFBA-D3EBF8664164"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5409F075-5268-476E-BEFE-2B93C8BB2870"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"F43800F6-328E-4481-B6AE-44A50F368314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C6A0A50D-547C-4508-8D6C-DBE26D0CEEF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E3BCD23-4033-443D-B2D5-CAF69FCD22D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B1A72039-925C-48AE-8012-BA6AEE659D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8CFD390D-531E-4BC7-B9D4-74208E153F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EFBFBFFE-8E24-48C0-87D7-6E6D3017C79B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970811","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7445","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-01T05:59:07.690","lastModified":"2026-06-17T00:32:33.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses."},{"lang":"es","value":"IBM Multi-Enterprise Integration Gateway 1.0 hasta la versión 1.0.0.1 y B2B Advanced Communications 1.x en versiones anteriores a 1.0.0.4, cuando se configura el acceso de invitado, permite a usuarios remotos autenticados obtener información sensible leyendo mensajes de error en respuestas."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:b2b_advanced_communications:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EA082C4C-E3D4-436E-A6CC-58B0F05BEAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DB28631D-6863-4793-84A3-0586A3EB211A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"75253E16-967B-43FB-8D4B-69A5F136183C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8D4BA396-C20E-4B29-8C0C-035B0AEF2099"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:multi-enterprise_integration_gateway:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"74C974C2-6873-4BF3-8687-3D7C8B026B9C"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12573","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972480","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79681","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7409","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-01T11:59:00.113","lastModified":"2026-06-17T00:32:29.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified field."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Security QRadar SIEM 7.2.x en versiones anteriores a 7.2.6 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un campo no especificado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C137959-2279-4459-8A10-43AFE09E2641"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"39D53329-E729-43C1-8C67-EFA4C3F7BFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9FC4EDCA-DF37-4366-B944-F342FA55EEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"76CA942D-70AD-4E0D-A28E-443FB7140A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973175","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7456","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-01T11:59:01.097","lastModified":"2026-06-17T00:32:34.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via unspecified vectors."},{"lang":"es","value":"IBM Spectrum Scale 4.1.1 en versiones anteriores a 4.1.1.4 y 4.2.0.0, permite a usuarios remotos autenticados descubrir almacenamiento de objetos de contraseñas de admin a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2E29D816-7A73-47EA-8DE6-E553CA0D1079"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"18C5A85C-F932-44CF-B3EA-691737C96C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9385B07C-881D-4A4E-A0F5-FF1BC88F8CFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6E32967B-9D22-4120-8C58-FCCC2ECC424F"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005476","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV79381","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV79381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-4990","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T05:59:01.580","lastModified":"2026-06-17T00:28:17.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows local users to discover credentials by leveraging privileges during an unspecified connection type."},{"lang":"es","value":"El portal en IBM Tealeaf Customer Experience en versiones anteriores a 8.7.1.8818, 8.8 en versiones anteriores a 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 en versiones anteriores a 9.0.1.1083, 9.0.1A en versiones anteriores a 9.0.1.5073, 9.0.2 en versiones anteriores a 9.0.2.1095 y 9.0.2A en versiones anteriores a 9.0.2.5144 permite a usuarios locales descubrir credenciales aprovechando privilegios durante un tipo de conexión no especificada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*","versionEndIncluding":"8.6","matchCriteriaId":"06154DF2-11C1-4D1E-8FD2-30258CCDFA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:*","matchCriteriaId":"41B6A77E-1686-44A6-B1E4-AC63A0466AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*","matchCriteriaId":"FBAC9796-BA52-48AF-9326-3C2343BE2342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6D705DD1-8F24-49B4-8D05-F0403A625016"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"4A2BAB44-B859-4209-BAFD-088E9583F31B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D66B990-2034-46D9-AF8D-DE69B3161F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"50EC1311-629F-401B-9AE3-8ECDE0CBF330"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2AFA47D5-AC5B-4A1B-83A6-EE5D49ECE489"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"F5FE2E49-88CF-4D61-8097-B3146A47BAED"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21969739","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21969739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-4996","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T05:59:02.817","lastModified":"2026-06-17T00:28:17.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors."},{"lang":"es","value":"IBM Rational ClearQuest 7.1.x y 8.0.0.x en versiones anteriores a 8.0.0.17 y 8.0.1.x en versiones anteriores a 8.0.1.10 permite a usuarios locales suplantar servidores de base de datos y descubrir credenciales a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1:*:*:*:*:*:*:*","matchCriteriaId":"FD7F255A-380A-4165-81E9-CC1BD76DFF1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6A8D6A4C-A5B0-46A8-80ED-CAD3EC279149"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"457D44F0-BD01-488C-AEB1-8D82E726AECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7C645C62-6794-421E-882C-ECA92B33C3D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3AB4DB93-26A7-4B5E-ACF5-B8D95AC31566"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F74EBAA-8A68-4F20-B14D-D1A77D57BC38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"10A1A052-179D-411F-A214-EF2AF7E5F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"230908F8-95CB-4273-BA32-0987145E5FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"57CB4AA1-354B-4EC4-8D70-F58654ABF9CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E1766896-6D35-44CB-8512-AED3961CE224"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"64BC2E3D-4B20-46FF-B2B5-551BEB347FCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"51B69987-F426-4D27-A721-067B978BEB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"18CD36A3-8D15-439A-97E7-67D7293EB875"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0201EFB5-9673-4C78-938A-C7BF769F5553"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2F1C1C0A-B403-44C5-B7BD-BC9466CB2848"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0A7179A-2421-454C-8A58-EFB1BB7150BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2FEA9B29-2A30-46D1-B778-CE7822CEA972"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"941C4C5A-DD11-436B-86D4-BC564E9C6B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4E538615-12E6-4CDF-8B32-A66CD35D98AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F31399A6-5B53-46C1-B4CB-858360CFF133"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"6E2E59A6-FC13-43FD-BDED-01EA0462F81B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"9AFCF89A-FD9F-4460-8AE8-5FA9C607B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"6DCC5D8D-50E1-4DD1-B57F-2A692C8BBE48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"6A783CBC-1A1B-45CA-9FEE-C43FF1052C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"CB5FDBE0-5661-4710-A7C0-15A28DDDF641"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"73013249-31FF-41E5-BEB9-23856068644D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1C0E641C-D2BA-4C9B-94E8-4A13926146E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A51113A6-1744-47E6-8245-C0E33D39C789"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"33437FA1-E122-43BB-B347-AACD9C9295D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02D746F3-DCFD-427C-8157-8064A0452DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"33E40700-19C6-4CD7-9CE2-A3A7AC67B48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AAB789E2-96FE-49E1-B0F9-F2F84D4F9F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C10D7B59-BD29-4CE8-B1D5-D2217A07FECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0A2EF380-E216-4535-B0C8-FCE00E5F05CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2A0DD7F6-3716-43FD-8C2F-EE14F7B54C69"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"7B9162F1-625B-41DB-984A-536E9AD9DD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E501CB80-071F-49D8-A644-25A484814E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"82661974-6B4F-4A0E-9870-2DD9CB463D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"D9299680-854F-4986-B308-94A0038D3D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D55365B6-7997-4D11-B21E-CF30659F0A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"BED314FE-24CB-4C32-B174-EE9D77771256"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"AF4E9664-66F6-43D5-8D23-0A0F872C52B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"B0FFE056-CF92-4FC9-A4D7-B1EAFEB36E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6021256F-894C-4366-B6A4-95FAF4CAED40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9823C815-0526-4D11-A705-B00385608D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB3C801C-C068-4E73-8B16-D65B52BFB3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"EB872E39-0DFA-4AF8-8AE0-312F169FABE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E7EB6365-1BB1-4269-8419-02D2177BEBC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3AADF149-66EB-4E83-8C4F-8B9AFB60987A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"76250E06-A2EF-4ADC-B493-3F4D4022F576"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"5672FE86-0EF2-4A3C-9189-D9E123CE8469"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:8.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"C220127B-18F8-4727-A7DD-9014A5485BC2"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972331","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034558","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5020","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T05:59:04.753","lastModified":"2026-06-17T00:28:20.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to bypass intended access restrictions and truncate arbitrary tables via unspecified vectors."},{"lang":"es","value":"El componente Big SQL en IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2 y 4.0 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y truncar tablas arbitrarias a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_biginsights:3.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"31342AF9-D73E-4B72-A98D-00E33A7088C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_biginsights:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6771B5C2-7291-4A8F-A558-679768838EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_biginsights:3.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1875306C-CF9A-423D-9786-B880A5EAD2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_biginsights:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D13EADA0-0A9D-4D91-9625-73A2F6792B62"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967923","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034561","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7402","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T05:59:05.783","lastModified":"2026-06-17T00:32:23.267","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Curam Social Program Management 6.1 en versiones anteriores a 6.1.1.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:curam_social_program_management:6.1:*:*:*:*:*:*:*","matchCriteriaId":"A6240369-0699-49A9-9CE7-6BF2098BF909"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970661","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7451","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T05:59:08.797","lastModified":"2026-06-17T00:32:33.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 IF2, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.9 IF2 y 7.6 en versiones anteriores a 7.6.0.3 FP3 y Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.9 IF2, 7.5.1 y 7.6 en versiones anteriores a 7.6.0.3 FP3 para SmartCloud Control Desk permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*","matchCriteriaId":"58B773C7-9386-4704-B85F-748578DBC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*","matchCriteriaId":"598EAB6C-7D41-46FE-BB32-D31014CA01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4908AC9D-7410-47A6-BC46-5587C60061A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.5:*:*:*:*:*:*:*","matchCriteriaId":"360D781D-AD52-4309-A484-2150B10DFB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BA294D6-4D4D-4ADB-A05B-F578A8877A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5:*:*:*:*:*:*:*","matchCriteriaId":"75C69BA7-055F-446B-9E76-398D57680BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5:*:*:*:*:*:*:*","matchCriteriaId":"012787EB-E7F0-4CAD-B406-6057A7F6F14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4367602D-5736-459D-82C1-099CD484F2FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1480E9F7-9CA1-4F8D-977F-0F13594D0D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5:*:*:*:*:*:*:*","matchCriteriaId":"88692CEA-1B67-4D1D-86CF-FC0C6DDB2B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.6:*:*:*:*:*:*:*","matchCriteriaId":"A9FC166C-B9B7-4DD9-B22E-174247578F16"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972423","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-1928","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T21:59:00.127","lastModified":"2026-06-17T00:23:14.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Team Concert (RTC) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Engineering Lifecycle Manager (RELM) 4.0.3 through 4.0.7, 5.0 through 5.0.2, and 6.0.0; Rational Rhapsody Design Manager (DM) 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0.0; and Rational Software Architect Design Manager (DM) 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0.0 allows remote authenticated users to conduct clickjacking attacks via a crafted web site."},{"lang":"es","value":"Jazz Team Server en Jazz Foundation en IBM Rational Collaborative Lifecycle Management (CLM) 3.x y 4.x en versiones anteriores a 4.0.7 IF9, 5.x en versiones anteriores a 5.0.2 IF11 y 6.x en versiones anteriores a 6.0.0 IF4; Rational Quality Manager (RQM) 3.x en versiones anteriores a 3.0.1.6 IF7, 4.x en versiones anteriores a 4.0.7 IF9, 5.x en versiones anteriores a 5.0.2 IF11 y 6.0 en versiones anteriores a 6.0.0 IF4; Rational Team Concert (RTC) 3.x en versiones anteriores a 3.0.1.6 IF7, 4.x en versiones anteriores a 4.0.7 IF9, 5.x en versiones anteriores a 5.0.2 IF11 y 6.0 en versiones anteriores a 6.0.0 IF4; Rational Requirements Composer (RRC) 3.x en versiones anteriores a 3.0.1.6 IF7 y 4.x en versiones anteriores a 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.x en versiones anteriores a 4.0.7 IF9, 5.x en versiones anteriores a 5.0.2 IF11 y 6.0 en versiones anteriores a 6.0.0 IF4; Rational Engineering Lifecycle Manager (RELM) 4.0.3 hasta la versión 4.0.7, 5.0 hasta la versión 5.0.2 y 6.0.0; Rational Rhapsody Design Manager (DM) 4.0 hasta la versión 4.0.7, 5.0 hasta la versión 5.0.2 y 6.0.0; y Rational Software Architect Design Manager (DM) 4.0 hasta la versión 4.0.7, 5.0 hasta la versión 5.0.2 y 6.0.0 permite a usuarios remotos autenticados llevar a cabo ataques de secuestro de clic a través de una página web manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9CE0A31B-7A9B-40E6-8648-365D018BA0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"71ECC4C2-BF61-47C7-8435-BE71F1AD0A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A79E7EF2-5615-4300-BC0D-865DBDC8B46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C59EB6D6-2A74-4988-912C-97045647F1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7EAB61F7-B5B4-47E8-8BFD-02F025358781"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F93D8CAB-0DF0-4A1D-B1A3-78FF892D04AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7204792C-1506-4E95-92CD-098F760FC429"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"09FC134C-08AB-4874-B31D-B08CDF4C2DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1649F910-F8B9-4AAD-9743-C37B8784A771"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CEDB1D69-FFD1-49DB-9775-B11F21E200F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"443530AE-4F33-4453-826A-8D705DFB7C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"364E7E8D-D988-4546-9E61-CD2D1A6F0728"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AB0AA277-39E7-441C-9AF2-18848FD4C9D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4938F063-34AF-4C5F-AF43-534C3D052720"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3902033E-35AB-4358-9D07-AF8C59A9621A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AC0F2747-175E-4B85-9020-162F019860EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9B31F581-9E7A-4882-A915-FE4784FDC996"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D094EE5E-DF84-4922-A612-35CD4DC4D875"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1186E8-2639-476F-802E-580D98F2E255"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DC7E998F-416E-4E1F-BF85-606224B468CF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF445BA2-BD53-43FB-BF1E-58510FC4FF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA18DE5C-904D-4FD0-A479-18314B170ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"890ABCC2-F417-4E6E-A0A8-7D485FAE3FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"46883130-F370-406C-A8E8-213399F2EE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5A13CE71-BEC0-4DEC-9CF7-183672F6729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2DB2451D-F31E-4CF6-8E61-2970A4FB174D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"01A27F4B-0ED9-479F-B91B-FCB514CF1D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EEAF452F-94AB-4857-BCD6-AE5251C61526"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7596E71E-4507-4EFC-ABF9-41D8FD338CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9B201E3D-1028-4955-AFE2-AF8C14CAA182"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A1C966E0-6372-4CA5-902E-DEE17FC139E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B12D7433-30F0-427F-BF82-0AAD492CE35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C0B9D0C8-2EB2-4209-8495-1B3B823D9A41"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"10E211DC-D0D7-4527-AE87-231A19D58C6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"20AABE5F-C942-45BB-86A9-C3F2E949D64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A04D314-F6EB-41B9-945A-D8428D86B655"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3717DCFC-1336-45EC-919C-E1CD1B37DA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BC743273-AD4B-4A14-9C0C-23A865A640C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E8B281-4A2E-41E9-8953-9F041030EF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2AF24AEA-D261-485F-A7FF-D5DAF033C571"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FDD53B1B-BCD3-4A8D-8FBB-4965FA30D9E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C0FA509F-C96E-428C-A69A-7D96E1C219B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0229C996-3960-4A7A-BA2E-03819281CA6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F0FBFCAE-0324-4C8B-82F4-1EBFA440CB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"17099F68-B49C-4433-98B6-7C7FE8846702"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D43547B3-1085-48B1-A6D3-32B791EE09FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8D3894CB-8DF7-4011-B47F-36485A2A6E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C1CDFA1C-9C07-4744-95F9-93A2332E2F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"10D8C43B-C109-44E1-868F-7DC1289D9BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FEAAF6E2-74BE-4FB2-AE49-3C58F68BCEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"44EF2B1F-1CD0-4B6E-8C86-622B0E000F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4EFFBB5B-8566-45BC-9123-5418821E6EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5BF2CC2A-232C-43A6-8C9B-E6125C051BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A84EA62-E3F8-4E4C-9FEF-065300C4611A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0232D8EF-1DB3-477D-818C-B79B68406197"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7E8158D2-ECB0-4F89-BE73-568CA213D9B8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5B30003D-1BF8-414D-9D6D-9D1B90D4EBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A6B5AC6B-5DCB-458C-8267-6AF5CC9C3E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C380E168-9045-4BF3-A485-2943B2FDE44D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5917861D-85E7-45F6-9150-BD6F2E272832"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"90570EDF-C0A3-4AF5-9763-2D6473762A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"608625CE-F543-4DCA-A3F9-70A35ECD1550"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"AE1738F8-EECC-46C9-AE0C-46E8E4B2AC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5E997305-EC48-42C4-9408-EE622818BA03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D0477D24-56F7-46A2-A08A-C20A90E6E85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6CABBD25-7C8D-4CE1-B9C9-75670C8B5B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"31D9D1B5-C3D1-42F2-A963-9FA30CF20AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E0514FAC-52CE-41F6-B255-E2D83E71F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ACA25E78-52E0-4B5E-AECC-0F24C827F3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"746190AA-6D21-446F-80F5-4C98F5BF74A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"08125E1B-FE2B-436C-A69F-067BC1B5C542"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B2431038-D838-4AB0-B614-EDC1D4D203E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6A0BC49A-4D59-47AE-B2D2-13B6719B0932"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E3AE1241-9998-4F5D-862A-52CE40DB24C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5E21B53E-28C2-4930-88F3-3AADD1BF31B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3F4A9A99-C26E-4476-934E-24AADFBDB8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C22AC9CB-44C3-43E1-B29A-3D06A421E51D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"51998570-6EFF-436C-9297-601B17A31788"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D944BB64-73C5-402C-9D14-077B8FC9DB8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B08EF876-5D00-45DC-A724-D2496854D87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B877D86-6ABE-43E8-A681-0C937C779388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6D5C2251-FB5D-4775-BDB8-6115732E6615"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EB05DAD7-F6DB-4441-B9D4-BD0F1BD1DF25"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"89BE9040-CC37-495C-A05B-FC3DFBC02DC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2B450B35-5169-4B41-B928-0F22DF55A28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6B4FF44-507B-4F2E-9C7C-4D8A046542D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF1DD60E-3E2C-4F42-9892-B031CB3B570D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6504477B-9BF5-49F6-8E3A-9B07B30895B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C0C4948B-69C4-4CAF-808E-426483ED0622"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1C297440-406F-4508-9D8D-92F79DF91C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"79FB3730-EE6A-44CE-8FCD-4CE6D055EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3C416F89-7E5E-4FE7-A532-F13843AA1771"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E2654BDE-3134-4653-B472-995B02E9B841"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9DFDE569-8BE3-4CFD-8228-FF785B004068"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D0173BE-F9DE-4566-B060-095203FAACA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4875C452-2466-45F1-8923-00E5340D74D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8B15EF2E-A114-4128-85F1-889EDC3F6C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F07F4E00-F0BA-4821-B5B4-3C0E9D01AAE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C80E49B8-8BC4-4150-B86A-A5E474F4E598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6915A8F-05A1-4D39-BF53-0C3F4B155A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E92346D-B1A8-43F8-B2C1-E69A3301560B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F081AEF5-3F0F-4D58-8BBE-EDB9C569CAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"44840CC3-5720-4AF8-B508-67AB5E3E1CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3F65519B-90F8-4A17-BA94-FDFDE5BF8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"71F5759B-9D36-46DA-8F1B-CF7899AC7E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A2C7E81B-DA97-4545-9C78-962E5FE9202D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6D790D42-7B73-40A6-BF0E-630099FB97E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FABBECCB-F0B9-4D45-9372-6F313F841FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E9DF445D-E457-4FA5-A2BE-F05828F8F799"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E1CE1A44-9F74-4405-AAB4-E38487FBD91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"29160905-BBD7-486C-A4E0-5778717389E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0A538D21-6F83-4F01-AB4F-788A89F922CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"233E248F-0EA5-4C97-8474-C7A3EFCF7CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5FE6472E-AC94-431C-B8EA-8A3ED1828E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B8DAFF35-BD11-4EED-8B79-E99AE8A0E620"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8EA5622F-81FF-4C0C-8A3D-9ACFE30B0ACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BEC305-F98D-45F4-B149-1188744DE408"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973200","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034565","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034566","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034567","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034568","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7396","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T21:59:02.343","lastModified":"2026-06-17T00:32:22.633","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or modify data, via unspecified vectors."},{"lang":"es","value":"El Scheduler en IBM Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.8 IF6 y 7.6 en versiones anteriores a 7.6.0.1 FP1 y Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.8 IF6, 7.5.1 y 7.6 en versiones anteriores a 7.6.0.1 FP1 para SmartCloud Control Desk permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso, y obtener información sensible o datos modificados, a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*","matchCriteriaId":"58B773C7-9386-4704-B85F-748578DBC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*","matchCriteriaId":"598EAB6C-7D41-46FE-BB32-D31014CA01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4908AC9D-7410-47A6-BC46-5587C60061A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.5:*:*:*:*:*:*:*","matchCriteriaId":"360D781D-AD52-4309-A484-2150B10DFB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BA294D6-4D4D-4ADB-A05B-F578A8877A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5:*:*:*:*:*:*:*","matchCriteriaId":"75C69BA7-055F-446B-9E76-398D57680BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5:*:*:*:*:*:*:*","matchCriteriaId":"012787EB-E7F0-4CAD-B406-6057A7F6F14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4367602D-5736-459D-82C1-099CD484F2FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1480E9F7-9CA1-4F8D-977F-0F13594D0D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5:*:*:*:*:*:*:*","matchCriteriaId":"88692CEA-1B67-4D1D-86CF-FC0C6DDB2B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.6:*:*:*:*:*:*:*","matchCriteriaId":"A9FC166C-B9B7-4DD9-B22E-174247578F16"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970799","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7403","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T21:59:04.453","lastModified":"2026-06-17T00:32:23.373","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service (incorrect pointer dereference and node crash) via unspecified vectors."},{"lang":"es","value":"IBM Spectrum Scale 4.1.1.x en versiones anteriores a 4.1.1.3 y General Parallel File System (GPFS) 3.5.x en versiones anteriores a 3.5.0.29 y 4.1.x hasta la versión 4.1.0.8 en AIX permite a usuarios locales provocar una denegación de servicio (referencia a puntero incorrecta y caída de nodo) a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:general_parallel_file_system:3.5:*:*:*:*:*:*:*","matchCriteriaId":"7F13ADEA-CFB7-4302-B7F2-74EF70F08FC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2E29D816-7A73-47EA-8DE6-E553CA0D1079"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"18C5A85C-F932-44CF-B3EA-691737C96C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9385B07C-881D-4A4E-A0F5-FF1BC88F8CFF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005452","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972152","source":"psirt@us.ibm.com"},{"url":"http://www.securityfocus.com/bid/79805","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1035094","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7416","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T21:59:06.407","lastModified":"2026-06-17T00:32:30.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AFP Workbench Viewer in IBM i Access 7.1 on Windows allows remote attackers to cause a denial of service (viewer crash) via a crafted workbench file."},{"lang":"es","value":"AFP Workbench Viewer en IBM i Access 7.1 en Windows permite a atacantes remotos provocar una denegación de servicio (caída de visor) a través de un archivo workbench manipulado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:i_access:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B1638A59-EF61-4E7F-A667-9179D83355BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020995","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1SI57907","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1SI57907","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020995\">Per Advisory Attack Vector is Listed as Local</a>"}},{"cve":{"id":"CVE-2015-7422","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T21:59:07.423","lastModified":"2026-06-17T00:32:30.797","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service (application crash) via unspecified vectors."},{"lang":"es","value":"Desbordamiento del buffer en IBM i Access 7.1 en Windows permite a usuarios locales provocar una denegación de servicio (caída de aplicación) a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:i_access:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B1638A59-EF61-4E7F-A667-9179D83355BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020996","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1SI57907","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1SI57907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7431","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T21:59:10.580","lastModified":"2026-06-17T00:32:31.727","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en Queue Watcher en IBM Sterling B2B Integrator 5.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*","matchCriteriaId":"F805BA3A-178D-416E-9DED-4258F71A17C8"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT04830","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970676","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT04830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7437","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T21:59:13.957","lastModified":"2026-06-17T00:32:32.333","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Queue Watcher en IBM Sterling B2B Integrator 5.2 permite a usuarios locales obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*","matchCriteriaId":"F805BA3A-178D-416E-9DED-4258F71A17C8"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC99482","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970927","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC99482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7438","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T21:59:14.893","lastModified":"2026-06-17T00:32:32.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access."},{"lang":"es","value":"IBM Sterling B2B Integrator 5.2 permite a usuarios locales obtener información sensible de servicios web en texto plano aprovechando el acceso a la base de datos."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*","matchCriteriaId":"F805BA3A-178D-416E-9DED-4258F71A17C8"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT09929","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971012","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT09929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7452","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-02T21:59:16.927","lastModified":"2026-06-17T00:32:33.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allow remote authenticated users to obtain sensitive information via the REST API."},{"lang":"es","value":"IBM Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.9 FP9 y 7.6 en versiones anteriores a 7.6.0.3 FP3 y Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.9 FP9, 7.5.1 y 7.6 en versiones anteriores a 7.6.0.3 FP3 para SmartCloud Control Desk permite a usuarios remotos autenticados obtener información sensible a través de la API REST."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*","matchCriteriaId":"58B773C7-9386-4704-B85F-748578DBC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*","matchCriteriaId":"598EAB6C-7D41-46FE-BB32-D31014CA01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4908AC9D-7410-47A6-BC46-5587C60061A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.5:*:*:*:*:*:*:*","matchCriteriaId":"360D781D-AD52-4309-A484-2150B10DFB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BA294D6-4D4D-4ADB-A05B-F578A8877A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5:*:*:*:*:*:*:*","matchCriteriaId":"75C69BA7-055F-446B-9E76-398D57680BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5:*:*:*:*:*:*:*","matchCriteriaId":"012787EB-E7F0-4CAD-B406-6057A7F6F14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4367602D-5736-459D-82C1-099CD484F2FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1480E9F7-9CA1-4F8D-977F-0F13594D0D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5:*:*:*:*:*:*:*","matchCriteriaId":"88692CEA-1B67-4D1D-86CF-FC0C6DDB2B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.6:*:*:*:*:*:*:*","matchCriteriaId":"A9FC166C-B9B7-4DD9-B22E-174247578F16"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972463","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-1971","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-03T00:59:00.113","lastModified":"2026-06-17T00:23:19.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager (RQM) 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Team Concert (RTC) 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Requirements Composer (RRC) 2.x and 3.x before 3.0.1.6 IF7 and 4.0 through 4.0.7; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Engineering Lifecycle Manager (RELM) 1.0 through 1.0.0.1, 4.0.3 through 4.0.7, and 5.0 through 5.0.2; Rational Rhapsody Design Manager (DM) 3.0 through 3.0.1, 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0; and Rational Software Architect Design Manager (DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2 allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Jazz Team Server en Jazz Foundation en IBM Rational Collaborative Lifecycle Management (CLM) 3.x y 4.x en versiones anteriores a 4.0.7 IF8 y 5.x en versiones anteriores a 5.0.2 IF10; Rational Quality Manager (RQM) 2.x y 3.x en versiones anteriores a 3.0.1.6 IF7, 4.x en versiones anteriores a 4.0.7 IF8 y 5.x en versiones anteriores a 5.0.2 IF10; Rational Team Concert (RTC) 2.x y 3.x en versiones anteriores a 3.0.1.6 IF7, 4.x en versiones anteriores a 4.0.7 IF8 y 5.x en versiones anteriores a 5.0.2 IF10; Rational Requirements Composer (RRC) 2.x y 3.x en versiones anteriores a 3.0.1.6 IF7 y 4.0 hasta la versión 4.0.7; Rational DOORS Next Generation (RDNG) 4.x en versiones anteriores a 4.0.7 IF8 y 5.x en versiones anteriores a 5.0.2 IF10; Rational Engineering Lifecycle Manager (RELM) 1.0 hasta la versión 1.0.0.1, 4.0.3 hasta la versión 4.0.7 y 5.0 hasta la versión 5.0.2; Rational Rhapsody Design Manager (DM) 3.0 hasta la versión 3.0.1, 4.0 hasta la versión 4.0.7, 5.0 hasta la versión 5.0.2 y 6.0 y Rational Software Architect Design Manager (DM) 3.0 hasta la versión 3.0.1, 4.0 hasta la versión 4.0.7 y 5.0 hasta la versión 5.0.2 permite a atacantes remotos provocar una denegación de servicio a través de vectores desconocidos."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:P","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9CE0A31B-7A9B-40E6-8648-365D018BA0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"71ECC4C2-BF61-47C7-8435-BE71F1AD0A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A79E7EF2-5615-4300-BC0D-865DBDC8B46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C59EB6D6-2A74-4988-912C-97045647F1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7EAB61F7-B5B4-47E8-8BFD-02F025358781"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F93D8CAB-0DF0-4A1D-B1A3-78FF892D04AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7204792C-1506-4E95-92CD-098F760FC429"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"09FC134C-08AB-4874-B31D-B08CDF4C2DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1649F910-F8B9-4AAD-9743-C37B8784A771"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CEDB1D69-FFD1-49DB-9775-B11F21E200F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"443530AE-4F33-4453-826A-8D705DFB7C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"364E7E8D-D988-4546-9E61-CD2D1A6F0728"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D34C6DE1-40BC-44F3-B106-47E4FA1C4FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AB0AA277-39E7-441C-9AF2-18848FD4C9D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4938F063-34AF-4C5F-AF43-534C3D052720"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3902033E-35AB-4358-9D07-AF8C59A9621A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"559C7C20-BD07-4E30-A74C-EA35DB2E3F2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B15D55E2-D1C2-4934-8C51-2DA2778ADF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AC0F2747-175E-4B85-9020-162F019860EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9B31F581-9E7A-4882-A915-FE4784FDC996"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D094EE5E-DF84-4922-A612-35CD4DC4D875"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1186E8-2639-476F-802E-580D98F2E255"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DC7E998F-416E-4E1F-BF85-606224B468CF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5B30003D-1BF8-414D-9D6D-9D1B90D4EBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A6B5AC6B-5DCB-458C-8267-6AF5CC9C3E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C380E168-9045-4BF3-A485-2943B2FDE44D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5917861D-85E7-45F6-9150-BD6F2E272832"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"90570EDF-C0A3-4AF5-9763-2D6473762A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"608625CE-F543-4DCA-A3F9-70A35ECD1550"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"AE1738F8-EECC-46C9-AE0C-46E8E4B2AC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D0173BE-F9DE-4566-B060-095203FAACA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4875C452-2466-45F1-8923-00E5340D74D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8B15EF2E-A114-4128-85F1-889EDC3F6C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F07F4E00-F0BA-4821-B5B4-3C0E9D01AAE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C80E49B8-8BC4-4150-B86A-A5E474F4E598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6915A8F-05A1-4D39-BF53-0C3F4B155A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E92346D-B1A8-43F8-B2C1-E69A3301560B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F081AEF5-3F0F-4D58-8BBE-EDB9C569CAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"44840CC3-5720-4AF8-B508-67AB5E3E1CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3F65519B-90F8-4A17-BA94-FDFDE5BF8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"71F5759B-9D36-46DA-8F1B-CF7899AC7E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A2C7E81B-DA97-4545-9C78-962E5FE9202D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6D790D42-7B73-40A6-BF0E-630099FB97E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FABBECCB-F0B9-4D45-9372-6F313F841FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E9DF445D-E457-4FA5-A2BE-F05828F8F799"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E1CE1A44-9F74-4405-AAB4-E38487FBD91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"29160905-BBD7-486C-A4E0-5778717389E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0A538D21-6F83-4F01-AB4F-788A89F922CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"233E248F-0EA5-4C97-8474-C7A3EFCF7CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5FE6472E-AC94-431C-B8EA-8A3ED1828E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B8DAFF35-BD11-4EED-8B79-E99AE8A0E620"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8EA5622F-81FF-4C0C-8A3D-9ACFE30B0ACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BEC305-F98D-45F4-B149-1188744DE408"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6D5C2251-FB5D-4775-BDB8-6115732E6615"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EB05DAD7-F6DB-4441-B9D4-BD0F1BD1DF25"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"89BE9040-CC37-495C-A05B-FC3DFBC02DC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2B450B35-5169-4B41-B928-0F22DF55A28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6B4FF44-507B-4F2E-9C7C-4D8A046542D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF1DD60E-3E2C-4F42-9892-B031CB3B570D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6504477B-9BF5-49F6-8E3A-9B07B30895B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C0C4948B-69C4-4CAF-808E-426483ED0622"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1C297440-406F-4508-9D8D-92F79DF91C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"79FB3730-EE6A-44CE-8FCD-4CE6D055EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3C416F89-7E5E-4FE7-A532-F13843AA1771"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E2654BDE-3134-4653-B472-995B02E9B841"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9DFDE569-8BE3-4CFD-8228-FF785B004068"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5E997305-EC48-42C4-9408-EE622818BA03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D0477D24-56F7-46A2-A08A-C20A90E6E85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6CABBD25-7C8D-4CE1-B9C9-75670C8B5B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"31D9D1B5-C3D1-42F2-A963-9FA30CF20AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E0514FAC-52CE-41F6-B255-E2D83E71F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ACA25E78-52E0-4B5E-AECC-0F24C827F3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"746190AA-6D21-446F-80F5-4C98F5BF74A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"08125E1B-FE2B-436C-A69F-067BC1B5C542"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B2431038-D838-4AB0-B614-EDC1D4D203E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6A0BC49A-4D59-47AE-B2D2-13B6719B0932"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E3AE1241-9998-4F5D-862A-52CE40DB24C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"10E211DC-D0D7-4527-AE87-231A19D58C6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"20AABE5F-C942-45BB-86A9-C3F2E949D64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A04D314-F6EB-41B9-945A-D8428D86B655"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3717DCFC-1336-45EC-919C-E1CD1B37DA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BC743273-AD4B-4A14-9C0C-23A865A640C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E8B281-4A2E-41E9-8953-9F041030EF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2AF24AEA-D261-485F-A7FF-D5DAF033C571"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FDD53B1B-BCD3-4A8D-8FBB-4965FA30D9E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C0FA509F-C96E-428C-A69A-7D96E1C219B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0229C996-3960-4A7A-BA2E-03819281CA6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F0FBFCAE-0324-4C8B-82F4-1EBFA440CB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"17099F68-B49C-4433-98B6-7C7FE8846702"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D43547B3-1085-48B1-A6D3-32B791EE09FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8D3894CB-8DF7-4011-B47F-36485A2A6E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C1CDFA1C-9C07-4744-95F9-93A2332E2F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"10D8C43B-C109-44E1-868F-7DC1289D9BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FEAAF6E2-74BE-4FB2-AE49-3C58F68BCEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"44EF2B1F-1CD0-4B6E-8C86-622B0E000F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4EFFBB5B-8566-45BC-9123-5418821E6EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5BF2CC2A-232C-43A6-8C9B-E6125C051BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A84EA62-E3F8-4E4C-9FEF-065300C4611A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0232D8EF-1DB3-477D-818C-B79B68406197"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7E8158D2-ECB0-4F89-BE73-568CA213D9B8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF445BA2-BD53-43FB-BF1E-58510FC4FF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA18DE5C-904D-4FD0-A479-18314B170ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"890ABCC2-F417-4E6E-A0A8-7D485FAE3FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"46883130-F370-406C-A8E8-213399F2EE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5A13CE71-BEC0-4DEC-9CF7-183672F6729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2DB2451D-F31E-4CF6-8E61-2970A4FB174D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"01A27F4B-0ED9-479F-B91B-FCB514CF1D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EEAF452F-94AB-4857-BCD6-AE5251C61526"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7596E71E-4507-4EFC-ABF9-41D8FD338CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9B201E3D-1028-4955-AFE2-AF8C14CAA182"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A1C966E0-6372-4CA5-902E-DEE17FC139E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B12D7433-30F0-427F-BF82-0AAD492CE35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C0B9D0C8-2EB2-4209-8495-1B3B823D9A41"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5E21B53E-28C2-4930-88F3-3AADD1BF31B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C66DD3-20D9-4B47-AFA4-0BA789A973FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7178BB7D-7098-44FB-8DC1-C6A7AF5D6EE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3F4A9A99-C26E-4476-934E-24AADFBDB8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A73A4517-CA0C-4C11-BD22-47F53DFBD7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C22AC9CB-44C3-43E1-B29A-3D06A421E51D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"51998570-6EFF-436C-9297-601B17A31788"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D944BB64-73C5-402C-9D14-077B8FC9DB8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B08EF876-5D00-45DC-A724-D2496854D87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B877D86-6ABE-43E8-A681-0C937C779388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971164","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-1985","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-03T00:59:01.083","lastModified":"2026-06-17T00:23:22.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file."},{"lang":"es","value":"El gestor de colas en dispositivos IBM MQ M2000 en versiones anteriores a 8.0.0.4 permite a usuarios locales eludir el requisito destinado a la contraseña y leer claves privadas aprovechando la existencia de un archivo stash."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.1,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_appliance_m2000:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.0.3","matchCriteriaId":"B0BAF9E2-9DF4-40C4-8307-D8C816A8CE58"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971445","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-2007","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-03T00:59:02.160","lastModified":"2026-06-17T00:23:26.633","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.5 Patch 6 allows remote authenticated users to read arbitrary files via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en IBM Security QRadar SIEM 7.2.x en versiones anteriores a 7.2.5 Patch 6 permite a usuarios remotos autenticados leer archivos arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C137959-2279-4459-8A10-43AFE09E2641"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"39D53329-E729-43C1-8C67-EFA4C3F7BFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9FC4EDCA-DF37-4366-B944-F342FA55EEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"76CA942D-70AD-4E0D-A28E-443FB7140A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967647","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5017","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-03T05:59:03.897","lastModified":"2026-06-17T00:28:19.710","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended access restrictions and establish a login session by entering an expired password."},{"lang":"es","value":"IBM Maximo Asset Management 7.1 hasta la versión 7.1.1.13, 7.5.0 en versiones anteriores a 7.5.0.8 IFIX005 y 7.6.0 en versiones anteriores a 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 en versiones anteriores a 7.5.0.8 IFIX005, 7.5.1 y 7.6.0 en versiones anteriores a 7.6.0.2 IFIX002 para SmartCloud Control Desk; y Maximo Asset Management 7.1 hasta la versión 7.1.1.13 y 7.2 para Tivoli IT Asset Management for IT y otros ciertos productos permite a usuarios remotos autenticados eludir las restricciones de acceso previstas y llevar a cabo un inicio de sesión introduciendo una contraseña caducada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1AF3DBFF-A377-4147-A6EB-BEC6F38FD8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2:*:*:*:*:*:*:*","matchCriteriaId":"83470AC7-A06B-4443-9E60-B0AA18B69AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*","matchCriteriaId":"DE721CF9-0F75-410B-A0F4-542041E25925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*","matchCriteriaId":"58B773C7-9386-4704-B85F-748578DBC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:*","matchCriteriaId":"85457F6C-80FE-4E9F-BAB6-58B0485D8B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*","matchCriteriaId":"598EAB6C-7D41-46FE-BB32-D31014CA01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_energy_optimization:7.1:*:*:*:*:*:*:*","matchCriteriaId":"47FE69C7-D7C4-4707-B3EF-AC290F2CF92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3D8673B0-D385-467A-A60C-90A436C976D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4908AC9D-7410-47A6-BC46-5587C60061A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.1:*:*:*:*:*:*:*","matchCriteriaId":"9B315997-8DD3-4244-B292-68568FB82CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.5:*:*:*:*:*:*:*","matchCriteriaId":"360D781D-AD52-4309-A484-2150B10DFB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BA294D6-4D4D-4ADB-A05B-F578A8877A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4796CF9E-0065-4DE2-8C7A-22EB76F65E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5:*:*:*:*:*:*:*","matchCriteriaId":"75C69BA7-055F-446B-9E76-398D57680BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1:*:*:*:*:*:*:*","matchCriteriaId":"764D9D95-26A8-441E-95E1-55C9CDEA59BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5:*:*:*:*:*:*:*","matchCriteriaId":"012787EB-E7F0-4CAD-B406-6057A7F6F14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.1:*:*:*:*:*:*:*","matchCriteriaId":"2F780ADF-3151-4B2C-98B9-7FFD0DB47A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4367602D-5736-459D-82C1-099CD484F2FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.1:*:*:*:*:*:*:*","matchCriteriaId":"553D4A7C-E2F0-40F7-88FC-AB372DFCA9DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1480E9F7-9CA1-4F8D-977F-0F13594D0D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5:*:*:*:*:*:*:*","matchCriteriaId":"88692CEA-1B67-4D1D-86CF-FC0C6DDB2B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.6:*:*:*:*:*:*:*","matchCriteriaId":"A9FC166C-B9B7-4DD9-B22E-174247578F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*","matchCriteriaId":"013D299A-6A9C-44C7-B49C-A4115F4C13E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:*","matchCriteriaId":"3D5C1BCF-1DC0-45E7-B624-9221F8610346"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"235AE987-A109-4996-B43A-38C1BE23F37B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2:*:*:*:*:*:*:*","matchCriteriaId":"95FF438A-31FC-44DD-AC14-C9332F0B0A3D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21969052","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21969052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5023","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-03T05:59:04.913","lastModified":"2026-06-17T00:28:20.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en IBM Curam Social Program Management 6.1 en versiones anteriores a 6.1.1 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:curam_social_program_management:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BDD18D50-AEBC-4131-B89F-F2A74501E0A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:curam_social_program_management:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BD4AC7D3-4D89-4249-BA63-2BDB26BA9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:curam_social_program_management:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"140530EF-9ABC-4205-86B3-D08F12AF492C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:curam_social_program_management:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2844EFB8-2092-42FD-A7A9-0FBA69693DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:curam_social_program_management:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DD70D1FB-46F5-4759-8C11-F02463A4E883"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7A5F30D0-82C1-4F88-9FDB-A8E6D6D39591"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:curam_social_program_management:6.1:*:*:*:*:*:*:*","matchCriteriaId":"A6240369-0699-49A9-9CE7-6BF2098BF909"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967851","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5035","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-03T05:59:05.850","lastModified":"2026-06-17T00:28:20.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-5036."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Connections 3.x en versiones anteriores a 3.0.1.1 CR3, 4.0 en versiones anteriores a CR4, 4.5 en versiones anteriores a CR5 y 5.0 en versiones anteriores a CR3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2015-5036."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1.1","matchCriteriaId":"3703A46D-048D-4CE8-A107-D401192724B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEAD70-A16A-4618-994A-455A16F0A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5:*:*:*:*:*:*:*","matchCriteriaId":"D749AA83-99AF-49CD-B9E0-09F667E907E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0:*:*:*:*:*:*:*","matchCriteriaId":"6F522A3A-A452-4D8F-B7A0-3AC80A0DD4AE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO87020","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971439","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO87020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5036","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-03T05:59:06.820","lastModified":"2026-06-17T00:28:20.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-5035."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Connections 3.x en versiones anteriores a 3.0.1.1 CR3, 4.0 en versiones anteriores a CR4, 4.5 en versiones anteriores a CR5 y 5.0 en versiones anteriores a CR3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2015-5035."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1.1","matchCriteriaId":"3703A46D-048D-4CE8-A107-D401192724B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEAD70-A16A-4618-994A-455A16F0A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5:*:*:*:*:*:*:*","matchCriteriaId":"D749AA83-99AF-49CD-B9E0-09F667E907E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0:*:*:*:*:*:*:*","matchCriteriaId":"6F522A3A-A452-4D8F-B7A0-3AC80A0DD4AE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO87020","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971439","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO87020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5037","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-03T05:59:07.727","lastModified":"2026-06-17T00:28:20.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences."},{"lang":"es","value":"Vulnerabilidad de CSRF en IBM Connections 3.x en versiones anteriores a 3.0.1.1 CR3, 4.0 en versiones anteriores a CR4, 4.5 en versiones anteriores a CR5 y 5.0 en versiones anteriores a CR3 permite a usuarios remotos autenticados secuestrar la autenticación de usuarios arbitrarios por peticiones que insertan secuencias XSS."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1.1","matchCriteriaId":"3703A46D-048D-4CE8-A107-D401192724B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEAD70-A16A-4618-994A-455A16F0A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5:*:*:*:*:*:*:*","matchCriteriaId":"D749AA83-99AF-49CD-B9E0-09F667E907E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0:*:*:*:*:*:*:*","matchCriteriaId":"6F522A3A-A452-4D8F-B7A0-3AC80A0DD4AE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO87020","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971439","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO87020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5051","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-03T05:59:09.990","lastModified":"2026-06-17T00:28:21.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.2 IF1 for SmartCloud Control Desk allow remote authenticated users to bypass intended access restrictions on query results via unspecified vectors."},{"lang":"es","value":"IBM Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.8 IF6 y 7.6 en versiones anteriores a 7.6.0.2 IF1 y Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.8 IF6, 7.5.1 y 7.6 en versiones anteriores a 7.6.0.2 IF1 para SmartCloud Control Desk permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso en resultados de consulta a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*","matchCriteriaId":"58B773C7-9386-4704-B85F-748578DBC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*","matchCriteriaId":"598EAB6C-7D41-46FE-BB32-D31014CA01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6:*:*:*:*:*:*:*","matchCriteriaId":"DB43A8FB-E429-4BD4-8787-E538352D8D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4908AC9D-7410-47A6-BC46-5587C60061A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.5:*:*:*:*:*:*:*","matchCriteriaId":"360D781D-AD52-4309-A484-2150B10DFB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BA294D6-4D4D-4ADB-A05B-F578A8877A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5:*:*:*:*:*:*:*","matchCriteriaId":"75C69BA7-055F-446B-9E76-398D57680BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5:*:*:*:*:*:*:*","matchCriteriaId":"012787EB-E7F0-4CAD-B406-6057A7F6F14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4367602D-5736-459D-82C1-099CD484F2FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1480E9F7-9CA1-4F8D-977F-0F13594D0D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5:*:*:*:*:*:*:*","matchCriteriaId":"88692CEA-1B67-4D1D-86CF-FC0C6DDB2B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.6:*:*:*:*:*:*:*","matchCriteriaId":"A9FC166C-B9B7-4DD9-B22E-174247578F16"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970797","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8508","sourceIdentifier":"security@mozilla.org","published":"2016-01-03T05:59:10.990","lastModified":"2026-06-17T00:34:40.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot configuration is used, allows remote attackers to inject arbitrary web script or HTML via a crafted bug summary."},{"lang":"es","value":"Vulnerabilidad de XSS en showdependencygraph.cgi en Bugzilla 2.x, 3.x y 4.x en versiones anteriores a 4.2.16, 4.3.x y 4.4.x en versiones anteriores a 4.4.11 y 4.5.x y 5.0.x en versiones anteriores a 5.0.2, cuando se utiliza una configuración dot local, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un resumen de error manipulado."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DC38A53F-60E6-4F7A-A953-C53D141E830D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.2:*:*:*:*:*:*:*","matchCriteriaId":"DAFEF951-3FE8-49DD-B3DD-E526D5B52998"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*","matchCriteriaId":"83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*","matchCriteriaId":"64434BFC-DDC0-4C7D-B578-472B0610C89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*","matchCriteriaId":"A30F28D9-B000-4C26-A911-5E1B8A867BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*","matchCriteriaId":"4A123F78-A671-4FB5-AE78-83762E9323C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*","matchCriteriaId":"28C34288-A326-4B71-99B0-DA9FFD28160F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*","matchCriteriaId":"73648879-BB08-4BE4-A7FF-1E8DF4E264B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*","matchCriteriaId":"DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5E8E72-D493-460D-B5A0-F90C291398A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*","matchCriteriaId":"04885D31-09F3-455F-A1A9-815E182ABCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*","matchCriteriaId":"F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*","matchCriteriaId":"92BCD546-2A50-4F43-935C-B68459EE894E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*","matchCriteriaId":"C535BAB7-6146-440B-ADBD-51007585CFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*","matchCriteriaId":"A749C7AB-6F60-469C-BD95-759205DDA345"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA9DE63-9951-4FE0-80BE-0F6F197303D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*","matchCriteriaId":"B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*","matchCriteriaId":"8E27101B-7985-4412-A14F-9ED11E4C874C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*","matchCriteriaId":"8A74E8A2-223E-4877-989E-494362B513E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*","matchCriteriaId":"E0CAFB45-B115-4492-9919-60223304BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*","matchCriteriaId":"DC3F7C44-C734-419B-AB62-3AD52554FC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.7:*:*:*:*:*:*:*","matchCriteriaId":"695036D1-994C-451E-8D53-0A345702E4D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F2969731-8256-431B-9356-4BC873D98F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"E5177876-0FEC-481B-815F-84AF53968644"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"BC38566A-07F1-4F21-BAC1-259F844DC15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1684B8-3060-4139-BC06-707F27A05958"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*","matchCriteriaId":"FF32C74C-3EA3-4E1F-BADA-BB4A92068266"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*","matchCriteriaId":"D569A750-C649-4D40-89AB-D29773E66F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*","matchCriteriaId":"95B69FA8-1182-46F1-952F-4610288ED409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.7:*:*:*:*:*:*:*","matchCriteriaId":"5716BB97-7829-4FDE-92AC-69CA10332F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D4D9F54A-15A7-4899-B695-D9D8B96C4A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11C6713F-01ED-4AE9-AE42-89926067E6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB5010D-37A3-4B6E-92B6-6F41A3708851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB09719-122F-4D25-B680-18029D5D9DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF585D92-9FAF-4858-A956-68AF77227333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7BA67823-C9D9-4C5B-A4ED-669E6F1851C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"CB0F7531-A660-4604-80BD-15B01E2916BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A6FE6868-BB9F-4EB8-9E37-3438559CB01B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"1EC90352-C94A-4F47-AFB7-713B547373CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E5E77E01-D779-482A-9FAC-4AC210B68771"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"14B5A433-526F-436E-9FCD-B71E661180FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"48EDC5BC-AD4B-4E67-B79C-F44292307AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6FEC62B7-2CAA-4A0D-A9B2-B4A6B105A6F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"4B4A7A67-1355-4648-B8C9-3231BED96547"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"442AB3EE-61DF-4B25-ABEB-55905C01E376"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7F825E34-D529-4ADC-A7D6-1BD9DAE86FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"C1F92D0C-AF71-4FD3-BC4B-C6D0F1F84F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"CBC26020-BFD7-493B-BDE2-1EC8DEA1A6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"984463B4-00A8-423B-B0C5-A7C4FECF064C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"6C7DC534-FF77-414C-A1DC-945F508CC3C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*","matchCriteriaId":"D6A71919-DC70-4AE2-9D16-76A177DAE331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EA43E47B-F474-4F5B-A91B-9AF99359FE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A7A3A453-EE50-458C-8F31-D7AA232006FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3D920D39-683D-4F9F-AA85-3C4D1600DAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"EF6A3C0F-8778-4236-B4DC-41DBCF43EB62"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"7D134D4D-6A95-48FE-B8E5-4F90692CB4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"08C34E6F-8233-4575-AAE7-4DBFC27453F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6D8155F8-CAB1-4EED-B576-F4102253BD25"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"593D2F3B-A386-48D8-BF19-A12F1B4962A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"F37C651D-8989-478B-A991-654FCDEC8B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"AE170AE5-37F5-4750-ACD9-13CA691A80C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"1DE75B2F-A183-4ED9-A9E9-7ADF54C341FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.13:*:*:*:*:*:*:*","matchCriteriaId":"A4D7380C-5608-4F96-82E3-4B36CDCD71EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.14:*:*:*:*:*:*:*","matchCriteriaId":"4BC4AB19-CA33-4C58-A305-E970EEACEBAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6:*:*:*:*:*:*:*","matchCriteriaId":"03E40C09-0696-45BC-9AE8-9F6F20964600"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"BCAD5285-E485-4F49-99CF-287545260FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5C193DF3-8D23-44A9-94DE-9F4F7358ED3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"80BA8C84-32C3-4ECF-B4C7-573B12441D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"820EC9F1-B66C-43CE-B254-145F4AC23083"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"C4BDA6DC-8D53-417D-8320-CE266F8607B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"5B01E0D5-3F26-4A71-A22C-FAD7CBF47283"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"6C33D8DA-86A4-4A70-82F8-27D5DE3881EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"884D0728-8E3C-47F3-9DDD-FA976E1553EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"C47C594A-D3B6-44FD-93D7-7E69212050BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"551303CA-63C5-4A3A-9280-ADB2B77C05F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"0777EB93-D11C-4837-BB7F-96DEC716E1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.12:*:*:*:*:*:*:*","matchCriteriaId":"10FFAD30-56A0-40C8-AE70-70DD9904C528"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.6.13:*:*:*:*:*:*:*","matchCriteriaId":"3620DE78-AF48-44EC-B211-E0C26F4E951F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0:*:*:*:*:*:*:*","matchCriteriaId":"DABC1683-0E04-456E-9500-68D0D35815E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A367BFF0-397D-416F-960C-602E8B66421A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A6229B76-3EB0-45D9-9667-7E94D0880AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4FCD8B47-9BF6-4F3E-AF88-0416BE31EC65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C8D0ED4E-F1A7-43B7-B9D2-D6D6AA145459"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"93FE2861-A397-4439-9BB8-7B67D7F9D211"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3AF08887-66BF-4B3C-81E9-F8443E7D3285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D2D243D2-0FD9-45E5-BE52-A2956F587122"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6038EF72-2CDC-42A1-A20A-B23459776E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"66959932-AB8A-43C7-83CE-07EE576BF2F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"145D0FF7-1691-4A73-95FA-284A9EF79F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A9C9A0A8-139B-469D-ABE8-2724D65F7EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"4A54C2C7-AA44-46E9-BF03-E00018084093"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BECED922-3748-4534-9750-3A061B939A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A8A5E5C6-AF2D-4C31-B422-63D0182EC21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"E5487227-FD2D-45BE-B4AE-57BD25FF9260"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"9BF3A2DE-4E15-45E8-956E-B3368DBC4ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"710E220C-7E70-425D-B15C-945C35A65C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"F6DE24FD-5C6B-4B5E-A5F0-AED448F1BA98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2:*:*:*:*:*:*:*","matchCriteriaId":"7CE9B4E3-8044-4305-A517-E695D0831355"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD204F45-15FE-4677-BC4C-A53F322A3B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"22FAFCDF-C615-4958-9C6D-E74EC11E9A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4D623AEB-622E-470E-898C-A447F9C4066A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9019921A-B8D2-4774-AB6B-673FC2FD2197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1DC1A059-DDE4-4442-BD90-20AB3CE0E1CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4801DB4A-F828-4E95-8619-F909D5D39524"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1E0D48CD-C77A-4D86-B091-2B8DF3ADA6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"956C5C97-E7A8-49F2-8AC6-9570A5948395"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"281A3D1A-1F92-454D-AE09-522114FF9D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"717B879A-EDEA-4917-A75E-2C40BB8D35D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F874FD21-1D5D-4F0F-BEE1-93229AA3E8A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"62B10FC3-30EC-46C7-9324-D91127647809"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.13:*:*:*:*:*:*:*","matchCriteriaId":"E2F9B052-F50C-41E0-B4B5-A5A4A5B3CE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"56AB0583-0DE5-4229-9D35-6C3539341C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"FCF64AD5-022B-45AA-BE9E-D4457F7824BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4:*:*:*:*:*:*:*","matchCriteriaId":"D00AE646-61CC-4036-8B8F-35B818530BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9FFFD96D-D0B5-47BB-91D9-3736E343711E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"4D710732-6D93-4143-874F-81B19F70FBEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD56846F-40B5-4A45-99DB-44C56E3A20A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"32C22A06-5F01-4C6A-886F-E3C0776C3C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6457398E-A1C9-4F72-BBF7-FC54118FA91C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"47FF50AB-7156-4828-A6B5-6E7AF5152561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"196B21CA-0EC5-4590-A584-01D667E31FD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"A07C2A67-6D87-4451-BDCE-9570508386E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B1D189FB-9322-4E74-9B9E-26F0B3A235F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"0EED9ABC-56B6-4953-B28A-394E6DF66990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8925480C-C23F-42B6-A525-FC49E6936F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"219D0E4C-222E-407F-BF4D-DD509DEFA22F"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135048/Bugzilla-Cross-Site-Scripting-Information-Leak.html","source":"security@mozilla.org"},{"url":"http://seclists.org/bugtraq/2015/Dec/131","source":"security@mozilla.org"},{"url":"http://www.securityfocus.com/bid/79660","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1034556","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1221518","source":"security@mozilla.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://www.bugzilla.org/security/4.2.15/","source":"security@mozilla.org"},{"url":"http://packetstormsecurity.com/files/135048/Bugzilla-Cross-Site-Scripting-Information-Leak.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2015/Dec/131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1221518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://www.bugzilla.org/security/4.2.15/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-3182","sourceIdentifier":"secalert@redhat.com","published":"2016-01-04T05:59:00.153","lastModified":"2026-06-17T00:25:28.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-dec-dnart.c en el disector DECnet NSP/RT en Wireshark 1.10.12 hasta la versión 1.10.14 no maneja correctamente un cierto valor de retorno strdup, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.12:*:*:*:*:*:*:*","matchCriteriaId":"49569E6A-7927-4767-9DFC-73F574E8499E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.13:*:*:*:*:*:*:*","matchCriteriaId":"9708F223-D7BD-4658-992A-64E675415CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.14:*:*:*:*:*:*:*","matchCriteriaId":"AA288996-E63C-4996-97DE-9BBA95F0BA5A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/74586","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032279","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219409","source":"secalert@redhat.com"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=373deb5f4182a5c4ab8c8418a7bbaa5d6e72bb05","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201510-03","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/74586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=373deb5f4182a5c4ab8c8418a7bbaa5d6e72bb05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201510-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8711","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:01.420","lastModified":"2026-06-17T00:35:04.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-nbap.c en el disector NBAP en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no valida datos de conversación, lo que permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79814","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-31.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11602","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11835","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11841","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=23379ae3624df82c170f48e5bb3250a97ec61c13","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5b4ada17723ed8af7e85cb48d537437ed614e417","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5bf565690ad9f0771196d8fa237aa37fae3bb7cc","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=23379ae3624df82c170f48e5bb3250a97ec61c13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5b4ada17723ed8af7e85cb48d537437ed614e417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5bf565690ad9f0771196d8fa237aa37fae3bb7cc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8712","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:02.513","lastModified":"2026-06-17T00:35:04.973","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_hsdsch_channel_info function in epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_hsdsch_channel_info en epan/dissectors/packet-umts_fp.c en el disector UMTS FP en Wireshark 1.12.x en versiones anteriores a 1.12.9 no valida el número de PDUs, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79816","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-32.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11602","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2ae329a47b7f0ac94089c23e79c6b8bc18ba80ea","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2ae329a47b7f0ac94089c23e79c6b8bc18ba80ea","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8713","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:03.530","lastModified":"2026-06-17T00:35:05.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-umts_fp.c en el disector UMTS FP en Wireshark 1.12.x en versiones anteriores a 1.12.9 no reserva correctamente memoria para mapeos de ID de canal, lo que permite a atacantes remotos provocar una denegación de servicio (acceso a memoria fuera de rango y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79816","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-32.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11606","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=67b6d4f7e6f2117b40957fd51518aa2a3e659002","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=67b6d4f7e6f2117b40957fd51518aa2a3e659002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8714","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:04.497","lastModified":"2026-06-17T00:35:05.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_dcom_OBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_dcom_OBJREF en epan/dissectors/packet-dcom.c en el disector DCOM en Wireshark 1.12.x en versiones anteriores a 1.12.9 does no inicializa una cierta estructura de datos IPv4, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79816","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-33.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11610","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d34267d0503a67235bf259fd2f2f2d2bb8b18cf5","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-33.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d34267d0503a67235bf259fd2f2f2d2bb8b18cf5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8715","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:05.373","lastModified":"2026-06-17T00:35:05.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does not check for empty arguments, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-alljoyn.c en el disector AllJoyn en Wireshark 1.12.x en versiones anteriores a 1.12.9 no comprueba para argumentos vacíos, lo que permite a atacantes remotos provocar una denegación de servicio (búcle infinito) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79816","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-34.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11607","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40caff2d1fb08262c84aaaa8ac584baa8866dd7c","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40caff2d1fb08262c84aaaa8ac584baa8866dd7c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8716","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:06.483","lastModified":"2026-06-17T00:35:05.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The init_t38_info_conv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"La función init_t38_info_conv en epan/dissectors/packet-t38.c en el disector T.38 en Wireshark 1.12.x en versiones anteriores a 1.12.9 no asegura que exista una conversación, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79816","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-35.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9887","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eb6ccb1b0c4ad02b828652c3fe6e8d51c30a315e","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-35.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eb6ccb1b0c4ad02b828652c3fe6e8d51c30a315e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8717","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:07.437","lastModified":"2026-06-17T00:35:05.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_sdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_sdp en epan/dissectors/packet-sdp.c en el disector SDP en Wireshark 1.12.x en versiones anteriores a 1.12.9 no impide utilizar una cuenta negativa de medios, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79816","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-36.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9887","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2ddd92b6f8f587325b9e14598658626f3a007c5c","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2ddd92b6f8f587325b9e14598658626f3a007c5c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8718","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:08.843","lastModified":"2026-06-17T00:35:05.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the \"Match MSG/RES packets for async NLM\" option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"Vulnerabilidad de liberación doble en epan/dissectors/packet-nlm.c en el disector NLM en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anterioers a 2.0.1, cuando la opción \"Match MSG/RES packets for async NLM\" está habilitada, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79814","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-37.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81dfe6d450ada42d12f20ac26a6d8ae2302df37e","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-37.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81dfe6d450ada42d12f20ac26a6d8ae2302df37e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8719","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:09.920","lastModified":"2026-06-17T00:35:05.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_dns_answer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 Client Subnet option, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_dns_answer en epan/dissectors/packet-dns.c en el disector DNS en Wireshark 1.12.x en versiones anteriores a 1.12.9 no maneja correctamente la opción EDNS0 Client Subnet, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79816","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-38.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10988","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=30651ab18b42e666f57ea239e58f3ff3a5e9c4ad","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-38.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=30651ab18b42e666f57ea239e58f3ff3a5e9c4ad","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8720","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:10.813","lastModified":"2026-06-17T00:35:06.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_ber_GeneralizedTime en epan/dissectors/packet-ber.c en el disector BER en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 verifica indebidamente un valor de retorno sscanf, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79814","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-39.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=921bb07115fbffc081ec56a5022b4a9d58db6d39","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-39.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=921bb07115fbffc081ec56a5022b4a9d58db6d39","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8721","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:11.780","lastModified":"2026-06-17T00:35:06.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet with zlib compression."},{"lang":"es","value":"Desbordamiento de buffer en la función tvb_uncompress en epan/tvbuff_zlib.c en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete con compresión zlib manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79814","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-40.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11548","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cec0593ae6c3bca65eff65741c2a10f3de3e0afe","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-40.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cec0593ae6c3bca65eff65741c2a10f3de3e0afe","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8722","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:12.750","lastModified":"2026-06-17T00:35:06.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-sctp.c en el disector SCTP en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no valida el puntero del frame, lo que permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79814","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-41.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11767","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1b32d505a59475d51d9b2bed5f0869d2d154e8b6","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2259bf8a827088081bef101f98e4983de8aa8099","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-41.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1b32d505a59475d51d9b2bed5f0869d2d154e8b6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2259bf8a827088081bef101f98e4983de8aa8099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8723","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:13.877","lastModified":"2026-06-17T00:35:06.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet."},{"lang":"es","value":"La función AirPDcapPacketProcess en epan/crypt/airpdcap.c en el disector 802.11 en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no valida la relación entre la longitud total y la longitud de caputra, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de buffer basado en pila y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-42.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11790","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40b283181c63cb28bc6f58d80315eccca6650da0","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-42.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40b283181c63cb28bc6f58d80315eccca6650da0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8724","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:14.860","lastModified":"2026-06-17T00:35:06.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key length, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet."},{"lang":"es","value":"La función AirPDcapDecryptWPABroadcastKey en epan/crypt/airpdcap.c en el disector 802.11 en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no verifica la longitud de clave de difusión WPA, lo que permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-42.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11826","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83f2818118ae255db949bb3a4b3a26ebd1c5f7c5","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-42.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83f2818118ae255db949bb3a4b3a26ebd1c5f7c5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8725","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:15.843","lastModified":"2026-06-17T00:35:06.790","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_diameter_base_framed_ipv6_prefix en epan/dissectors/packet-diameter.c en el disector DIAMETER en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no valida la longitud del prefijo IPv6, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de buffer basado en pila y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-43.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11792","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=aaa28a9d39158ca1033bbd3372cf423abbf4f202","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-43.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=aaa28a9d39158ca1033bbd3372cf423abbf4f202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8726","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:16.813","lastModified":"2026-06-17T00:35:06.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file."},{"lang":"es","value":"wiretap/vwr.c en el analizador de archivo VeriWave en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no valida ciertos datos de firma y Modulation and Coding Scheme (MCS), lo que permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-44.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=185911de7d337246044c8e99da2f5b4bac74c0d5","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-44.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=185911de7d337246044c8e99da2f5b4bac74c0d5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8727","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:18.080","lastModified":"2026-06-17T00:35:07.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain request-key data, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_rsvp_common en epan/dissectors/packet-rsvp.c en el disector RSVP en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no mantiene adecuadmante los datos de petición de clave, lo que permite a atacantes remotos provocar una denegación de servicio (uso depués de liberación de memoria y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-45.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11793","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=56baca60271379cb97f6a4a6bf72eb526e8b52d0","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-45.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=56baca60271379cb97f6a4a6bf72eb526e8b52d0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8728","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:19.047","lastModified":"2026-06-17T00:35:07.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly uses the tvb_bcd_dig_to_wmem_packet_str function, which allows remote attackers to cause a denial of service (buffer overflow and application crash) via a crafted packet."},{"lang":"es","value":"El analizador Mobile Identity en (1) epan/dissectors/packet-ansi_a.c en el disector ANSI A y (2) epan/dissectors/packet-gsm_a_common.c en el disector GSM A en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 utiliza indebidamente la función tvb_bcd_dig_to_wmem_packet_str, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de buffer y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-46.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11797","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=15edc8d714b11dcff3a04e5d00b8db9adfdb81ed","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-46.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=15edc8d714b11dcff3a04e5d00b8db9adfdb81ed","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8729","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:20.003","lastModified":"2026-06-17T00:35:07.360","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\\0' character at the end of a date string, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file."},{"lang":"es","value":"La función ascend_seek en wiretap/ascendtext.c en el analizador de archivo Ascend en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no asegura la presencia de de un caracter '\\0' al final de una cadena fecha, lo que permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-47.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11794","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=338da1c0ea0b2f8595d3a7b6d6c9548f7da3e27b","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=338da1c0ea0b2f8595d3a7b6d6c9548f7da3e27b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8730","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:21.050","lastModified":"2026-06-17T00:35:07.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-nbap.c en el disector NBAP en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no valida el número de elementos, lo que permite a atacantes remotos causar una denegación de servicio (operación de lectura no válida y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-48.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11815","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d2644aef369af0667220b5bd69996915b29d753d","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-48.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d2644aef369af0667220b5bd69996915b29d753d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8731","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:21.957","lastModified":"2026-06-17T00:35:07.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV types, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet."},{"lang":"es","value":"La función dissct_rsl_ipaccess_msg en epan/dissectors/packet-rsl.c en el disector RSL en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no rechaza tipos TLV desconocidos, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3516","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-49.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11829","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2930d3105c3ff2bfb1278b34ad10e2e71c3b8fb0","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-49.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2930d3105c3ff2bfb1278b34ad10e2e71c3b8fb0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8732","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:22.923","lastModified":"2026-06-17T00:35:07.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile Number field, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_zcl_pwr_prof_pwrprofstatersp en epan/dissectors/packet-zbee-zcl-general.c en el disector ZigBee ZCL en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no valida el campo Total Profile Number, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-50.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11830","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9352616ec9742f2ed3d2802d0c8c100d51ca410b","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eb0c034f6e4cdbf5ae36dd9ba8e2743630b7bd38","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-50.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9352616ec9742f2ed3d2802d0c8c100d51ca410b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eb0c034f6e4cdbf5ae36dd9ba8e2743630b7bd38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8733","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:23.863","lastModified":"2026-06-17T00:35:07.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file."},{"lang":"es","value":"La función ngsniffer_process_record en wiretap/ngsniffer.c en el analizador de archivo Sniffer en Wireshark 1.12.x en versiones anteriores a 1.12.9 y 2.0.x en versiones anteriores a 2.0.1 no valida las relaciones entre la longitud de los registros y la longitud de las cabeceras de los registros, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3505","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79814","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-51.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11827","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=53a3e53fce30523d11ab3df319fba7b75d63076f","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-51.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=53a3e53fce30523d11ab3df319fba7b75d63076f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8734","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:24.783","lastModified":"2026-06-17T00:35:08.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_nwp en epan/dissectors/packet-nwp.c en el disector NWP en Wireshark 2.0.x en versiones anteriores a 2.0.1 no maneja correctamente el tipo de paquete, lo que permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-52.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11726","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9b2c889abe0219fc162659e106c5b95deb6268f3","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-52.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9b2c889abe0219fc162659e106c5b95deb6268f3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8735","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:25.783","lastModified":"2026-06-17T00:35:08.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (invalid write operation and application crash) via a crafted packet."},{"lang":"es","value":"La función get_value en epan/dissectors/packet-btatt.c en el disector Bluetooth Attribute (también conocido como BT ATT) en Wireshark 2.0.x en versiones anteriores a 2.0.1 utiliza un tipo de datos de entero incorrecto, lo que permite a atacantes remotos causar una denegación de servicio (operación de escritura no válida y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-53.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11817","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83bad0215dae54e77d34f8b187900125f672366e","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-53.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83bad0215dae54e77d34f8b187900125f672366e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8736","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:26.817","lastModified":"2026-06-17T00:35:08.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file."},{"lang":"es","value":"La función mp2t_find_next_pcr en wiretap/mp2t.c en el analizador de archivo MP2T en Wireshark 2.0.x en versiones anteriores a 2.0.1 no reserva memoria para un trailer, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento de buffer basado en pila y caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-54.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11820","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=baa3eab78b422616a92ee38551c1b1510dca4ccb","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-54.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=baa3eab78b422616a92ee38551c1b1510dca4ccb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8737","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:28.033","lastModified":"2026-06-17T00:35:08.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file."},{"lang":"es","value":"La función mp2t_open en wiretap/mp2t.c en el analizador de archivo MP2T en Wireshark 2.0.x en versiones anteriores a 2.0.1 no valida la tasa de bits, lo que permite a atacantes remotos causar una denegación de servicio (error de división por cero y caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11821","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e3fc691368af60bbbaec9e038ee6a6d3b7707955","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e3fc691368af60bbbaec9e038ee6a6d3b7707955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8738","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:29.020","lastModified":"2026-06-17T00:35:08.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet."},{"lang":"es","value":"La función s7comm_decode_ud_cpu_szl_subfunc en epan/dissectors/packet-s7comm_szl_ids.c en el disector S7COMM en Wireshark 2.0.x en versiones anteriores a 2.0.1 no valida el recuento de lista en una respuesta SZL, lo que permite a atacantes remotos causar una denegación de servicio (error de división por cero y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-56.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11823","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=858c3f0079f987833fb22eba2c361d1a88ba4103","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-56.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=858c3f0079f987833fb22eba2c361d1a88ba4103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8739","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:29.973","lastModified":"2026-06-17T00:35:08.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet."},{"lang":"es","value":"La función ipmi_fmt_udpport en epan/dissectors/packet-ipmi.c en el disector IPMI en Wireshark 2.0.x en versiones anteriores a 2.0.1 intenta acceder a un ámbito de paquete de manera inadecuada, lo que permite a atacantes remotos causar una denegación de servicio (fallo de aserción y salida de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-57.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11831","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=96bf82ced0b58c7a4c2a6c300efeebe4f05c0ff4","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-57.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=96bf82ced0b58c7a4c2a6c300efeebe4f05c0ff4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8740","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:30.893","lastModified":"2026-06-17T00:35:08.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_tds7_colmetadata_token en epan/dissectors/packet-tds.c en el disector TDS en Wireshark 2.0.x en versiones anteriores a 2.0.1 no valida el número de columnas, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento de buffer basado en pila y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79382","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-58.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11846","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e78093f69f1e95df919bbe644baa06c7e4e720c0","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-58.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e78093f69f1e95df919bbe644baa06c7e4e720c0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8741","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:31.863","lastModified":"2026-06-17T00:35:08.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_ppi en epan/dissectors/packet-ppi.c en el disector PPI en Wireshark 2.0.x en versiones anteriores a 2.0.1 no inicializa una estructura de datos de cabecera de paquete, lo que permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-59.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11876","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2290eba5cb25f927f9142680193ac1158d35506e","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-59.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2290eba5cb25f927f9142680193ac1158d35506e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8742","sourceIdentifier":"cve@mitre.org","published":"2016-01-04T05:59:32.927","lastModified":"2026-06-17T00:35:09.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_CPMSetBindings en epan/dissectors/packet-mswsp.c en el disector MS-WSP en Wireshark 2.0.x en versiones anteriores a 2.0.1 no valida el tamaño de la columna, lo que permite a atacantes remotos causar una denegación de servicio (consumo de memoria o caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034551","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-60.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11931","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d48b0eff28c995947ac3f8d842ddd9b50dd5798d","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-60.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d48b0eff28c995947ac3f8d842ddd9b50dd5798d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-5040","sourceIdentifier":"cve@mitre.org","published":"2016-01-05T02:59:00.113","lastModified":"2026-06-17T00:10:58.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary (1) access key credentials by leveraging knowledge of a key ID or (2) signing certificates by leveraging knowledge of a certificate ID."},{"lang":"es","value":"HP Helion Eucalyptus 4.1.x en versiones anteriores a 4.1.2 y HPE Helion Eucalyptus 4.2.x en versiones anteriores a 4.2.1 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y modificar (1) credenciales de clave de acceso aprovechando el conocimiento de una clave ID o (2) firmando certificados aprovechando el conocimiento de un ID de certificado arbitrario."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","baseScore":4.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eucalyptus:eucalyptus:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A00D8228-59F3-430A-BC8B-95E16591B597"},{"vulnerable":true,"criteria":"cpe:2.3:a:eucalyptus:eucalyptus:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C43CF85C-9F9A-402A-ACF7-3C52A0618F13"}]}]}],"references":[{"url":"https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.eucalyptus.com/resources/security/advisories/esa-32","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.eucalyptus.com/resources/security/advisories/esa-32","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5434","sourceIdentifier":"hp-security-alert@hp.com","published":"2016-01-05T11:59:00.097","lastModified":"2026-06-17T00:29:07.473","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via \"Virtual routing and forwarding (VRF) hopping.\""},{"lang":"es","value":"HPE Networking Products, marcados originalmente como Comware 5, Comware 7, H3C o HP, permiten a atacantes remotos eludir las restricciones destinadas al acceso o provocar una denegación de servicio a través de \"Virtual routing and forwarding (VRF) hopping.\""}],"affected":[{"source":"hp-security-alert@hp.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jg786a_hp_flexfabric_12500_4-port_100gbe_cfp_fd:-:*:*:*:*:*:*:*","matchCriteriaId":"F8029344-CBE9-453D-A36C-9594022CF023"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jg787a_hp_flexfabric_12500_4-port_100gbe_cfp_fd_taa:-:*:*:*:*:*:*:*","matchCriteriaId":"E13BAE93-038A-4E1F-AA32-5C8BEE92FBA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jg788a_hp_flexfabric_12500_4-port_100gbe_cfp_fg:-:*:*:*:*:*:*:*","matchCriteriaId":"05C58EAB-881F-4AF7-9966-ACDC4BF2B8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jg789a_hp_flexfabric_12500_4-port_100gbe_cfp_fg_taa:-:*:*:*:*:*:*:*","matchCriteriaId":"B6427C66-4C95-4516-ADEF-AAA1F22A08BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jg798a_hp_flexfabric_12508e_fabric:-:*:*:*:*:*:*:*","matchCriteriaId":"B112895E-4929-45F1-8F36-B70D447B690C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jg810aae_hp_vsr1001_virtual_services_router_60_day_evaluation:-:*:*:*:*:*:*:*","matchCriteriaId":"37C92DE1-66AE-4301-B6D5-C0D5A4CDF76A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jh192a_hp_10500_48-port_gig-t_\\(rj45\\)_se:-:*:*:*:*:*:*:*","matchCriteriaId":"4515D563-7FAA-4941-AF3A-D20A2E47DA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jh196a_hp_10500_2-port_100gbe_cfp_ec:-:*:*:*:*:*:*:*","matchCriteriaId":"C931D7C0-121B-4C2B-A8E1-BD27D524E16E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc072b_hp_12500_main_processing_unit:-:*:*:*:*:*:*:*","matchCriteriaId":"BA08A75E-8BBD-4CFD-BE31-5BEACB22E9C8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc085a_hp_a12518_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"F428EBEA-CCED-4831-A9B6-2E4DFDA9BAAC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc086a_hp_a12508_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"9BFA4BB4-BFC3-4B74-A056-BE5D4FDF3C75"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc124a_hp_a9508_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"1FB483C2-36ED-4980-86A4-37982714DC7C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc124b_hp_9505_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"D4F46A3A-974F-4D2B-80D9-D6F9B8471F1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc125a_hp_a9512_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"87C6592C-6DC0-4B9F-BABB-6BEA3BBF75B1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc125b_hp_9512_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"C52DC3B4-FBCE-4C3A-979A-12A02B151B3A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc474a_hp_a9508-v_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"E9D66C9E-1007-4606-A9B1-D73012A633D4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc474b_hp_9508-v_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"9D3111AD-8AE7-479F-B3FE-75039297FE17"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc611a_hp_10508-v_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"909AD4CB-B8D4-4540-94FB-E126874D0B29"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc612a_hp_10508_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"4AF104CE-BFE7-4596-9D43-44CAB6CD86B9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc613a_hp_10504_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"32C401CF-5F0A-42D5-B64F-6AEC05F60539"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc652a_hp_12508_dc_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"BA55B492-2F43-4331-8521-7A5870066BDE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc653a_hp_12518_dc_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"B9E4FA85-949D-461E-B3E1-66B769F16A34"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc654a_hp_12504_ac_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"6D4B60A9-4CBD-4F35-AD09-7857FF08B444"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc655a_hp_12504_dc_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"F1C85E1F-68A2-482E-8ECD-C2E9351D8F35"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc748a_hp_10512_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"6A88116C-9FFB-4C01-99F1-C43F59F8E31C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jc808a_hp_12500_taa_main_processing_unit:-:*:*:*:*:*:*:*","matchCriteriaId":"13B7D4CB-2E47-4081-97E0-BC48CC5416C1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jf430a_hp_a12518_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"B5152585-519F-46A0-8A37-339B97637BD7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jf430b_hp_12518_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"C687AAF0-8B65-45F7-B9B0-4796DB7003EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jf430c_hp_12518_ac_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"E281C457-D768-4EAC-8068-2597E5FD046C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jf431a_hp_a12508_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"8D2E8B50-D4F4-49B0-B98E-03634A3F8F49"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jf431b_hp_12508_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"25878F0B-FFB5-41D9-B411-B13C68294B99"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jf431c_hp_12508_ac_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"ED6E1B19-DF0B-4274-8D9B-EE72E9429E61"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg296a_hp_5920af-24xg_switch:-:*:*:*:*:*:*:*","matchCriteriaId":"D8491974-092E-4BA0-A7EA-3233B497CE7B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg353a_hp_hsr6602-g_router:-:*:*:*:*:*:*:*","matchCriteriaId":"B471E31D-979A-4C01-89A0-0F40F85B0C0C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg354a_hp_hsr6602-xg_router:-:*:*:*:*:*:*:*","matchCriteriaId":"DA07786E-DC6A-4CDC-97B5-A39269AD219B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg361a_hp_hsr6802_router_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"82F07E4A-723F-4A1B-8DA1-2EE41A148166"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg361b_hp_hsr6802_router_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"AF051371-8E16-429D-9388-5B55B8813EB8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg362a_hp_hsr6804_router_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"169C3DDD-FC34-4C7C-B634-B0FEDDF55BC6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg362b_hp_hsr6804_router_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"F7DD4EA5-9E85-4EBC-858E-972A1C6DB681"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg363a_hp_hsr6808_router_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"D1B82000-E1AB-482E-B293-F958D97B0287"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg363b_hp_hsr6808_router_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"90DC9D16-C936-4731-B280-B58D1FEE581A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg364a_hp_hsr6800_rse-x2_router_main_processing_unit:-:*:*:*:*:*:*:*","matchCriteriaId":"9A893789-7EF7-46D9-9ACD-E570835EF226"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg402a_hp_msr4080_router_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"91702C4C-381C-483F-BAC4-908C2657B3F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg403a_hp_msr4060_router_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"C15E6B9D-A9F8-44C3-A678-43B2AB7843A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg404a_hp_msr3064_router:-:*:*:*:*:*:*:*","matchCriteriaId":"E3ACB7DA-A4E8-4208-9233-11371EF442D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg405a_hp_msr3044_router:-:*:*:*:*:*:*:*","matchCriteriaId":"66F57234-408E-47FF-9D2B-9B64BC24EDB2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg406a_hp_msr3024_ac_router:-:*:*:*:*:*:*:*","matchCriteriaId":"7AF2563D-DC99-479A-935F-61F843B0E90F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg407a_hp_msr3024_dc_router:-:*:*:*:*:*:*:*","matchCriteriaId":"D80BA740-ECFE-4704-9F33-7C830F0AD018"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg408a_hp_msr3024_poe_router:-:*:*:*:*:*:*:*","matchCriteriaId":"F0A09E89-EEC0-4DC0-8A91-3B948BEDB3AE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg409a_hp_msr3012_ac_router:-:*:*:*:*:*:*:*","matchCriteriaId":"C62614D9-2419-4592-A17F-C9749D57933D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg410a_hp_msr3012_dc_router:-:*:*:*:*:*:*:*","matchCriteriaId":"B93479EF-2C34-40BC-A6F6-8F9E08ABA59A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg411a_hp_msr2003_ac_router:-:*:*:*:*:*:*:*","matchCriteriaId":"D15E2A80-4C8A-4711-B35C-81C912896846"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg412a_hp_msr4000_mpu-100_main_processing_unit:-:*:*:*:*:*:*:*","matchCriteriaId":"9274EF52-15B6-42D5-831C-5DC22D97C272"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg555a_hp_5920af-24xg_taa_switch:-:*:*:*:*:*:*:*","matchCriteriaId":"06D004C5-3D0B-4EF4-B662-ABA2A86FFECC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg734a_hp_msr2004-24_ac_router:-:*:*:*:*:*:*:*","matchCriteriaId":"5CF7F7C1-F220-4ABA-A8E1-0D56CB004346"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg735a\\)_hp_msr2004-48_router:-:*:*:*:*:*:*:*","matchCriteriaId":"E95F610E-992A-4C33-A7B9-0A7383F551D0"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg776a_hp_hsr6602-g_taa-compliant_router:-:*:*:*:*:*:*:*","matchCriteriaId":"4DB0144C-FB35-41E5-8C77-AD98818CE6FA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg777a_hp_hsr6602-xg_taa-compliant_router:-:*:*:*:*:*:*:*","matchCriteriaId":"97BF4524-45E6-473F-95A1-A49742B2013F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg779a_hp_hsr6800_rse-x2_router_taa-compliant_main_processing_unit:-:*:*:*:*:*:*:*","matchCriteriaId":"49C864B5-AC90-4E9A-B4BB-C46BFC3681B5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg782a_hp_ff_12508e_ac_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"796AA9F1-4723-4498-A44C-EC619DA293C9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg783a_hp_ff_12508e_dc_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"20F107E1-1F22-4BE3-89D3-C4CC18BFE4CF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg784a_hp_ff_12518e_ac_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"37E616D0-0976-45D2-838F-7F95537566F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg785a_hp_ff_12518e_dc_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"F8ECEF7A-EBC8-4608-BEC2-2E92217FCCE6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg802a_hp_ff_12500e_mpu:-:*:*:*:*:*:*:*","matchCriteriaId":"9BF87011-9AE9-4773-98B8-3E1F3BEC9A6B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg803a_hp_flexfabric_12500e_taa-compliant_main_processing_unit:-:*:*:*:*:*:*:*","matchCriteriaId":"4378114E-BE63-4324-B5A5-EF0DBC564E23"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg811aae_hp_vsr1001_comware_7_virtual_services_router:-:*:*:*:*:*:*:*","matchCriteriaId":"CC6F3044-CB6E-4A15-9712-2DDA467C9BC0"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg812aae_hp_vsr1004_comware_7_virtual_services_router:-:*:*:*:*:*:*:*","matchCriteriaId":"7717EE03-8B9C-4BF0-97FE-E2F3A06D97DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg813aae_hp_vsr1008_comware_7_virtual_services_router:-:*:*:*:*:*:*:*","matchCriteriaId":"B7895746-23F5-44AD-95E9-1FEB39A3AF94"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg820a_hp_10504_taa_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"D40501D7-38A3-4E24-B0A9-3582338A9910"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg821a_hp_10508_taa_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"72141441-3776-40D5-BAAD-28FFA446597A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg822a_hp_10508-v_taa_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"99800C51-E94E-478D-9A92-CAA8AEB66533"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg823a_hp_10512_taa_switch_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"0350F5D5-9A06-4E04-AAAC-DA68A0741628"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg834a_hp_flexfabric_12508e_ac_switch_taa-compliant_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"C5580505-DE9E-4153-A9AE-5331130E7290"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg835a_hp_flexfabric_12508e_dc_switch_taa-compliant_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"9F437CA0-3422-4E3B-B52E-9132BC5A62ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg836a_hp_flexfabric_12518e_ac_switch_taa-compliant_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"D9EC287E-271A-456D-9011-E850DFF560B3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg837a_hp_flexfabric_12518e_dc_switch_taa-compliant_chassis:-:*:*:*:*:*:*:*","matchCriteriaId":"FDA49730-3381-404A-98A9-DADF1E264465"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg861a_hp_msr3024_taa-compliant_ac_router:-:*:*:*:*:*:*:*","matchCriteriaId":"09E6EADF-02F5-4B75-819C-5118ED31D350"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg866a_hp_msr2003_taa-compliant_ac_router:-:*:*:*:*:*:*:*","matchCriteriaId":"3F804217-A157-4B30-826D-4BD0964ECD2F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg869a_hp_msr4000_taa-compliant_mpu-100_main_processing_unit:-:*:*:*:*:*:*:*","matchCriteriaId":"B41A1FFA-595C-4C36-AA6E-F4738AFC429E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jg875a_hp_msr1002-4_ac_router:-:*:*:*:*:*:*:*","matchCriteriaId":"9F664253-1037-4653-86C4-B412F395EECD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jh060a_hp_msr1003-8s_ac_router:-:*:*:*:*:*:*:*","matchCriteriaId":"74FA5662-09DD-4202-9EFB-DD2C7DF04C97"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jh075a\\)_hp_hsr6800_rse-x3_router_main_processing_unit:-:*:*:*:*:*:*:*","matchCriteriaId":"04DD673A-B58C-4F7F-8DA4-635E7D2153C5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jh179a_hp_flexfabric_5930_4-slot_switch:-:*:*:*:*:*:*:*","matchCriteriaId":"4A77B341-D052-42CF-AFA6-99CF441132CF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jh188a_hp_flexfabric_5930_4-slot_taa-compliant_switch:-:*:*:*:*:*:*:*","matchCriteriaId":"1902BB32-A641-422B-B636-1B97653D712C"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:jg496a_hp_10500_type_a_mpu_with_comware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"BE57887D-E3C0-42C1-AAF6-E6835F888D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:jg497a_hp_12500_mpu_w\\/comware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"56E53E2C-C729-40A3-A6B0-58AF60213C43"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:jh198a_hp_10500_type_d_main_processing_unit_with_comware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2827AB5-1C77-4E24-A4F3-73DB1A0F7537"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79869","source":"hp-security-alert@hp.com"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04779492","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04779492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5447","sourceIdentifier":"hp-security-alert@hp.com","published":"2016-01-05T11:59:03.410","lastModified":"2026-06-17T00:29:08.553","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en software de sistema HP StoreOnce Backup en versiones anteriores a 3.13.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"hp-security-alert@hp.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:storeonce_backup_system_software:*:*:*:*:*:*:*:*","versionEndIncluding":"3.13.0","matchCriteriaId":"510D652A-335B-49DF-A1AE-D8F4EA02C93F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79392","source":"hp-security-alert@hp.com"},{"url":"http://www.securitytracker.com/id/1034605","source":"hp-security-alert@hp.com"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04858589","source":"hp-security-alert@hp.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04858589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5310","sourceIdentifier":"secalert@redhat.com","published":"2016-01-06T19:59:00.110","lastModified":"2026-06-17T00:28:54.293","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service (ignored packets) via a WNM Sleep Mode response."},{"lang":"es","value":"El código de WNM Sleep Mode en wpa_supplicant, en versiones 2.x anteriores a la 2.6, no ignora correctamente los datos clave en tramas de respuesta cuando no se negocia el MFP (management frame protection). Esto permite que atacantes remotos inyecten paquetes broadcast o multicast arbitrarios o que provoquen una denegación de servicio (paquetes ignorados) mediante una respuesta WNM Sleep Mode."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E3CEEA22-63B4-4702-A400-01349DF0EC1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-01-01.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://w1.fi/security/2015-6/wpa_supplicant-unauthorized-wnm-sleep-mode-gtk-control.txt","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3397","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/11/10/9","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/77541","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034592","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2808-1","source":"secalert@redhat.com"},{"url":"http://source.android.com/security/bulletin/2016-01-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://w1.fi/security/2015-6/wpa_supplicant-unauthorized-wnm-sleep-mode-gtk-control.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/11/10/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/77541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2808-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-6643","sourceIdentifier":"security@android.com","published":"2016-01-06T19:59:08.550","lastModified":"2026-06-17T00:31:10.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass a reset protection mechanism via unspecified vectors, aka internal bug 25290269."},{"lang":"es","value":"Setup Wizard en Android 5.x en versiones anteriores a 5.1.1 LMY49F y 6.0 en versiones anteriores a 2016-01-01 permite a atacantes físicamente próximos modificar ajustes o eludir un mecanismo de protección de reseteo a través de vectores no especificados, también conocida como error interno 25290269."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-01-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034592","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-01-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-6645","sourceIdentifier":"security@android.com","published":"2016-01-06T19:59:10.443","lastModified":"2026-06-17T00:31:11.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SyncManager in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to cause a denial of service (continuous rebooting) via a crafted application, aka internal bug 23591205."},{"lang":"es","value":"SyncManager en Android en versiones anteriores a 5.1.1 LMY49F y 6.0 en versiones anteriores a 2016-01-01 permite a atacantes causar una denegación de servicio (reinicio continuo) a través de una aplicación manipulada, también conocida como error interno 23591205."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E3CEEA22-63B4-4702-A400-01349DF0EC1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9915371-C730-41F7-B86E-7E4DE0DF5385"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-01-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034592","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-01-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-6646","sourceIdentifier":"security@android.com","published":"2016-01-06T19:59:11.833","lastModified":"2026-06-17T00:31:11.207","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers to cause a denial of service (global kernel resource consumption) by leveraging improper interaction between IPC resource allocation and the memory manager, aka internal bug 22300191, a different vulnerability than CVE-2015-7613."},{"lang":"es","value":"La implementación de System V IPC en el kernel en Android en versiones anteriores a 6.0 2016-01-01 permite a atacantes causar una denegación de servicio (consumo de recursos de kernel global) aprovechando la interacción incorrecta entre la asignación de recursos IPC y el gestor de memoria, también conocida como error interno 22300191, una vulnerabilidad diferente a CVE-2015-7613."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-01-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034592","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-01-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-6433","sourceIdentifier":"psirt@cisco.com","published":"2016-01-08T02:59:00.107","lastModified":"2026-06-17T00:30:53.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Cisco Unified Communications Manager 11.0(0.98000.225) permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de una URL manipulada, también conocida como Bug ID CSCut66767."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:11.0\\(0.98000.225\\):*:*:*:*:*:*:*","matchCriteriaId":"DCF56F1D-43C0-4921-A217-3F2A8E5758D4"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160105-cucm","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034583","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160105-cucm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-6434","sourceIdentifier":"psirt@cisco.com","published":"2016-01-08T02:59:01.357","lastModified":"2026-06-17T00:30:53.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a \"cross-frame scripting (XFS)\" issue, aka Bug ID CSCux64856."},{"lang":"es","value":"Cisco Prime Infrastructure no restringe correctamente el uso de elementos IFRAME, lo que hace más fácil para atacantes remotos llevar a cabo ataques de secuestro de clic y otros ataques no especificados a través de un sitio web manipulado, relacionado con un caso \"cross-frame scripting (XFS)\", también conocido como Bug ID CSCux64856."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_infrastructure:2.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"7830BF63-55ED-4D8B-B380-1E78E338EA2D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160105-pi","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034582","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160105-pi","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7328","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:03.723","lastModified":"2026-06-17T00:32:16.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during the initial installation and configuration, which might allow local users to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Puppet Server en Puppet Enterprise en versiones anteriores a 3.8.x en versiones anteriores a 3.8.3 y 2015.2.x en versiones anteriores a 2015.2.3 utiliza permisos world-readable para la clave privada del certificado de la Autoridad de Certificación (CA) durante la instalación inicial y configuración, lo que podría permitir a usuarios locales obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_enterprise:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C0115B62-078B-43C7-AD21-45C12B8298FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_enterprise:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"627BABD8-83A4-4913-A36A-8918ADBF3D68"},{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_enterprise:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"E616AF3E-FC04-4E45-A953-951072ECF71A"},{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_enterprise:2015.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D314EA4C-0CF5-49DD-AE91-A69D07BBE3FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_enterprise:2015.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8B73DBBF-D30F-49FB-8564-7DB6E4EAC945"},{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_enterprise:2015.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F8032AD3-4956-4432-B0E0-1CCAD521C370"}]}]}],"references":[{"url":"https://puppetlabs.com/security/cve/cve-2015-7328","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://puppetlabs.com/security/cve/cve-2015-7328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8225","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:10.130","lastModified":"2026-06-17T00:34:10.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service (crash) via a crafted application with the system or camera permission, a different vulnerability than CVE-2015-8226."},{"lang":"es","value":"El controlador Joint Photographic Experts Group Processing Unit (JPU) en smartphones Huawei ALE con software en verisones anteriores a ALE-UL00C00B220 y ALE-TL00C01B220 y smartphones GEM-703L con software en versiones anteriores a V100R001C233B111 permite a atacantes remotos causar una denegación de servicio (caída) a través de una aplicación manipulada con los permisos de system o camera, una vulnerabilidad diferente a CVE-2015-8226."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ale_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"DE90CE88-891F-494E-8F87-4FB63D1E1BC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:gem-703l_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FD6A40B9-49F7-40CB-A6D2-4A2BEB4BD95B"}]}]}],"references":[{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-465532.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-465532.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8226","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:11.163","lastModified":"2026-06-17T00:34:10.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service (crash) via a crafted application with the system or camera permission, a different vulnerability than CVE-2015-8225."},{"lang":"es","value":"El controlador Joint Photographic Experts Group Processing Unit (JPU) en smartphones Huawei ALE con software en versiones anteriores a ALE-UL00C00B220 y ALE-TL00C01B220 y smartphones GEM-703L con software en versiones anteriores a V100R001C233B111 permite a atacantes remotos provocar una denegación de servicio (caída) a través de una aplicación manipulada con el permiso de system o camera, una vulnerabilidad diferente a CVE-2015-8225."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ale_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"DE90CE88-891F-494E-8F87-4FB63D1E1BC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:gem-703l_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FD6A40B9-49F7-40CB-A6D2-4A2BEB4BD95B"}]}]}],"references":[{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-465532.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-465532.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8303","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:12.210","lastModified":"2026-06-17T00:34:16.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei Document Security Management (DSM) with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain sensitive information by pasting the contents to another file."},{"lang":"es","value":"Huawei Document Security Management (DSM) con software en versiones anteriores a V100R002C05SPC661 no limpia el portapapeles al cerrar un archivo seguro, lo que permite a usuarios locales obtener información sensible pegando los contenidos a otro archivo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:document_security_management:v100r002c03spc005:*:*:*:*:*:*:*","matchCriteriaId":"819B4213-8414-419D-8D34-8527EBB58D5A"}]}]}],"references":[{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462410.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462410.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8615","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:17.350","lastModified":"2026-06-17T00:34:51.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ)."},{"lang":"es","value":"La función hvm_set_callback_via en arch/x86/hvm/irq.c en Xen 4.6 no limita el número de mensajes de la consola de printk cuando inicia sesión el nuevo método de llamada de retorno, lo que permite a usuarios del SO invitados de HVM locales provocar una denegación de servicio a través de un gran número de cambios en el método de llamada de retorno (HVM_PARAM_CALLBACK_IRQ)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.1,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B6F7CE9-C409-4D88-9A99-B21420633F45"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79644","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034512","source":"cve@mitre.org"},{"url":"http://xenbits.xen.org/xsa/advisory-169.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xen.org/xsa/advisory-169.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8755","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:21.397","lastModified":"2026-06-17T00:35:10.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en componentes del backend no especificados en TYPO3 6.2.x en versiones anteriores a 6.2.16 y 7.x en versiones anteriores a 7.6.1 permiten a editores remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"612D54CF-9089-45EB-897B-487DCF6C84AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"29602159-5C1E-4C5A-9E4C-F3183D3EA8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"52CC6148-48F9-4532-96D3-8C6D82B8B815"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"E501EDED-B7DC-4D00-9DAF-862BC8C14C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7183456A-52B4-4386-8979-A2ECEA9959FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"16EEC79F-3293-451C-864E-9CE020F6C730"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"8FD27EAD-04D5-4C55-952E-020954B90CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F67C62FD-A683-43F3-BF0E-D368617B194C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"8CCC09EC-CB2C-466A-BD71-4DD2C34288B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*","matchCriteriaId":"82F45E35-4731-4527-861F-3999ABED94B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*","matchCriteriaId":"FC154041-5B1B-484C-8EF8-9EBC73A9FF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"36E925BE-8D4F-49FE-90EF-68C1DE776107"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DA0AF154-CC16-4536-B120-A9040CE92394"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"99262E73-E4A7-4657-A32E-3C289C052675"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E230A800-B2DE-4ED4-9C6B-961832C39900"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1A96891D-A2B1-492C-A914-51F9631D5C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3D7316A8-E445-45C6-BFD9-8E19254AC7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D95C12B4-51F1-4FFC-892B-1432D1E5219A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"308EF598-B9DF-47C5-A1AC-1A2A16767E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1A3A5E5D-E8A9-4B2F-B423-9F1B9E761A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9EDF6E-299A-4277-9C2F-B25D5F9A189E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*","matchCriteriaId":"313D0192-8849-4DA1-820E-28E2FC4E37C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*","matchCriteriaId":"265DCFF8-2EC5-49EA-8D06-1956F3109F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*","matchCriteriaId":"2D8FB68B-E4E8-4501-94F6-2922781D8C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*","matchCriteriaId":"6F1FEAA4-B0D8-4B5B-8958-173245F55134"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0E806A38-C603-4916-93E2-FE43062B09C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*","matchCriteriaId":"17EB5B78-0AD1-4259-8537-058D888B30B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*","matchCriteriaId":"06C7E6FD-99D0-4F48-B5DF-0EFD4C05079D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*","matchCriteriaId":"21217A49-637C-4F60-B8F8-8699E71D6BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC254112-3695-422E-BD5B-B5E65F61B4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"58A72CC1-1BCE-415C-9816-AD34C14E36FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"237EEDFE-DFB0-4D6E-BAA6-7A374A384CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"26264C04-D8E1-4780-97C3-13F287ECF11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B89766D-2E3C-4CE9-92ED-8E5A8FF71D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3392C868-FFD8-4B00-ADD2-02CCCAEC5EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B5F859F4-E3EE-4C2D-A618-6E49769A1610"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1A7F660D-7C1E-43AA-B185-40309788F329"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4C022973-D06B-4CEF-87BF-3C016AAD4770"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"36A63F3A-DC95-49FF-B6AC-FD98F8499905"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79236","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034483","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8756","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:22.350","lastModified":"2026-06-17T00:35:10.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenticated editors to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la vista del resultado de búsqueda en el componente Indexed Search (indexed_search) en TYPO3 6.2.x en versiones anteriores a 6.2.16 permite a editores remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C7715060-1441-4CF9-BEDF-91D28FE31ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"29602159-5C1E-4C5A-9E4C-F3183D3EA8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"52CC6148-48F9-4532-96D3-8C6D82B8B815"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"E501EDED-B7DC-4D00-9DAF-862BC8C14C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7183456A-52B4-4386-8979-A2ECEA9959FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"16EEC79F-3293-451C-864E-9CE020F6C730"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"8FD27EAD-04D5-4C55-952E-020954B90CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F67C62FD-A683-43F3-BF0E-D368617B194C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"8CCC09EC-CB2C-466A-BD71-4DD2C34288B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*","matchCriteriaId":"82F45E35-4731-4527-861F-3999ABED94B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*","matchCriteriaId":"FC154041-5B1B-484C-8EF8-9EBC73A9FF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"36E925BE-8D4F-49FE-90EF-68C1DE776107"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DA0AF154-CC16-4536-B120-A9040CE92394"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"99262E73-E4A7-4657-A32E-3C289C052675"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E230A800-B2DE-4ED4-9C6B-961832C39900"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1A96891D-A2B1-492C-A914-51F9631D5C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3D7316A8-E445-45C6-BFD9-8E19254AC7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D95C12B4-51F1-4FFC-892B-1432D1E5219A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"308EF598-B9DF-47C5-A1AC-1A2A16767E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1A3A5E5D-E8A9-4B2F-B423-9F1B9E761A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9EDF6E-299A-4277-9C2F-B25D5F9A189E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*","matchCriteriaId":"313D0192-8849-4DA1-820E-28E2FC4E37C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*","matchCriteriaId":"265DCFF8-2EC5-49EA-8D06-1956F3109F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*","matchCriteriaId":"2D8FB68B-E4E8-4501-94F6-2922781D8C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*","matchCriteriaId":"6F1FEAA4-B0D8-4B5B-8958-173245F55134"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0E806A38-C603-4916-93E2-FE43062B09C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*","matchCriteriaId":"17EB5B78-0AD1-4259-8537-058D888B30B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*","matchCriteriaId":"06C7E6FD-99D0-4F48-B5DF-0EFD4C05079D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*","matchCriteriaId":"21217A49-637C-4F60-B8F8-8699E71D6BFC"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-015/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034486","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-015/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8757","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:23.493","lastModified":"2026-06-17T00:35:10.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation."},{"lang":"es","value":"Vulnerabilidad de XSS en el Extension Manager en TYPO3 6.2.x en versiones anteriores a 6.2.16 y 7.x en versiones anteriores a 7.6.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados relacionados con datos de extensión durante una intalación de extensión."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"29602159-5C1E-4C5A-9E4C-F3183D3EA8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"52CC6148-48F9-4532-96D3-8C6D82B8B815"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"E501EDED-B7DC-4D00-9DAF-862BC8C14C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7183456A-52B4-4386-8979-A2ECEA9959FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"16EEC79F-3293-451C-864E-9CE020F6C730"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"8FD27EAD-04D5-4C55-952E-020954B90CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F67C62FD-A683-43F3-BF0E-D368617B194C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"8CCC09EC-CB2C-466A-BD71-4DD2C34288B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*","matchCriteriaId":"82F45E35-4731-4527-861F-3999ABED94B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*","matchCriteriaId":"FC154041-5B1B-484C-8EF8-9EBC73A9FF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"36E925BE-8D4F-49FE-90EF-68C1DE776107"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DA0AF154-CC16-4536-B120-A9040CE92394"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"99262E73-E4A7-4657-A32E-3C289C052675"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E230A800-B2DE-4ED4-9C6B-961832C39900"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1A96891D-A2B1-492C-A914-51F9631D5C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3D7316A8-E445-45C6-BFD9-8E19254AC7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D95C12B4-51F1-4FFC-892B-1432D1E5219A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"308EF598-B9DF-47C5-A1AC-1A2A16767E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1A3A5E5D-E8A9-4B2F-B423-9F1B9E761A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9EDF6E-299A-4277-9C2F-B25D5F9A189E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*","matchCriteriaId":"313D0192-8849-4DA1-820E-28E2FC4E37C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*","matchCriteriaId":"265DCFF8-2EC5-49EA-8D06-1956F3109F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*","matchCriteriaId":"2D8FB68B-E4E8-4501-94F6-2922781D8C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*","matchCriteriaId":"6F1FEAA4-B0D8-4B5B-8958-173245F55134"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0E806A38-C603-4916-93E2-FE43062B09C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*","matchCriteriaId":"17EB5B78-0AD1-4259-8537-058D888B30B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*","matchCriteriaId":"06C7E6FD-99D0-4F48-B5DF-0EFD4C05079D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*","matchCriteriaId":"21217A49-637C-4F60-B8F8-8699E71D6BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC254112-3695-422E-BD5B-B5E65F61B4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6CC7DF87-E8E8-4333-8549-5607328399BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"58A72CC1-1BCE-415C-9816-AD34C14E36FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"237EEDFE-DFB0-4D6E-BAA6-7A374A384CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"26264C04-D8E1-4780-97C3-13F287ECF11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B89766D-2E3C-4CE9-92ED-8E5A8FF71D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3392C868-FFD8-4B00-ADD2-02CCCAEC5EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B5F859F4-E3EE-4C2D-A618-6E49769A1610"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1A7F660D-7C1E-43AA-B185-40309788F329"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4C022973-D06B-4CEF-87BF-3C016AAD4770"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"36A63F3A-DC95-49FF-B6AC-FD98F8499905"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-010/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79254","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034482","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8758","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:24.477","lastModified":"2026-06-17T00:35:11.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en componentes anticipados no especificados en TYPO3 6.2.x en versiones anteriores a 6.2.16 y 7.x en versiones anteriores a 7.6.1 permiten a editores remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"29602159-5C1E-4C5A-9E4C-F3183D3EA8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"52CC6148-48F9-4532-96D3-8C6D82B8B815"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"E501EDED-B7DC-4D00-9DAF-862BC8C14C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7183456A-52B4-4386-8979-A2ECEA9959FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"16EEC79F-3293-451C-864E-9CE020F6C730"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"8FD27EAD-04D5-4C55-952E-020954B90CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F67C62FD-A683-43F3-BF0E-D368617B194C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"8CCC09EC-CB2C-466A-BD71-4DD2C34288B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*","matchCriteriaId":"82F45E35-4731-4527-861F-3999ABED94B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*","matchCriteriaId":"FC154041-5B1B-484C-8EF8-9EBC73A9FF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"36E925BE-8D4F-49FE-90EF-68C1DE776107"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DA0AF154-CC16-4536-B120-A9040CE92394"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"99262E73-E4A7-4657-A32E-3C289C052675"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E230A800-B2DE-4ED4-9C6B-961832C39900"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1A96891D-A2B1-492C-A914-51F9631D5C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3D7316A8-E445-45C6-BFD9-8E19254AC7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D95C12B4-51F1-4FFC-892B-1432D1E5219A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"308EF598-B9DF-47C5-A1AC-1A2A16767E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1A3A5E5D-E8A9-4B2F-B423-9F1B9E761A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9EDF6E-299A-4277-9C2F-B25D5F9A189E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*","matchCriteriaId":"313D0192-8849-4DA1-820E-28E2FC4E37C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*","matchCriteriaId":"265DCFF8-2EC5-49EA-8D06-1956F3109F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*","matchCriteriaId":"2D8FB68B-E4E8-4501-94F6-2922781D8C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*","matchCriteriaId":"6F1FEAA4-B0D8-4B5B-8958-173245F55134"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0E806A38-C603-4916-93E2-FE43062B09C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*","matchCriteriaId":"17EB5B78-0AD1-4259-8537-058D888B30B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*","matchCriteriaId":"06C7E6FD-99D0-4F48-B5DF-0EFD4C05079D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*","matchCriteriaId":"21217A49-637C-4F60-B8F8-8699E71D6BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC254112-3695-422E-BD5B-B5E65F61B4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6CC7DF87-E8E8-4333-8549-5607328399BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"58A72CC1-1BCE-415C-9816-AD34C14E36FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"237EEDFE-DFB0-4D6E-BAA6-7A374A384CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"26264C04-D8E1-4780-97C3-13F287ECF11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B89766D-2E3C-4CE9-92ED-8E5A8FF71D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3392C868-FFD8-4B00-ADD2-02CCCAEC5EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B5F859F4-E3EE-4C2D-A618-6E49769A1610"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1A7F660D-7C1E-43AA-B185-40309788F329"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4C022973-D06B-4CEF-87BF-3C016AAD4770"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"36A63F3A-DC95-49FF-B6AC-FD98F8499905"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034484","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8759","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:25.413","lastModified":"2026-06-17T00:35:11.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field."},{"lang":"es","value":"Vulnerabilidad de XSS en la función typoLink en TYPO3 6.2.x en versiones anteriores a 6.2.16 y 7.x en versiones anteriores a 7.6.1 permiten a editores remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un campo link."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C7715060-1441-4CF9-BEDF-91D28FE31ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"29602159-5C1E-4C5A-9E4C-F3183D3EA8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"52CC6148-48F9-4532-96D3-8C6D82B8B815"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"E501EDED-B7DC-4D00-9DAF-862BC8C14C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7183456A-52B4-4386-8979-A2ECEA9959FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"16EEC79F-3293-451C-864E-9CE020F6C730"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"8FD27EAD-04D5-4C55-952E-020954B90CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F67C62FD-A683-43F3-BF0E-D368617B194C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"8CCC09EC-CB2C-466A-BD71-4DD2C34288B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*","matchCriteriaId":"82F45E35-4731-4527-861F-3999ABED94B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*","matchCriteriaId":"FC154041-5B1B-484C-8EF8-9EBC73A9FF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"36E925BE-8D4F-49FE-90EF-68C1DE776107"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DA0AF154-CC16-4536-B120-A9040CE92394"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"99262E73-E4A7-4657-A32E-3C289C052675"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E230A800-B2DE-4ED4-9C6B-961832C39900"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1A96891D-A2B1-492C-A914-51F9631D5C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3D7316A8-E445-45C6-BFD9-8E19254AC7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D95C12B4-51F1-4FFC-892B-1432D1E5219A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"308EF598-B9DF-47C5-A1AC-1A2A16767E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1A3A5E5D-E8A9-4B2F-B423-9F1B9E761A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9EDF6E-299A-4277-9C2F-B25D5F9A189E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*","matchCriteriaId":"313D0192-8849-4DA1-820E-28E2FC4E37C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*","matchCriteriaId":"265DCFF8-2EC5-49EA-8D06-1956F3109F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*","matchCriteriaId":"2D8FB68B-E4E8-4501-94F6-2922781D8C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*","matchCriteriaId":"6F1FEAA4-B0D8-4B5B-8958-173245F55134"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0E806A38-C603-4916-93E2-FE43062B09C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*","matchCriteriaId":"17EB5B78-0AD1-4259-8537-058D888B30B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*","matchCriteriaId":"06C7E6FD-99D0-4F48-B5DF-0EFD4C05079D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*","matchCriteriaId":"21217A49-637C-4F60-B8F8-8699E71D6BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC254112-3695-422E-BD5B-B5E65F61B4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"58A72CC1-1BCE-415C-9816-AD34C14E36FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"237EEDFE-DFB0-4D6E-BAA6-7A374A384CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"26264C04-D8E1-4780-97C3-13F287ECF11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B89766D-2E3C-4CE9-92ED-8E5A8FF71D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3392C868-FFD8-4B00-ADD2-02CCCAEC5EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B5F859F4-E3EE-4C2D-A618-6E49769A1610"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1A7F660D-7C1E-43AA-B185-40309788F329"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4C022973-D06B-4CEF-87BF-3C016AAD4770"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"36A63F3A-DC95-49FF-B6AC-FD98F8499905"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79250","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8760","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T19:59:26.397","lastModified":"2026-06-17T00:35:11.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka \"Cross-Site Flashing.\""},{"lang":"es","value":"El componente Flvplayer en TYPO3 6.2.x en versiones anteriores a 6.2.16 permite a atacantes remotos incrustar videos de Flash procedentes de dominios externos a través de vectores no especificados, también conocido como \"Cross-Site Flashing.\""}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*","matchCriteriaId":"C7715060-1441-4CF9-BEDF-91D28FE31ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"29602159-5C1E-4C5A-9E4C-F3183D3EA8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"52CC6148-48F9-4532-96D3-8C6D82B8B815"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"E501EDED-B7DC-4D00-9DAF-862BC8C14C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7183456A-52B4-4386-8979-A2ECEA9959FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"16EEC79F-3293-451C-864E-9CE020F6C730"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"8FD27EAD-04D5-4C55-952E-020954B90CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F67C62FD-A683-43F3-BF0E-D368617B194C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"8CCC09EC-CB2C-466A-BD71-4DD2C34288B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*","matchCriteriaId":"82F45E35-4731-4527-861F-3999ABED94B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*","matchCriteriaId":"FC154041-5B1B-484C-8EF8-9EBC73A9FF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"36E925BE-8D4F-49FE-90EF-68C1DE776107"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DA0AF154-CC16-4536-B120-A9040CE92394"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"99262E73-E4A7-4657-A32E-3C289C052675"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E230A800-B2DE-4ED4-9C6B-961832C39900"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1A96891D-A2B1-492C-A914-51F9631D5C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3D7316A8-E445-45C6-BFD9-8E19254AC7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D95C12B4-51F1-4FFC-892B-1432D1E5219A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"308EF598-B9DF-47C5-A1AC-1A2A16767E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1A3A5E5D-E8A9-4B2F-B423-9F1B9E761A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9EDF6E-299A-4277-9C2F-B25D5F9A189E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*","matchCriteriaId":"313D0192-8849-4DA1-820E-28E2FC4E37C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*","matchCriteriaId":"265DCFF8-2EC5-49EA-8D06-1956F3109F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*","matchCriteriaId":"2D8FB68B-E4E8-4501-94F6-2922781D8C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*","matchCriteriaId":"6F1FEAA4-B0D8-4B5B-8958-173245F55134"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0E806A38-C603-4916-93E2-FE43062B09C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*","matchCriteriaId":"17EB5B78-0AD1-4259-8537-058D888B30B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*","matchCriteriaId":"06C7E6FD-99D0-4F48-B5DF-0EFD4C05079D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*","matchCriteriaId":"21217A49-637C-4F60-B8F8-8699E71D6BFC"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-014/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79210","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034485","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-014/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-6444","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T21:59:00.120","lastModified":"2026-06-17T00:13:06.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Titan Framework plugin before 1.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) t parameter to iframe-googlefont-preview.php or the (2) text parameter to iframe-font-preview.php."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en el plugin Titan Framework en versiones anteriores a 1.6 para WordPress permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro (1) t en iframe-googlefont-preview.php o (2) text en iframe-font-preview.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:titan_framework_project:titan_framework:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.5","matchCriteriaId":"5A14DEF9-C072-41DB-A881-2014BE8D0245"}]}]}],"references":[{"url":"https://research.g0blin.co.uk/cve-2014-6444/","source":"cve@mitre.org"},{"url":"https://wpvulndb.com/vulnerabilities/8233","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://research.g0blin.co.uk/cve-2014-6444/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wpvulndb.com/vulnerabilities/8233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-7151","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T21:59:01.387","lastModified":"2026-06-17T00:14:27.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the NEX-Forms Lite plugin 2.1.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the form_fields parameter in a (1) do_edit or (2) do_insert action to wp-admin/admin-ajax.php."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en el plugin NEX-Forms Lite 2.1.0 para WordPress permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro form_field en una acción (1) do_edit o (2) do_insert en wp-admin/admin-ajax.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nex-forms_lite_project:nex-forms_lite:2.1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"BC987027-EF37-49D8-B8AE-F304C8868726"}]}]}],"references":[{"url":"https://research.g0blin.co.uk/cve-2014-7151/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://wpvulndb.com/vulnerabilities/8237","source":"cve@mitre.org"},{"url":"https://research.g0blin.co.uk/cve-2014-7151/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://wpvulndb.com/vulnerabilities/8237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8376","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T21:59:05.013","lastModified":"2026-06-17T00:34:24.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation Group, or (3) Label parameter to blueprints/sections/edit/1."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Symphony CMS 2.6.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro (1) Name, (2) Navigation Group o (3) Label en blueprints/sections/edit/1."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:getsymphony:symphony:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"24024228-1BAF-4E48-BA13-B355D36BC984"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2015/Dec/101","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Dec/7","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Dec/101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Dec/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-8766","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T21:59:05.997","lastModified":"2026-06-17T00:35:12.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) email_sendmail[from_name], (2) email_sendmail[from_address], (3) email_smtp[from_name], (4) email_smtp[from_address], (5) email_smtp[host], (6) email_smtp[port], (7) jit_image_manipulation[trusted_external_sites], or (8) maintenance_mode[ip_whitelist] parameters to system/preferences."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en content/content.systempreferences.php en Symphony CMS en versiones anteriores a 2.6.4 permiten permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de los parámetros (1) email_sendmail[from_name], (2) email_sendmail[from_address], (3) email_smtp[from_name], (4) email_smtp[from_address], (5) email_smtp[host], (6) email_smtp[port], (7) jit_image_manipulation[trusted_external_sites] o (8) maintenance_mode[ip_whitelist] en system/preferences."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:getsymphony:symphony:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.3","matchCriteriaId":"C7F8ADDA-D69F-4A34-893A-C67C89957AF2"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2015/Dec/60","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.getsymphony.com/download/releases/version/2.6.4/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://cybersecurityworks.com/zerodays/cve-2015-8766-getsymphoney.html","source":"cve@mitre.org"},{"url":"https://github.com/symphonycms/symphony-2/commit/651e150091c61fb60ad1dff2bc2166185a83d9d6","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2015/Dec/60","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.getsymphony.com/download/releases/version/2.6.4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://cybersecurityworks.com/zerodays/cve-2015-8766-getsymphoney.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/symphonycms/symphony-2/commit/651e150091c61fb60ad1dff2bc2166185a83d9d6","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1498","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T21:59:06.937","lastModified":"2026-06-17T00:42:05.097","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the OCS discovery provider component in ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a URL."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en el componente OCS discovery provider en ownCloud Server en versiones anteriores a 7.0.12, 8.0.x en versiones anteriores 8.0.10, 8.1.x en versiones anteriores a 8.1.5 y 8.2.x en versiones anteriores a 8.2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados involucrando una URL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.11","matchCriteriaId":"9ED68463-3D2F-4227-8202-BE10AE025374"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"49E9C5BC-A6BA-4919-9934-BFAA915CC042"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"34AF5397-3B98-431B-B235-424A3B6BEFAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D554B7F-DEC4-4238-9346-CD1E3B1223E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E097A07-B9D8-4117-BCE5-32BCFF9905DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E52E7D8E-67EF-4EA9-9B3B-2E00F4A271C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EADDA578-EDE7-42FD-B05F-64FA59733FF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4F49D6F3-17C1-4731-828E-7A2B4A1A1260"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BB6CFEE2-A0CA-4D51-824E-8094ED83F9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A5D40281-7FAE-461B-B2DE-C1357E1F2A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.0.9:*:*:*:*:*:*:*","matchCriteriaId":"543D4862-C53C-455C-B006-425ED43AB063"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"43231F06-F9D3-4961-902B-96E3A807410B"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2925D6A9-2C29-4F34-A7B0-3B3079F8AE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A40FAAA7-42CA-41FE-9FFE-9173E6E41ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C2012191-572E-4EEB-8EDC-650C29133733"}]}]}],"references":[{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2016-001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2016-001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1501","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T21:59:09.967","lastModified":"2026-06-17T00:42:05.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain sensitive information via unspecified vectors, which reveals the installation path in the resulting exception messages."},{"lang":"es","value":"ownCloud Server en versiones anteriores a 8.0.9 y 8.1.x en versiones anteriores a 8.1.4 permiten a usuarios remotos autenticados obtener información sensible a través de vectores no especificados, lo que revela la ruta de instalación en los mensajes de excepción resultantes."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.8","matchCriteriaId":"8D08C7DB-3F02-4382-9867-0F5EB4F0F237"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"43231F06-F9D3-4961-902B-96E3A807410B"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2925D6A9-2C29-4F34-A7B0-3B3079F8AE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud_server:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A40FAAA7-42CA-41FE-9FFE-9173E6E41ECE"}]}]}],"references":[{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2016-004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2016-004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1565","sourceIdentifier":"cve@mitre.org","published":"2016-01-08T21:59:10.923","lastModified":"2026-06-17T00:42:10.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an element attribute."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en el módulo Field Group 7.x-1.x en versiones anteriores a 7.x-1.5 para Drupal permite a usarios remotos autenticados con permiso para configurar ajustes mostrados de un campo inyectar secuencias de comandos web o HTML arbitrarios a través de un atributo de elemento."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:field_group_project:field_group:7.x-1.0:*:*:*:*:drupal:*:*","matchCriteriaId":"B03DC815-EDC0-453A-93D4-756284C071F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:field_group_project:field_group:7.x-1.0:rc1:*:*:*:drupal:*:*","matchCriteriaId":"FF7C70D9-374B-45C6-B668-6E2F72DF4314"},{"vulnerable":true,"criteria":"cpe:2.3:a:field_group_project:field_group:7.x-1.0:rc2:*:*:*:drupal:*:*","matchCriteriaId":"3CDDF72A-E587-45AC-9E8D-6050C4227A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:field_group_project:field_group:7.x-1.1:*:*:*:*:drupal:*:*","matchCriteriaId":"BDE1E333-1F22-4137-95FC-B4BAED508FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:field_group_project:field_group:7.x-1.2:*:*:*:*:drupal:*:*","matchCriteriaId":"75751496-6916-4862-9363-9FF8296BC716"},{"vulnerable":true,"criteria":"cpe:2.3:a:field_group_project:field_group:7.x-1.3:*:*:*:*:drupal:*:*","matchCriteriaId":"9DAC81B0-ED61-4931-A8EC-01D0476AD4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:field_group_project:field_group:7.x-1.4:*:*:*:*:drupal:*:*","matchCriteriaId":"7CBC4251-4B39-41C9-8FD2-E47280B5F062"}]}]}],"references":[{"url":"https://www.drupal.org/node/2644832","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.drupal.org/node/2645350","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.drupal.org/node/2644832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.drupal.org/node/2645350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2015-6933","sourceIdentifier":"cve@mitre.org","published":"2016-01-09T02:59:00.127","lastModified":"2026-06-17T00:31:38.040","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi 5.0 through 6.0 allows Windows guest OS users to gain guest OS privileges or cause a denial of service (guest OS kernel memory corruption) via unspecified vectors."},{"lang":"es","value":"La implementación VMware Tools HGFS (también conocida como Shared Folders) en VMware Workstation 11.x en versiones anteriores a 11.1.2, VMware Player 7.x en versiones anteriores a 7.1.2, VMware Fusion 7.x en versiones anteriores a 7.1.2 y VMware ESXi 5.0 hasta la versión 6.0 permite a usuarios de SO invitado de Windows obtener privilegios de SO invitado o provocar una denegación de servicio (corrupción de memoria del kernel del SO invitado) a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"93872771-BD86-4707-926B-F6C3577C33A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B52D8903-B853-43A2-88C3-D79BBA70F8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"78016ED4-AEA7-4E54-8986-E997000CD646"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:11.0:*:*:*:*:*:*:*","matchCriteriaId":"492D7AD2-D660-48F5-A9BE-28CCA6A6B658"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:11.1:*:*:*:*:*:*:*","matchCriteriaId":"90F0250C-EE18-486B-90D7-348FEF01C2D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E33E15C-62ED-4E24-AB00-0632C8A90C6E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E2331236-2E9B-4B52-81EE-B52DEB41ACE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:5.0:1:*:*:*:*:*:*","matchCriteriaId":"7C5A1C2B-119E-49F3-B8E6-0610EE1C445C"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:5.0:2:*:*:*:*:*:*","matchCriteriaId":"AF29B5A4-6E4C-4EAE-BC6A-0DD44262EE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:5.1:*:*:*:*:*:*:*","matchCriteriaId":"7217CBE1-3882-4045-A15C-EE7D4174CA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:5.1:1:*:*:*:*:*:*","matchCriteriaId":"9A405802-D786-46F9-9E29-C727F9FD480A"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:5.5:*:*:*:*:*:*:*","matchCriteriaId":"469D98A5-7B8B-41BE-94C6-D6EF25388007"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:6.0:*:*:*:*:*:*:*","matchCriteriaId":"CC77ADEA-F0B8-4E5D-B965-39397F823075"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"92275180-52FC-48DE-947C-3AE1B87AF2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C9D5FE8B-7826-4690-952A-1FD98B7B9275"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2C9E4C16-838C-4302-A4E7-A79878070519"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034603","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034604","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7085","sourceIdentifier":"product-security@apple.com","published":"2016-01-09T02:59:01.597","lastModified":"2026-06-17T00:31:53.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117."},{"lang":"es","value":"Apple QuickTime en versiones anteriores a 7.7.9 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo movie manipulado, una vulnerabilidad diferente a CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092 y CVE-2015-7117."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.8","matchCriteriaId":"EAEBBC95-BF8A-4C6B-B505-6CE9E342D226"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205638","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7086","sourceIdentifier":"product-security@apple.com","published":"2016-01-09T02:59:02.750","lastModified":"2026-06-17T00:31:53.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117."},{"lang":"es","value":"Apple QuickTime en versiones anteriores a 7.7.9 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un archivo movie manipulado, una vulnerabilidad diferente a CVE-2015-7085, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092 y CVE-2015-7117."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.8","matchCriteriaId":"EAEBBC95-BF8A-4C6B-B505-6CE9E342D226"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205638","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7087","sourceIdentifier":"product-security@apple.com","published":"2016-01-09T02:59:03.737","lastModified":"2026-06-17T00:31:53.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117."},{"lang":"es","value":"Apple QuickTime en versiones anteriores a 7.7.9 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un archivo movie manipulado, una vulnerabilidad diferente a CVE-2015-7085, CVE-2015-7086, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092 y CVE-2015-7117."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.8","matchCriteriaId":"EAEBBC95-BF8A-4C6B-B505-6CE9E342D226"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205638","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7088","sourceIdentifier":"product-security@apple.com","published":"2016-01-09T02:59:04.970","lastModified":"2026-06-17T00:31:53.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117."},{"lang":"es","value":"Apple QuickTime en versiones anteriores a 7.7.9 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un archivo movie manipulado, una vulnerabilidad diferente a CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092 y CVE-2015-7117."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.8","matchCriteriaId":"EAEBBC95-BF8A-4C6B-B505-6CE9E342D226"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205638","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7089","sourceIdentifier":"product-security@apple.com","published":"2016-01-09T02:59:05.923","lastModified":"2026-06-17T00:31:53.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117."},{"lang":"es","value":"Apple QuickTime en versiones anteriores a 7.7.9 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un archivo movie manipulado, una vulnerabilidad diferente a CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092 y CVE-2015-7117."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.8","matchCriteriaId":"EAEBBC95-BF8A-4C6B-B505-6CE9E342D226"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205638","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7090","sourceIdentifier":"product-security@apple.com","published":"2016-01-09T02:59:06.923","lastModified":"2026-06-17T00:31:53.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117."},{"lang":"es","value":"Apple QuickTime en versiones anteriores a 7.7.9 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un archivo movie manipulado, una vulnerabilidad diferente a CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7091, CVE-2015-7092 y CVE-2015-7117."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.8","matchCriteriaId":"EAEBBC95-BF8A-4C6B-B505-6CE9E342D226"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205638","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7091","sourceIdentifier":"product-security@apple.com","published":"2016-01-09T02:59:07.893","lastModified":"2026-06-17T00:31:53.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7092, and CVE-2015-7117."},{"lang":"es","value":"Apple QuickTime en versiones anteriores a 7.7.9 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un archivo movie manipulado, una vulnerabilidad diferente a CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7092 y CVE-2015-7117."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.8","matchCriteriaId":"EAEBBC95-BF8A-4C6B-B505-6CE9E342D226"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205638","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7092","sourceIdentifier":"product-security@apple.com","published":"2016-01-09T02:59:08.767","lastModified":"2026-06-17T00:31:53.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted TXXX frame within an ID3 tag in MP3 data in a movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, and CVE-2015-7117."},{"lang":"es","value":"Apple QuickTime en versiones anteriores a 7.7.9 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (desbordamiento de buffer basado en memoria dinámica y caída de la aplicación) a través de un frame TXXX manipulado en una etiqueta ID3 en datos MP3 en un archivo movie, una vulnerabilidad diferente a CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091 y CVE-2015-7117."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.8","matchCriteriaId":"EAEBBC95-BF8A-4C6B-B505-6CE9E342D226"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"product-security@apple.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-002/","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205638","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7117","sourceIdentifier":"product-security@apple.com","published":"2016-01-09T02:59:09.970","lastModified":"2026-06-17T00:31:56.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, and CVE-2015-7092."},{"lang":"es","value":"Apple QuickTime en versiones anteriores a 7.7.9 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un archivo movie manipulado, una vulnerabilidad diferente a CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091 y CVE-2015-7092."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.8","matchCriteriaId":"EAEBBC95-BF8A-4C6B-B505-6CE9E342D226"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205638","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7575","sourceIdentifier":"secalert@redhat.com","published":"2016-01-09T02:59:10.910","lastModified":"2026-06-17T00:32:46.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision."},{"lang":"es","value":"Mozilla Network Security Services (NSS) en versiones anteriores a 3.20.2, tal como se utiliza en Mozilla Firefox en versiones anteriores a 43.0.2 y Firefox ESR 38.x en versiones anteriores a 38.5.2, no rechaza las firmas MD5 en mensajes Server Key Exchange en el tráfico de TLS 1.2 Handshake Protocol, lo que facilita a atacantes man-in-the-middle falsificar servidores desencadenando una colisión."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*","versionEndIncluding":"3.20.1","matchCriteriaId":"92954403-582A-4A55-B45C-64CADCF40909"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*","matchCriteriaId":"35BF0AFB-26BA-4BEA-B6B8-11CF88E951DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F007CC6-9391-4E1C-A747-F3DE5E572FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*","matchCriteriaId":"45E9641F-430C-4B3A-BD63-EC13DBD3D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5AADD23B-A8AF-4679-990D-C29A1D6EB5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1343A1FD-98CF-4A6C-A697-1253E538FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6D098567-B55E-4EAC-8FAA-31FAFDD4058F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE0389BC-D295-4957-8AE7-EDAC770F596D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E75E69A5-AC94-4F35-9EFB-1BFF8B78210D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2765E663-C9CF-476A-B7A8-6F02D0E2D72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*","matchCriteriaId":"62B4E871-0ACB-4EC5-8392-EAD0DF25E64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*","matchCriteriaId":"435D6EF5-C879-4121-9D47-EF2236E53409"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"43.0.1","matchCriteriaId":"11D313EA-95EE-456C-B27B-FB4207DE9492"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00139.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00058.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00059.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00166.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0049.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0050.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0053.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0054.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0055.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0056.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3436","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3437","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3457","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3458","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3465","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3491","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3688","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-150.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/79684","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034541","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036467","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2863-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2864-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2865-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2866-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2884-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2904-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1158489","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.20.2_release_notes","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-46","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201706-18","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201801-15","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20160225-0001/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00139.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00166.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-150.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2863-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2865-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2866-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2884-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2904-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1158489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.20.2_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-46","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201706-18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201801-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160225-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8510","sourceIdentifier":"security@mozilla.org","published":"2016-01-09T02:59:13.847","lastModified":"2026-06-17T00:34:40.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during \"Add to home screen\" bookmarking."},{"lang":"es","value":"Vulnerabilidad de XSS en la funcionalidad de internacionalización en la aplicación homescreen por defecto en Mozilla Firefox OS en versiones anteriores a 2.5 permite a atacantes remotos asistidos por usuario inyectar secuencias de comandos web o HTML arbitrarios a través de un sitio web manipulado que no es manejado correctamente durante el marcado \"Add to home screen\"."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mozilla:firefox_os:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"85F80783-C8DE-41C6-939D-53C9311B8BF3"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-153.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1190038","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-153.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1190038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8511","sourceIdentifier":"security@mozilla.org","published":"2016-01-09T02:59:15.020","lastModified":"2026-06-17T00:34:40.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors."},{"lang":"es","value":"Condición de carrera en la funcionalidad de lockscreen en Mozilla Firefox OS en versiones anteriores a 2.5 permite a atacantes físicamente próximos eludir un requerimiento destinado al código de acceso a través de vectores no especificados."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mozilla:firefox_os:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"85F80783-C8DE-41C6-939D-53C9311B8BF3"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-152.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1173284","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-152.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1173284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8512","sourceIdentifier":"security@mozilla.org","published":"2016-01-09T02:59:15.940","lastModified":"2026-06-17T00:34:40.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses."},{"lang":"es","value":"La funcionalidad de lockscreen en Mozilla Firefox OS en versiones anteriores a 2.5 no restringe adecuadamente los intentos fallidos de autenticación, lo que facilita a atacantes físicamente próximos obtener acceso introduciendo muchas supuestas contraseñas."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mozilla:firefox_os:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"85F80783-C8DE-41C6-939D-53C9311B8BF3"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-151.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1181571","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2015/mfsa2015-151.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1181571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7115","sourceIdentifier":"product-security@apple.com","published":"2016-01-10T03:59:00.117","lastModified":"2026-06-17T00:31:56.327","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2015-7116."},{"lang":"es","value":"libxml2 en Apple iOS en versiones anteriores a 9.2, OS X en versiones anteriores a 10.11.2 y tvOS en versiones anteriores a 9.1 permite a atacantes remotos obtener información sensible o provocar una denegación de servicio (corrupción de memoria) a través de un documento XML manipulado, una vulnerabilidad diferente a CVE-2015-7116."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"04EA4C73-EC97-4FC8-9AA5-D9B4A3EA869C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.0","matchCriteriaId":"82D0EE4D-4866-43A3-89B5-6C9BBD839493"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"68F69582-69E2-4173-B418-26F6E63DF502"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205635","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205637","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205640","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7116","sourceIdentifier":"product-security@apple.com","published":"2016-01-10T03:59:01.430","lastModified":"2026-06-17T00:31:56.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2015-7115."},{"lang":"es","value":"libxml2 en Apple iOS en versiones anteriores a 9.2, OS X en versiones anteriores a 10.11.2 y tvOS en versiones anteriores a 9.1 permite a atacantes remotos obtener información sensible o provocar una denegación de servicio (corrupción de memoria) a través de un documento XML manipulado, una vulnerabilidad diferente a CVE-2015-7115."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"68F69582-69E2-4173-B418-26F6E63DF502"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.0","matchCriteriaId":"82D0EE4D-4866-43A3-89B5-6C9BBD839493"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"04EA4C73-EC97-4FC8-9AA5-D9B4A3EA869C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205635","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205637","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205640","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7024","sourceIdentifier":"product-security@apple.com","published":"2016-01-11T11:59:01.480","lastModified":"2026-06-17T00:31:46.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse program that is loaded from an unexpected directory by an application that has a valid Apple digital signature."},{"lang":"es","value":"Vulnerabilidad de búsqueda de ruta no confiable en Apple OS X en versiones anteriores a 10.11.1 permite a usuarios locales eludir las restricciones de Gatekeeper previstas y obtener privilegios a través de un programa Troyano que se carga desde un directorio no esperado por una aplicación que tiene una firma digital Apple válida."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.0","matchCriteriaId":"82D0EE4D-4866-43A3-89B5-6C9BBD839493"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205375","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/426.html\">CWE-426: Untrusted Search Path</a>"}},{"cve":{"id":"CVE-2015-7399","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-11T11:59:02.857","lastModified":"2026-06-17T00:32:22.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow remote attackers to obtain sensitive information about the HTTP server via unspecified vectors."},{"lang":"es","value":"IBM WebSphere Message Broker 7 en versiones anteriores a 7.0.0.8 y 8 en versiones anteriores a 8.0.0.6 y IBM Integration Bus 9 en versiones anteriores a 9.0.0.3 y 10 en versiones anteriores a 10.0.0.0 permiten a atacantes remotos obtener información sensible acerca del servidor HTTP a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:9.0:*:*:*:*:*:*:*","matchCriteriaId":"4D9B868C-9348-4D31-95F9-FEC3D91158AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"725E3F95-4096-497D-8F2A-02C185ACF8CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:10.0:*:*:*:*:*:*:*","matchCriteriaId":"92E6A5C9-29C2-458D-AA67-E74945E2012F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*","matchCriteriaId":"240F8B7E-D5F2-4450-97D2-45A4E427170D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F76DCB43-6AFF-4C58-B646-423A6CECCA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1BC76D23-2211-40D8-8115-382BD7BA6ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BD879AA3-9887-4C8F-BEDB-50A39D193C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BA01CDC5-5725-460F-9DAD-B7F8094FAA69"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1DF45543-2C8E-414B-AB66-10D4B59DDF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:7.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D2B82976-621B-46A2-960B-BB8E42E75847"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0CF4BE69-414F-4922-89F8-BA904CA2C426"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*","matchCriteriaId":"0F93BF57-FD4F-456C-8DFD-CEF8B5AEF35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B859DAA9-1B0E-47CE-813D-108776C3B239"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2458C42A-90F7-457C-AAD6-205D9893A993"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8BFEC988-5E94-474F-9A60-966B8FA8B8F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BE5CCF85-8149-43DB-A594-99895D94F447"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EA0D7E80-2607-4567-8D1C-2ADA32F174D8"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC99031","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21969672","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034999","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC99031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21969672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7706","sourceIdentifier":"cve@mitre.org","published":"2016-01-11T15:59:01.197","lastModified":"2026-06-17T00:33:00.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to api/v3/public/shares/downloads/, the (2) authType parameter to api/v3/auth/login, or the (3) login parameter to api/v3/auth/reset_password."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Secure Data Space SDS-API en versiones anteriores a 3.5.7 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de (1) PATH_INFO en api/v3/public/shares/downloads/, el parámetro (2) authType en api/v3/auth/login o el parámetro (3) login en api/v3/auth/reset_password."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssp-europe:secure_data_space:3.4.14:*:*:*:*:*:*:*","matchCriteriaId":"54D2B9DA-25BC-45F7-9229-A71BCEBD303C"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/134760/Secure-Data-Space-3.1.1-2-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Dec/36","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/537069/100/0/threaded","source":"cve@mitre.org"},{"url":"https://kb.ssp-europe.eu/pages/viewpage.action?pageId=12059988","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/134760/Secure-Data-Space-3.1.1-2-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Dec/36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/537069/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.ssp-europe.eu/pages/viewpage.action?pageId=12059988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8335","sourceIdentifier":"cve@mitre.org","published":"2016-01-11T15:59:06.700","lastModified":"2026-06-17T00:34:20.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei VCN500 with software before V100R002C00SPC201 logs passwords in cleartext, which allows remote authenticated users to obtain sensitive information by triggering log generation and then reading the log."},{"lang":"es","value":"Huawei VCN500 con software en versiones anteriores a V100R002C00SPC201 registra contraseñas en texto plano, lo que permite a usuarios remotos autenticados obtener información sensible desencadenando la generación de registro y leyendo entonces el registro."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:vcn500:v100r002c00spc200:*:*:*:*:*:*:*","matchCriteriaId":"17498E77-F61E-442A-B22D-908E4C31578B"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:vcn500:v100r002c00spc200b010:*:*:*:*:*:*:*","matchCriteriaId":"280BB8D6-0B28-4CC0-86A5-E60B89E99380"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:vcn500:-:*:*:*:*:*:*:*","matchCriteriaId":"E191C10C-39A6-4F67-A714-76B0D8CD1B8B"}]}]}],"references":[{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463084.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463084.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-4671","sourceIdentifier":"cve@mitre.org","published":"2016-01-12T19:59:01.533","lastModified":"2026-06-17T00:27:42.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zone_id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de XSS en OpenCart en versiones anteriores a 2.1.0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de el parámetro zone_id para index.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opencart:opencart:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.0.1","matchCriteriaId":"870B8836-4173-4950-AB89-BCE6AC1BD131"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135163/OpenCart-2.1.0.1-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/17","source":"cve@mitre.org"},{"url":"https://github.com/opencart/opencart/commit/303fa88fe664ded4bf8753b997abd916f0a3c03f","source":"cve@mitre.org"},{"url":"https://github.com/opencart/opencart/releases/tag/2.1.0.2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://packetstormsecurity.com/files/135163/OpenCart-2.1.0.1-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/opencart/opencart/commit/303fa88fe664ded4bf8753b997abd916f0a3c03f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/opencart/opencart/releases/tag/2.1.0.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2015-4703","sourceIdentifier":"cve@mitre.org","published":"2016-01-12T19:59:02.580","lastModified":"2026-06-17T00:27:45.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en mysqldump_download.php en el plugin WordPress Rename 1.0 para WordPress permite a atacantes remotos leer archivos arbitrarios a través de un nombre de ruta completo en el parámetro dumpfname."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rename_project:rename:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"928887B6-2DFB-4CD4-B0DE-4D97A5161465"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/132460/WordPress-WP-Instance-Rename-1.0-File-Download.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2015/06/23/5","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/75394","source":"cve@mitre.org"},{"url":"http://www.vapid.dhs.org/advisory.php?v=127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://wpvulndb.com/vulnerabilities/8055","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/132460/WordPress-WP-Instance-Rename-1.0-File-Download.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2015/06/23/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/75394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapid.dhs.org/advisory.php?v=127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://wpvulndb.com/vulnerabilities/8055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-5471","sourceIdentifier":"cve@mitre.org","published":"2016-01-12T19:59:03.893","lastModified":"2026-06-17T00:29:11.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en include/user/download.php en el plugin Swim Team 1.44.10777 para WordPress permite a atacantes remotos leer archivos arbitrarios a través de a un nombre de ruta completo en el parámetro file."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:swim_team_project:swim_team:1.44.10777:*:*:*:*:wordpress:*:*","matchCriteriaId":"8B33A986-7A73-44C9-8FD3-196F3D3624D9"}]}]}],"references":[{"url":"http://michaelwalsh.org/blog/2015/07/wp-swimteam-v1-45-beta-3-now-available/","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/132653/WordPress-WP-SwimTeam-1.44.10777-Arbitrary-File-Download.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/75600","source":"cve@mitre.org"},{"url":"http://www.vapid.dhs.org/advisory.php?v=134","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://wordpress.org/support/topic/security-vulnerability-6","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8071","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://michaelwalsh.org/blog/2015/07/wp-swimteam-v1-45-beta-3-now-available/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/132653/WordPress-WP-SwimTeam-1.44.10777-Arbitrary-File-Download.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/75600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapid.dhs.org/advisory.php?v=134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://wordpress.org/support/topic/security-vulnerability-6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-7242","sourceIdentifier":"cve@mitre.org","published":"2016-01-12T19:59:05.003","lastModified":"2026-06-17T00:32:06.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE message."},{"lang":"es","value":"Vulnerabilidad de XSS en la funcionalidad Push-Service-Mails en AVM FRITZ!OS en versiones anteriores a 6.30 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del nombre mostrado en el campo FROM de un mensaje SIP INVITE."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avm:fritz\\!_os:*:*:*:*:*:*:*:*","versionEndIncluding":"6.23","matchCriteriaId":"664D5823-768C-4EE2-9399-CA8C750DEED6"}]}]}],"references":[{"url":"http://ds-develop.de/advisories/advisory-2016-01-07-1-avm.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/135168/AVM-FRITZ-OS-HTML-Injection.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/537249/100/0/threaded","source":"cve@mitre.org"},{"url":"https://avm.de/service/sicherheitsinfos-zu-updates/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://ds-develop.de/advisories/advisory-2016-01-07-1-avm.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/135168/AVM-FRITZ-OS-HTML-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/537249/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://avm.de/service/sicherheitsinfos-zu-updates/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2015-8337","sourceIdentifier":"cve@mitre.org","published":"2016-01-12T19:59:10.037","lastModified":"2026-06-17T00:34:20.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, GRA-UL10 before GRA-UL10C00B220 and Mate7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 allows remote attackers to cause a denial of service (invalid memory access and reboot) via unspecified vectors related to \"input null pointer as parameter.\""},{"lang":"es","value":"El controlador HIFI en teléfonos Huawei P8 con software GRA-TL00 en versiones anteriores a GRA-TL00C01B220SP01, GRA-CL00 en versiones anteriores a GRA-CL00C92B220, GRA-CL10 en versiones anteriores a GRA-CL10C92B220, GRA-UL00 en versiones anteriores a GRA-UL00C00B220, GRA-UL10 en versiones anteriores a GRA-UL10C00B220 y teléfono Mate7 con software MT7-UL00 en versiones anteriores a MT7-UL00C17B354, MT7-TL10 en versiones anteriores a MT7-TL10C00B354, MT7-TL00 en versiones anteriores a MT7-TL00C01B354 y MT7-CL00 en versiones anteriores a MT7-CL00C92B354 permite a atacantes remotos causar una denegación de servicio (acceso de memoria no válido y reinicio) a través de vectores no especificados relacionados con \"entrada de puntero nulo como parámetro.\""}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_7_firmware:mt7-cl00:*:*:*:*:*:*:*","matchCriteriaId":"58C7458C-3423-4516-95D8-3C56AC9C9C97"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_7_firmware:mt7-tl00:*:*:*:*:*:*:*","matchCriteriaId":"2F45932B-FAB6-44D1-9480-3A86B248E37C"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_7_firmware:mt7-tl10:*:*:*:*:*:*:*","matchCriteriaId":"5D60DEAA-6E4E-47D4-A09B-A41E49BE90C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_7_firmware:mt7-ul00:*:*:*:*:*:*:*","matchCriteriaId":"4D6C1DB1-9BE9-4F39-AC4D-BFFE49231CDE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*","matchCriteriaId":"96DD6375-B6FF-4530-9A56-A171BC1E7E78"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-cl10:*:*:*:*:*:*:*","matchCriteriaId":"95A2D1FD-3FCB-484B-A995-3FC0732ECFE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-cl100:*:*:*:*:*:*:*","matchCriteriaId":"6C2F466E-299D-4DA7-93F5-8540C10AC726"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-tl00:*:*:*:*:*:*:*","matchCriteriaId":"2019AC75-E9C6-4AD0-B95F-2C4D03CCBBEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-ul10:*:*:*:*:*:*:*","matchCriteriaId":"4E8D0A98-4F0D-485F-97B9-252C3A198659"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-ul100:*:*:*:*:*:*:*","matchCriteriaId":"631A21B4-E4D8-485A-9C80-672287B95024"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*","matchCriteriaId":"F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-465304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/80357","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-465304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/80357","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-8603","sourceIdentifier":"cve@mitre.org","published":"2016-01-12T19:59:12.240","lastModified":"2026-06-17T00:34:50.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the serendipity[entry_id] parameter in an \"edit\" admin action to serendipity_admin.php."},{"lang":"es","value":"Vulnerabilidad de XSS en Serendipity en versiones anteriores a 2.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro serendipity[entry_id] en una acción de admin \"edit\" para serendipity_admin.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"E6A30A68-980A-451B-9A09-1138A84BEADC"}]}]}],"references":[{"url":"http://blog.s9y.org/archives/266-Serendipity-2.0.3-released.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135164/Serendipity-2.0.2-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/18","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/537248/100/0/threaded","source":"cve@mitre.org"},{"url":"http://blog.s9y.org/archives/266-Serendipity-2.0.3-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135164/Serendipity-2.0.2-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537248/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Per http://blog.s9y.org/archives/266-Serendipity-2.0.3-released.html:\n\"The issue only affects logged-in authors, where HTML can be inserted into the comment editing form when they click specially crafted links.Due to the required authentication we consider the issue of medium impact, but suggest everyone to perform the update.\""}},{"cve":{"id":"CVE-2015-8672","sourceIdentifier":"cve@mitre.org","published":"2016-01-12T20:59:05.637","lastModified":"2026-06-17T00:35:01.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a wireless presentation."},{"lang":"es","value":"El mecanismo de gestión de permisos de transmisión de presentación en terminales de videoconferencia multimedia Huawei TE30, TE40, TE50 y TE60 con software en versiones anteriores a V100R001C10SPC100 permite a atacantes remotos causar una denegación de servicio (corte de la presentación por cable) a través de vectores no especificados que involucran a una presentación inalámbrica."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:te60_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"v100r001c10b022","matchCriteriaId":"6FEC486C-0EEE-4D46-82C9-F5AC853B2224"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:te30:*:*:*:*:*:*:*:*","matchCriteriaId":"CB8A0FD4-3AF3-4A6B-9473-BDB800071720"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:te40:*:*:*:*:*:*:*:*","matchCriteriaId":"5686C976-0D0E-4284-8349-4D67D35A6D28"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:te50:*:*:*:*:*:*:*:*","matchCriteriaId":"097471BD-8FAB-4290-9502-CA87594533D0"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:te60:*:*:*:*:*:*:*:*","matchCriteriaId":"59EA47DE-489B-4D45-94BE-422427813C4F"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-462952","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-462952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8673","sourceIdentifier":"cve@mitre.org","published":"2016-01-12T20:59:06.560","lastModified":"2026-06-17T00:35:01.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation."},{"lang":"es","value":"Terminales de video conferencia multimedia Huawei TE30, TE40, TE50 y TE60 con software en versiones anteriores a V100R001C10SPC100 no requieren introducir la contraseña antigua cuando se cambia la contraseña de la cuenta Debug, lo que permite a atacantes físicamente próximos cambiar las contraseñas mediante el aprovechamiento de una estación de trabajo desatendida."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:*","matchCriteriaId":"1146F99B-5344-4CD3-AF3F-CD3FE6F6DD91"},{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*","matchCriteriaId":"45C3AF58-E030-4E12-A2FD-A4337A5021ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*","matchCriteriaId":"A4F188B3-0A63-4704-9B0D-F8DF5D973FA5"},{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*","matchCriteriaId":"999117E9-90C8-4E76-90B5-7D364C0B84BF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:te60_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"v100r001c10b022","matchCriteriaId":"6FEC486C-0EEE-4D46-82C9-F5AC853B2224"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-462952","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-462952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1231","sourceIdentifier":"security@debian.org","published":"2016-01-12T20:59:09.167","lastModified":"2026-06-17T00:41:31.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) in an unspecified path."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el módulo HTTP file-serving (mod_http_files) en Prosody 0.9.x en versiones anteriores a 0.9.9 permite a atacantes remotos leer archivos arbitrarios a través de un .. (punto punto) en una ruta no especificada."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"69BF8C97-A90B-4F1D-9300-F8BF411BDF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"B70430C5-9AA2-46D5-B7DD-ED08CB980F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19FFAE24-10BB-4F88-A0BF-105B4B6A702D"},{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"668FF630-38DC-44BF-ACC8-2F519B788175"},{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"DADDF029-1D55-4B48-B535-BBF677B10C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DB07BA0E-AA91-4773-AC6C-63C825D6D114"},{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"A6E8D0F2-485E-441A-94F5-5FEF084B38F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"D2251303-150D-439D-9AE3-A0B61379A0B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8B6A57A5-A666-4F09-9618-55C9AFF7383B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://blog.prosody.im/prosody-0-9-9-security-release/","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175829.html","source":"security@debian.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175868.html","source":"security@debian.org"},{"url":"http://www.debian.org/security/2016/dsa-3439","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/08/5","source":"security@debian.org"},{"url":"https://prosody.im/issues/issue/520","source":"security@debian.org"},{"url":"https://prosody.im/security/advisory_20160108-1/","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://blog.prosody.im/prosody-0-9-9-security-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175829.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175868.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/08/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://prosody.im/issues/issue/520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://prosody.im/security/advisory_20160108-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1715","sourceIdentifier":"cve@mitre.org","published":"2016-01-12T20:59:11.167","lastModified":"2026-06-17T00:42:29.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service (memory corruption and system crash) or gain privileges via a 768 syscall, which triggers a zero to be written to an arbitrary kernel memory location."},{"lang":"es","value":"El controlador del kernel swin.sys en McAfee Application Control (MAC) 6.1.0 en versiones anteriores a build 706, 6.1.1 en versiones anteriores a build 404, 6.1.2 en versiones anteriores a build 449, 6.1.3 en versiones anteriores a build 441 y 6.2.0 en versiones anteriores a build 505 sobre plataformas Windows 32-bit permite a usuarios locales causar una denegación de servicio (corrupción de memoria y caída de sistema) u obtener privilegios a través de una llamada al sistema 768, lo que desencadena un cero a escribir en una ubicación de memoria del kernel arbitraria."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.3}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:P/I:P/A:C","baseScore":5.5,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":2.7,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:x86:*","matchCriteriaId":"CAC3DC2D-88DE-4C33-A025-9980A333A4CB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC98A2C-2971-4DE1-8AB3-A8082DA604A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5749D867-B568-4063-928E-6BC89DA45C82"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"46648D73-F96C-4A75-A9CB-92B2501A9055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FEDD14FC-0CAA-445F-B29A-F82FB92393E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A76C99C1-C854-426C-AF4D-F2E965ECD9FF"}]}]}],"references":[{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-007","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-6117","sourceIdentifier":"secure@microsoft.com","published":"2016-01-13T05:59:00.120","lastModified":"2026-06-17T00:30:25.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka \"Microsoft SharePoint Security Feature Bypass,\" a different vulnerability than CVE-2016-0011."},{"lang":"es","value":"Microsoft SharePoint Server 2013 SP1 y SharePoint Foundation 2013 SP1 permiten a usuarios remotos autenticados eludir las restricciones destinadas al Access Control Policy y llevar a cabo ataques de XSS mediante la modificación de un elemento web, también conocido como \"Microsoft SharePoint Security Feature Bypass,\" una vulnerabilidad diferente a CVE-2016-0011."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"F71184B1-7461-4A05-A5D2-03D9EDDC30D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"16F33176-442C-4EFF-8EA0-C640D203B939"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034653","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0005","sourceIdentifier":"secure@microsoft.com","published":"2016-01-13T05:59:03.653","lastModified":"2026-06-17T00:36:45.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka \"Internet Explorer Elevation of Privilege Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 9 hasta la versión 11 permite a atacantes remotos eludir la Same Origin Policy a través de vectores no especificados, también conocido como \"Internet Explorer Elevation of Privilege Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034648","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-001","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0008","sourceIdentifier":"secure@microsoft.com","published":"2016-01-13T05:59:06.420","lastModified":"2026-06-17T00:36:47.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka \"Windows GDI32.dll ASLR Bypass Vulnerability.\""},{"lang":"es","value":"La interfaz de dispositivo gráfico en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold y R2 y Windows RT Gold y 8.1 permite a atacantes remotos eludir el mecanismo de protección ASLR a través de vectores no especificados, también conocido como \"Windows GDI32.dll ASLR Bypass Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*","matchCriteriaId":"0D229E41-A971-4284-9657-16D78414B93F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*","matchCriteriaId":"ABC7A32C-4A4A-4533-B42E-350E728ADFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*","matchCriteriaId":"B320A104-9037-487E-BC9A-62B4A6B49FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*","matchCriteriaId":"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034654","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-005","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1216","source":"secure@microsoft.com","tags":["Not Applicable"]},{"url":"http://www.securitytracker.com/id/1034654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-0011","sourceIdentifier":"secure@microsoft.com","published":"2016-01-13T05:59:09.387","lastModified":"2026-06-17T00:36:47.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka \"Microsoft SharePoint Security Feature Bypass,\" a different vulnerability than CVE-2015-6117."},{"lang":"es","value":"Microsoft SharePoint Server 2013 SP1 y SharePoint Foundation 2013 SP1 permiten a usuarios remotos autenticados eludir las restricciones destinadas al Access Control Policy y llevar a cabo ataques de XSS mediante la modificación de un elemento web, también conocido como \"Microsoft SharePoint Security Feature Bypass\", una vulnerabilidad diferente a CVE-2015-6117."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"16F33176-442C-4EFF-8EA0-C640D203B939"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"F71184B1-7461-4A05-A5D2-03D9EDDC30D5"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034653","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0012","sourceIdentifier":"secure@microsoft.com","published":"2016-01-13T05:59:10.607","lastModified":"2026-06-17T00:36:47.667","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka \"Microsoft Office ASLR Bypass.\""},{"lang":"es","value":"Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016 y Visual Basic 6.0 Runtime permiten a atacantes remotos eludir el mecanismo de protección ASLR a través de vectores no especificados, también conocido como \"Microsoft Office ASLR Bypass\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"94F5E2F8-0D37-4FCC-B55A-9F09C421272C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:x64:*","matchCriteriaId":"5E01525C-A3AB-4AB7-82F9-B91E4D552FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:x86:*","matchCriteriaId":"E28626D8-AF3A-487F-BAAB-3955E44D2A35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"F564117D-450D-45C4-9688-AF35F630A8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*","matchCriteriaId":"3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*","matchCriteriaId":"09BF0981-749E-470B-A7AC-95AD087797EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"FEECD12A-5BEF-4675-B62E-86CF4A7474D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:*","matchCriteriaId":"69998A67-CB15-4217-8AD6-43F9BA3C6454"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:*","matchCriteriaId":"349E9084-8116-43E9-8B19-CA521C96660D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"120690A6-E0A1-4E36-A35A-C87109ECC064"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*","matchCriteriaId":"E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"9CCB2D72-B779-4772-8F72-7177E3F47A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"BA6E71BA-0EBA-40EE-8B81-92C6DECE8DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:rt:*:*:*","matchCriteriaId":"36A1FA52-BFBD-4C88-9CBE-B68E55C75726"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*","matchCriteriaId":"C971A8FC-3897-496D-BB9A-9E6C8A03AEA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"387D78BD-2368-4525-BFC2-52149585E1F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"ED0408B6-4FB5-45E9-AD27-301FC383152D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"87EBA8C7-E317-4EFD-B1AA-DD6A8B0DFDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2016:*:*:*:*:*:*:*","matchCriteriaId":"89229922-0836-4CC2-AED2-107C3142D0EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basics:6.0:*:*:*:rt:*:*:*","matchCriteriaId":"94937F2F-0730-4BAA-9479-CA1A7E1FDE89"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"7D006508-BFB0-4F21-A361-3DA644F51D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"24EEDAD9-9656-4B21-82E4-D60B83777492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"32E1400A-836A-4E48-B2CD-2B0A9A8241BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*","matchCriteriaId":"45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*","matchCriteriaId":"4DA042D4-B14E-4DDF-8423-DFB255679EFE"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034651","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0029","sourceIdentifier":"secure@microsoft.com","published":"2016-01-13T05:59:18.717","lastModified":"2026-06-17T00:36:49.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka \"Exchange Spoofing Vulnerability,\" a different vulnerability than CVE-2016-0031."},{"lang":"es","value":"Vulnerabilidad de XSS en Outlook Web Access (OWA) en Microsoft Exchange Server 2016 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocido como \"Exchange Spoofing Vulnerability\", una vulnerabilidad diferente a CVE-2016-0031."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*","matchCriteriaId":"8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79889","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034647","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-010","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0030","sourceIdentifier":"secure@microsoft.com","published":"2016-01-13T05:59:19.607","lastModified":"2026-06-17T00:36:49.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka \"Exchange Spoofing Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de XSS en Outlook Web Access (OWA) en Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10 y 2016 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocido como \"Exchange Spoofing Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_10:*:*:*:*:*:*","matchCriteriaId":"E2D3E12E-5872-4775-8F4D-24C1BB315195"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*","matchCriteriaId":"8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79890","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034647","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-010","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0031","sourceIdentifier":"secure@microsoft.com","published":"2016-01-13T05:59:20.513","lastModified":"2026-06-17T00:36:49.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka \"Exchange Spoofing Vulnerability,\" a different vulnerability than CVE-2016-0029."},{"lang":"es","value":"Vulnerabilidad de XSS en Outlook Web Access (OWA) en Microsoft Exchange Server 2016 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocida como \"Exchange Spoofing Vulnerability\", una vulnerabilidad diferente a CVE-2016-0029."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*","matchCriteriaId":"8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79888","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034647","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-010","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0032","sourceIdentifier":"secure@microsoft.com","published":"2016-01-13T05:59:21.420","lastModified":"2026-06-17T00:36:49.413","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, 2013 Cumulative Update 11, and 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka \"Exchange Spoofing Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de XSS en Outlook Web Access (OWA) en Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, 2013 Cumulative Update 11 y 2016 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocida como \"Exchange Spoofing Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_10:*:*:*:*:*:*","matchCriteriaId":"E2D3E12E-5872-4775-8F4D-24C1BB315195"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_11:*:*:*:*:*:*","matchCriteriaId":"5F21DAA0-7075-41E1-96BD-F3D77D237248"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*","matchCriteriaId":"8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/79884","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034647","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-010","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1494","sourceIdentifier":"cve@mitre.org","published":"2016-01-13T15:59:02.787","lastModified":"2026-06-17T00:42:04.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack."},{"lang":"es","value":"La función de verificación en el paquete RSA para Phython (Python-RSA) en versiones anteriores a 3.3 permite a atacantes falsificar firmas con un exponente público pequeño a través de un relleno de firma manipulado, también conocido como un ataque BERserk."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:rsa:*:*:*:*:*:python:*:*","versionEndExcluding":"3.3","matchCriteriaId":"5B3DC9A6-86A9-4633-999D-108805ACA251"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175897.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175942.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00032.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/05/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/05/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79829","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175897.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175942.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/05/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/05/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1569","sourceIdentifier":"security@debian.org","published":"2016-01-13T15:59:03.803","lastModified":"2026-06-17T00:42:11.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter."},{"lang":"es","value":"FireBird 2.5.5 permite a usuarios autenticados provocar una denegación de servicio (caída de demonio) utilizando el servicio manager para invocar la utilidad gbak con un parámetro no válido."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"36682323-0E2A-4FC7-B02C-93B2AB13C7A1"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177119.html","source":"security@debian.org"},{"url":"http://sourceforge.net/p/firebird/code/62783/","source":"security@debian.org"},{"url":"http://tracker.firebirdsql.org/browse/CORE-5068","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/10/2","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/10/3","source":"security@debian.org","tags":["Exploit"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/p/firebird/code/62783/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tracker.firebirdsql.org/browse/CORE-5068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/10/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/10/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-8605","sourceIdentifier":"cve@mitre.org","published":"2016-01-14T22:59:00.077","lastModified":"2026-06-17T00:34:50.327","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet."},{"lang":"es","value":"ISC DHCP 4.x en versiones anteriores a 4.1-ESV-R12-P1, 4.2.x y 4.3.x en versiones anteriores a 4.3.3-P1 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de una longitud de campo no válida en un paquete UDP IPv4."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:N/I:N/A:C","baseScore":5.7,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:unified_threat_management_up2date:*:*:*:*:*:*:*:*","versionEndIncluding":"9.318","matchCriteriaId":"3B2A62A0-5181-4919-A689-27634634FE67"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:unified_threat_management_up2date:*:*:*:*:*:*:*:*","versionEndIncluding":"9.353","matchCriteriaId":"C9E22C98-BA1F-4B29-AD13-3C932759E0AC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79DA60EA-F94F-4890-BF9E-E142BC219118"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CBC3A7C-1025-4DF6-8250-44C38CB52444"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.0.2:-:*:*:*:*:*:*","matchCriteriaId":"D90EE731-495C-41B3-B525-CB45392D0190"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.0.2:p1:*:*:*:*:*:*","matchCriteriaId":"81CE9ABB-6FAD-4830-BA4B-ABBF39051CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.0.3:-:*:*:*:*:*:*","matchCriteriaId":"757A6609-79A3-4E52-9CB0-AB830172A69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.0.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F028BC86-1573-4B86-9976-5F0DA4DB6CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*","matchCriteriaId":"F27D0660-2F07-430B-A651-5D0B6AA763C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*","matchCriteriaId":"FBAABA4E-0D34-4644-AC26-E272CEE6C361"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*","matchCriteriaId":"179443DC-4B6A-408A-8BE5-B3E72188F43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*","matchCriteriaId":"C9BE7736-58CD-468B-84AB-B38C9B254BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*","matchCriteriaId":"40B21FCB-43A8-4266-934D-ECFF8138F637"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*","matchCriteriaId":"69D49F23-9074-49E7-985F-4D93393324CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*","matchCriteriaId":"3F729D1D-7234-4BC2-839B-AE1BB9D16C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*","matchCriteriaId":"FBA64EEC-C0C7-4F11-8131-2868691E54DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*","matchCriteriaId":"157520D7-AE39-4E23-A8CF-DD75EA78C055"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*","matchCriteriaId":"A5E2FFC7-6E73-463E-846C-C403E41A2022"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*","matchCriteriaId":"E9D08285-745D-40AB-9A78-F467712CDA5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*","matchCriteriaId":"1D115F1F-1A3A-4924-AF10-723B3BB0CBB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*","matchCriteriaId":"79F235F0-AD16-4E5B-AB60-97F0BB86AEB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*","matchCriteriaId":"E84D5E5B-0336-4166-AAAC-49375E3AF971"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*","matchCriteriaId":"09561C97-563C-4DDC-9EE4-E83EFFD467D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*","matchCriteriaId":"519CF0CC-FB12-4C68-88A0-E0E15738C620"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*","matchCriteriaId":"80EB131E-32E5-458F-8DDA-48835D2D883F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*","matchCriteriaId":"65E0296F-3522-4B43-AF34-CFE1AE7EEC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*","matchCriteriaId":"69F6E619-A52B-4A60-8247-41ADD0E7D655"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*","matchCriteriaId":"AA48EBAA-10B7-43D6-9A27-99F2578DF7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*","matchCriteriaId":"20040BB3-F157-4505-BB60-0D919A7D1436"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*","matchCriteriaId":"974A8587-8351-490A-82D9-B541862CA4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*","matchCriteriaId":"7DABD43E-818A-4B21-B4E7-753056D4A184"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*","matchCriteriaId":"EE991D0E-2E2D-4844-9BBD-235D8BC5FB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*","matchCriteriaId":"975EF88C-988F-40A6-B7D1-D27439144CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*","matchCriteriaId":"78214BCE-9739-40B9-A32E-89C16F7195DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*","matchCriteriaId":"A91F4FD9-1797-4B9C-AFB8-EC6445119DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.1:p1:*:*:*:*:*:*","matchCriteriaId":"F92474BB-7CC0-47EE-A608-190F70AAFE41"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*","matchCriteriaId":"09F19067-DD99-4B26-8125-0801459ED6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*","matchCriteriaId":"9B63D409-60F5-4AB9-A576-8672D42E071E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*","matchCriteriaId":"CA5D825C-B72A-44F5-AF24-4F3200881ABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9A1C3F3E-CFB2-40F2-89F4-735AAE042F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:-:*:*:*:*:*:*","matchCriteriaId":"150D46FA-873E-4E4F-8192-BCA1076994D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:p1:*:*:*:*:*:*","matchCriteriaId":"F159908A-00E7-4EC8-8342-28182F547C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:p2:*:*:*:*:*:*","matchCriteriaId":"6CE0BBF8-7FB8-44DD-8C6B-30A657BA9EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.1:-:*:*:*:*:*:*","matchCriteriaId":"5C6D8D55-DCD2-4E70-B3C6-76F2134DA336"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.1:b1:*:*:*:*:*:*","matchCriteriaId":"C0F06FC0-6477-4589-B9CB-24B1F893EF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.1:p1:*:*:*:*:*:*","matchCriteriaId":"B3AF9E2C-E0BC-427C-9F13-BCB15916F5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"6CCA07EB-B0CB-40EE-B62E-DB4C408717B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.2:-:*:*:*:*:*:*","matchCriteriaId":"5E91F700-F59A-491F-BA99-53EC79E573D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.2:b1:*:*:*:*:*:*","matchCriteriaId":"53551545-041A-456F-BC81-E05A6B3CB198"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"0F3DBB40-638E-4A4B-99B4-534D2564E146"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.3:-:*:*:*:*:*:*","matchCriteriaId":"0B921430-F03C-42DB-A362-562136B01445"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.3:p1:*:*:*:*:*:*","matchCriteriaId":"FA0C3173-8630-4613-B1D3-711468FC3749"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.3:p2:*:*:*:*:*:*","matchCriteriaId":"F104AD27-0AE0-4853-B19C-1D83070A0DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:-:*:*:*:*:*:*","matchCriteriaId":"4A290541-BF9E-4E18-A941-0ACC40509A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:b1:*:*:*:*:*:*","matchCriteriaId":"F13E1B0F-5731-4949-9D35-497D1D49882C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:p1:*:*:*:*:*:*","matchCriteriaId":"E85A27A0-A83B-4BBF-A3B8-5219F2053902"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:p2:*:*:*:*:*:*","matchCriteriaId":"50D601E4-C5EF-4A6E-9EF8-FB9E24D5C6C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"ADDDFFB6-046E-407E-9B2E-D4BC18D416CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:rc2:*:*:*:*:*:*","matchCriteriaId":"042495FE-3E6A-4602-8E5A-8F4BBD9E3245"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.5:-:*:*:*:*:*:*","matchCriteriaId":"331D2BBF-858F-49E8-AD2A-01668848F5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.5:b1:*:*:*:*:*:*","matchCriteriaId":"5EDCDDC5-6A8F-490B-BFB9-094259A7AF9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.5:p1:*:*:*:*:*:*","matchCriteriaId":"5368A7D2-4709-4302-8EB9-D1A16449E2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"A368842A-E2A8-4689-A6CA-2349AAF55EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.6:-:*:*:*:*:*:*","matchCriteriaId":"3DC8FB80-A6CA-46C7-B5CE-FD6B0BD4CF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.6:b1:*:*:*:*:*:*","matchCriteriaId":"9C602DE3-F326-4810-81D9-21CED82D400A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"EA0D6DF6-039F-44FA-9B6B-6ED0A0D898A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"ACBB8D6D-6523-47BF-8BA2-3AA58A93091D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.7:b1:*:*:*:*:*:*","matchCriteriaId":"DCB3FA8B-597A-4E27-8CC6-D1B164C6A99F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.7:rc1:*:*:*:*:*:*","matchCriteriaId":"2A331218-0BD5-4084-B1B7-A002A7FCDADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"B9253A7A-2980-4910-99D0-CFA8A5AF1C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.8:b1:*:*:*:*:*:*","matchCriteriaId":"7F7B441D-4E20-41B7-8B21-39FCC5E80976"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.8:rc1:*:*:*:*:*:*","matchCriteriaId":"422B12D1-8395-47F1-8A4F-AA964C1AA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.8:rc2:*:*:*:*:*:*","matchCriteriaId":"1CC2583E-F9E7-4FB1-B59C-070458E4C228"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3BB3F688-0DCC-4E19-87C8-1511BBA27A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.0:a1:*:*:*:*:*:*","matchCriteriaId":"90FE2884-4468-4D56-9929-C799FA7BF119"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.0:b1:*:*:*:*:*:*","matchCriteriaId":"B02C7E44-2F8B-40D7-B57A-5B78A6BD891F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"80DC9586-9846-4E61-82F4-F0FF1A61F89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"735B3054-DAE3-4F4D-8804-0615A009E05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.1:b1:*:*:*:*:*:*","matchCriteriaId":"43235DDF-B8E1-48F5-906F-F1100F29DEAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"C279D9B3-A774-4D4F-A52B-22CE633ACDE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7F58E090-C22E-4907-9AA3-D9D36CF4CD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.2:b1:*:*:*:*:*:*","matchCriteriaId":"0241F629-A09E-4CC7-B6A5-48E041C2C390"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.2:rc1:*:*:*:*:*:*","matchCriteriaId":"570BB5C3-CA10-4440-917E-4E88BDDD5656"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.2:rc2:*:*:*:*:*:*","matchCriteriaId":"50C6B9BB-136F-4F79-A329-DE8F361EF00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9784E8F1-6CC4-4A36-8010-A09A52811DC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.3:b1:*:*:*:*:*:*","matchCriteriaId":"632B45FA-D76A-4EB6-A208-225B560845FA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175594.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176031.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00162.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00168.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3442","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/80703","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034657","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2868-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://kb.isc.org/article/AA-01334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175594.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00168.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/80703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2868-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.isc.org/article/AA-01334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0777","sourceIdentifier":"secalert@redhat.com","published":"2016-01-14T22:59:01.140","lastModified":"2026-06-17T00:38:12.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key."},{"lang":"es","value":"La función resend_bytes en roaming_common.c en el cliente en OpenSSH 5.x, 6.x y 7.x en versiones anteriores a 7.1p2 permite a servidores remotos obtener información sensible desde la memoria de proceso mediante la petición de transmisión de un buffer completo, según lo demostrado mediante la lectura de una clave privada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-29T20:29:54.649786Z","id":"CVE-2016-0777","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:unified_threat_management_software:9.318:*:*:*:*:*:*:*","matchCriteriaId":"EFA93870-577B-4D53-A61D-22E024F96B16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:unified_threat_management_software:9.353:*:*:*:*:*:*:*","matchCriteriaId":"9857D3A8-7942-4624-B3D6-9943D34030B8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:unified_threat_management:110:*:*:*:*:*:*:*","matchCriteriaId":"E9D7BF2E-1DEB-474A-8DEE-0A2D1A9B1A77"},{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:unified_threat_management:120:*:*:*:*:*:*:*","matchCriteriaId":"CE59783E-6A2D-4777-9BA2-8527DA6B32BA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:unified_threat_management:220:*:*:*:*:*:*:*","matchCriteriaId":"646FEB9F-2F54-4946-9687-C2EC28144C97"},{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:unified_threat_management:320:*:*:*:*:*:*:*","matchCriteriaId":"57654458-F143-4D70-9D52-0A242F3177A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:unified_threat_management:425:*:*:*:*:*:*:*","matchCriteriaId":"A6527EC0-536E-4BF0-9949-8FA4A4E64688"},{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:unified_threat_management:525:*:*:*:*:*:*:*","matchCriteriaId":"21A9EA52-E9F1-4267-86BC-570ED1ECC7B1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:unified_threat_management:625:*:*:*:*:*:*:*","matchCriteriaId":"280976E2-D7A8-43B7-A57C-66920BC91DAB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.0:*:*:*:*:*:*:*","matchCriteriaId":"52D13E08-7B08-44AA-9017-3EE3F6301E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.0:p1:*:*:*:*:*:*","matchCriteriaId":"727CC471-6473-4C8D-8D1A-D8B3C6AB21CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.1:*:*:*:*:*:*:*","matchCriteriaId":"2FBC7FF1-01EE-40A1-8735-14360A371803"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.1:p1:*:*:*:*:*:*","matchCriteriaId":"4CEDBF5F-23BD-4A60-926A-B822D5E3BFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.2:*:*:*:*:*:*:*","matchCriteriaId":"987527F8-8A42-4729-A329-4D2AC8AFD6E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.2:p1:*:*:*:*:*:*","matchCriteriaId":"CAF922B2-2FE6-4401-A4F1-914C637F5450"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.3:*:*:*:*:*:*:*","matchCriteriaId":"93910448-8D6F-4F7E-9C7F-959754ABA50D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.3:p1:*:*:*:*:*:*","matchCriteriaId":"4ECE74F4-8E7B-42FA-A2DD-2EE0681DA4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.4:*:*:*:*:*:*:*","matchCriteriaId":"3356FDFD-BEA5-45A5-A36B-D1153AFE6C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.4:p1:*:*:*:*:*:*","matchCriteriaId":"AA9D704A-D1E7-4989-9136-1EAD72EF6BE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.5:*:*:*:*:*:*:*","matchCriteriaId":"9394B8AD-AB22-4955-8774-C6BA2B56A260"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.5:p1:*:*:*:*:*:*","matchCriteriaId":"78735121-6BA0-4158-B3D5-E4BACCA5E95A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.6:*:*:*:*:*:*:*","matchCriteriaId":"0C5D4A9B-1194-4D63-AAC2-8701C890BB0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.6:p1:*:*:*:*:*:*","matchCriteriaId":"270BABBA-70A8-4FC7-962D-0D0D40F4497F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.7:*:*:*:*:*:*:*","matchCriteriaId":"F75DB5AE-E99D-4827-B290-823E015AEE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.7:p1:*:*:*:*:*:*","matchCriteriaId":"A710EC9F-1352-4DF0-B1CF-9C51ACB078CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.8:*:*:*:*:*:*:*","matchCriteriaId":"DA4F797B-8E2C-41AC-AA29-D6B50A539B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.8:p1:*:*:*:*:*:*","matchCriteriaId":"7F482203-0CF1-403C-A25C-9B0DA24F6282"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.9:*:*:*:*:*:*:*","matchCriteriaId":"1E74684E-71D3-4458-A8BA-5248982273F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:5.9:p1:*:*:*:*:*:*","matchCriteriaId":"9F3D478C-221F-4A07-8520-CD8856A75DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A9754B4A-3042-49B8-86F7-2D60E25400C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.0:p1:*:*:*:*:*:*","matchCriteriaId":"B018B05B-1311-4E0F-A9D0-620C1BF904A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.1:*:*:*:*:*:*:*","matchCriteriaId":"3872787F-2C1C-40C0-B9CF-A3C0CEAAB400"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.1:p1:*:*:*:*:*:*","matchCriteriaId":"728372F8-6561-473D-B54D-1DB41DA1CF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.2:*:*:*:*:*:*:*","matchCriteriaId":"39D1E296-3040-4CC9-B95B-3E07D73F1150"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.2:p1:*:*:*:*:*:*","matchCriteriaId":"11BDA49F-C3E7-4D32-8105-E75525BFB2D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.2:p2:*:*:*:*:*:*","matchCriteriaId":"CE153B9F-721D-42ED-A662-C2597B7BF073"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.3:*:*:*:*:*:*:*","matchCriteriaId":"FCEE2677-16EE-484F-B2FB-FCA377E0D76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.3:p1:*:*:*:*:*:*","matchCriteriaId":"254243DD-2E3E-48ED-A92C-8F4FD405DA57"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.4:*:*:*:*:*:*:*","matchCriteriaId":"90798B9A-A1C6-4EC5-96BF-AF9C6FEFB63D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.4:p1:*:*:*:*:*:*","matchCriteriaId":"BCF734D8-1F01-498C-A917-5B528BFD9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.5:*:*:*:*:*:*:*","matchCriteriaId":"5A8ABE51-1535-44D9-B2A1-CC91021A29D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.5:p1:*:*:*:*:*:*","matchCriteriaId":"492F661C-45E4-4B9B-AD26-1873D91DBEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.6:*:*:*:*:*:*:*","matchCriteriaId":"546EB570-C2AC-473B-BED8-C47167D2593A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.6:p1:*:*:*:*:*:*","matchCriteriaId":"CA2C8269-9C66-4E41-A56C-ACC709DC2053"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.7:*:*:*:*:*:*:*","matchCriteriaId":"64382F2C-15AC-41FE-A936-CEB44C1AFB9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.7:p1:*:*:*:*:*:*","matchCriteriaId":"20B099B9-3D7E-47A4-94A5-B89759189D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.8:*:*:*:*:*:*:*","matchCriteriaId":"65A8629A-CFAE-4403-BEE7-622912483702"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.8:p1:*:*:*:*:*:*","matchCriteriaId":"50836FA3-8116-4D58-B73E-B4830FB3A551"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.9:*:*:*:*:*:*:*","matchCriteriaId":"D0607649-62FE-41CB-9444-53CD9C5B67C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.9:p1:*:*:*:*:*:*","matchCriteriaId":"3397D8DC-3410-401F-8854-BFCC35AD6686"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0B0FB8D5-75CB-4691-AB9F-B4FA46973421"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:7.0:p1:*:*:*:*:*:*","matchCriteriaId":"42DCED2D-76C5-49D1-A72D-E578CF686F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:7.1:*:*:*:*:*:*:*","matchCriteriaId":"67E1B240-BD86-41D3-BAC1-96005CB31DEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:7.1:p1:*:*:*:*:*:*","matchCriteriaId":"4BFC8587-FB9E-4FE2-B725-81CE3CE590F8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_device_access_virtual_customer_access_system:*:*:*:*:*:*:*:*","versionEndIncluding":"15.07","matchCriteriaId":"E172D760-1D72-4712-8A80-E9FB5B076E7F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.3","matchCriteriaId":"D3C6DA6A-9C87-4B7B-A52D-A66276B5DE82"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/44","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3446","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssh.com/txt/release-7.1p2","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/14/7","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537295/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/80695","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034671","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2869-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa109","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201601-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/44","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssh.com/txt/release-7.1p2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/14/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537295/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/80695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2869-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201601-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-3943","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-01-15T03:59:00.120","lastModified":"2026-06-17T00:26:31.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Advantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information about e-mail project accounts via unspecified vectors."},{"lang":"es","value":"Advantech WebAccess en versiones anteriores a 8.1 permite a atacantes remotos leer información sensible en texto plano sobre cuentas de proyecto de correos electrónicos a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"C1541818-B442-43BF-AFE1-B7D022D51AE2"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-3948","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-01-15T03:59:03.403","lastModified":"2026-06-17T00:26:31.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Advantech WebAccess en versiones anteriores a 8.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"C1541818-B442-43BF-AFE1-B7D022D51AE2"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-6423","sourceIdentifier":"psirt@cisco.com","published":"2016-01-15T03:59:08.997","lastModified":"2026-06-17T00:30:52.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The DCERPC Inspection implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 through 9.5.1 allows remote authenticated users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic, aka Bug ID CSCuu67782."},{"lang":"es","value":"La implementación DCERPC Inspection en Cisco Adaptive Security Appliance (ASA) Software 9.4.1 hasta la versión 9.5.1 permite a usuarios remotos autenticados eludir una ACL destinada a DCERPC-only mediante el envío de tráfico de red arbitrario, también conocido como Bug ID CSCuu67782."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8B313B0E-4200-427F-A156-1EDA681F439D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B8C49821-3BA5-4B44-84F5-113024FD030F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2011F264-53A5-4507-843B-46F66D285ADB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"73FB7BAF-7B3E-4091-A90B-FB19B38FFE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E29F95F5-6957-46F0-A0A2-CCACBBA14F90"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160111-asa","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034644","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160111-asa","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1897","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T03:59:23.063","lastModified":"2026-06-17T00:42:48.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file."},{"lang":"es","value":"FFmpeg 2.x permite a atacantes remotos llevar a cabo ataques de origen cruzado y leer archivos arbitrarios usando el protocolo concat en un archivo HTTP Live Streaming (HLS) M3U8, dando lugar a una petición HTTP externa en la que la cadena URL contiene la primera línea de un archivo local."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1337F5B-E9D9-4335-9E05-50018E59E530"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B27C609-E4B4-41CD-B228-38267AA3A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C97DBEE2-AF4E-4C2D-A185-F2A1B965D9DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FDEDAA24-D9E0-4384-B193-0C8814E4FDD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40B0C71E-341A-434A-90AE-326097AC85E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E83D73FF-E6F6-4399-B721-6C6275C52B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B07481C8-7CEB-4B81-B8E0-FF45DAA28870"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F9E69881-F5C7-4BB3-8BEB-C3C85CCD4B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B70C00A9-3562-45AB-B494-3BA91B6AFC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A30389D2-2873-4F15-B249-066B6D37AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0487928D-6630-4E23-BBA5-BED0A0F156B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C3088131-C48D-463B-8709-78A90EDE1FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DADF01E6-CB58-4593-B444-A59232EE83CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"06442F70-22B4-49E5-B25B-92E03973B57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"6E8FDCEA-336D-4BC9-AE93-9A0CCE443AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"B5505E58-DF70-4408-A347-FBB74D119566"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"5D406D9D-A51A-4EE6-88BF-279422A4DBA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B08A7BE-7C98-4659-808F-86A8EB4676D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4BF38DD1-2604-41AD-975A-56CC24767799"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C76392F6-6992-4B67-97BA-607A091DDA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"BB396E84-FE69-4E19-9937-B82A63D347AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF7C7-3730-43EC-B63E-B004D979E57A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"889B2130-CB88-487B-92FB-959DB44B8E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F9BE4879-972C-45EA-8253-46E5BE98FFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"653411BA-9F0B-4BFC-8A42-6576E956F96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"268DAF2F-4484-4212-AEB0-F9A10596F874"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"BCD7A424-DA4D-4508-B4EB-14A1BA65E596"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C190A7C8-2DAE-4F72-A620-9D184CBF10B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"6E8764DC-1C01-4C3E-A7AC-C8AF69F944E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"C7A45FBF-A89E-4F1C-B397-AB2A53DB805C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"78B3B781-7DEC-475C-A429-11D1B2F69CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"1FDCCDDC-6CDA-4D3B-BB4C-C370C69EB1C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"63209CD1-2710-462C-9AEC-A9DE2B41A7B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"336CB8D4-EBE0-4E34-9F71-DD0FEA8A99C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3:*:*:*:*:*:*:*","matchCriteriaId":"207DF654-326E-43A9-A5EC-BC239BF30422"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8794F8C5-A639-4C89-8C51-87787B29833F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5B50AB2A-FA23-4BB0-AA21-724E770ADEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"94BC4C82-371C-4B80-A615-AE0F15F1D6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D0E114D7-1323-4965-9680-8638ACDFF20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"A7BBF39F-668E-4771-99A0-F008B18B03F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"8CC929DD-566D-4906-8960-7BCFA7EE0384"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C3E41754-D2AB-4DE1-9ED9-A88F5E28ABFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"14D1738D-D85A-4650-9DAB-C626E7F52812"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A91B8DD5-FB80-47E7-8AF3-57D72CD4D034"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A1ADB969-FA62-4238-83DF-D5703603A9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"2D51D915-0FAF-449F-825B-1F2B1F9BAF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"19772D67-FAE5-4178-815D-4F511AE0411E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2A6097F4-A8D1-4070-A4B2-8479421C15DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8BBBBB2E-F454-44F7-8131-BFF852BC6DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"BE75C995-BCB6-4F46-AE8C-B86FBF2702E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"291E07BD-70C0-403B-ACB3-B49D2DED59C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"3FA5BAC2-C23B-4D4E-8CA1-57780761AC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"B0AE997C-54E3-4619-A269-E96E79164C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"7D13C0AC-8AB4-49E1-8A5C-98DCA6F01D08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5:*:*:*:*:*:*:*","matchCriteriaId":"F19A0139-AF47-434F-AFE9-ECC003675537"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DF38E5B7-AB89-418E-B507-3D660FE753C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5249D4A-D8D9-4B89-96B6-E957A2210750"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"29619AAD-6792-4B38-8DFB-706BEACA46F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"88FEC8E4-6B53-459E-B257-BEE424463592"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"8A0A20D5-EAFD-4B79-818A-B834E9A11C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"045AD46C-4D1E-42C9-9CFB-7924B58AE55F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1A56E5B7-2C52-49F0-8EB1-8A090ACBF1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"3B412DEE-9257-4588-83F2-F8DAC3F7E1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"35121E51-84B8-4725-B027-AE381CA1C9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6:*:*:*:*:*:*:*","matchCriteriaId":"DDCDF3E1-280C-4539-80F8-3B131461FDF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"CBE52F27-7AEC-40AB-9349-4C3E0E4743BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"01917E14-8DB6-43FE-A7B9-02C87308F09B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"6D3C37FF-6B21-409F-AC19-6C2F2F429109"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"3EE84614-E84C-496D-933C-5BEFD385451B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"59F6842E-041C-4076-8A2F-170DB783CC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B53136-92CB-45D4-8CA8-589D332AEBDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7:*:*:*:*:*:*:*","matchCriteriaId":"4876E244-8F7F-4EF2-B7D9-5146BCF02F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8D3F7BF7-D609-44B1-9536-4A07DC149824"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CBD5E478-1654-4A75-904D-8453DDC680A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"AF3C0E7A-533F-4AD7-BD0C-B91C0139790A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"150B1880-BFC3-42C4-B6A3-B96C67CD671D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAA8F265-CE4D-46FE-9871-FDD4D6738DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8:dev:*:*:*:*:*:*","matchCriteriaId":"756A3888-E151-4FEA-8D14-F45F3192BCBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3F5FAA-AD9E-4FC1-B91C-E9A561E95173"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"18A269C0-FE0F-4178-8195-955D373D9055"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"CCA6A474-DA24-4510-8AAA-5DF2E85B4D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"0D124F06-CF7E-4549-82EC-D0EC0B73D146"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://habrahabr.ru/company/mailru/blog/274855","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html","source":"cve@mitre.org"},{"url":"http://security.stackexchange.com/questions/110644","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2016/dsa-3506","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/14/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/80501","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034932","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.529036","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2944-1","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201606-09","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201705-08","source":"cve@mitre.org"},{"url":"https://www.kb.cert.org/vuls/id/772447","source":"cve@mitre.org"},{"url":"http://habrahabr.ru/company/mailru/blog/274855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.stackexchange.com/questions/110644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2016/dsa-3506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/14/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/80501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.529036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2944-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201606-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201705-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/772447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1898","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T03:59:23.923","lastModified":"2026-06-17T00:42:49.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file."},{"lang":"es","value":"FFmpeg 2.x permite a atacantes remotos llevar a cabo ataques de origen cruzado y leer archivos arbitrarios usando el protocolo subfile en un archivo HTTP Live Streaming (HLS) M3U8, dando lugar a una petición HTTP externa en la que la cadena URL contiene una línea arbitraria de un archivo local."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1337F5B-E9D9-4335-9E05-50018E59E530"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B27C609-E4B4-41CD-B228-38267AA3A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C97DBEE2-AF4E-4C2D-A185-F2A1B965D9DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FDEDAA24-D9E0-4384-B193-0C8814E4FDD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40B0C71E-341A-434A-90AE-326097AC85E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E83D73FF-E6F6-4399-B721-6C6275C52B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B07481C8-7CEB-4B81-B8E0-FF45DAA28870"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F9E69881-F5C7-4BB3-8BEB-C3C85CCD4B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B70C00A9-3562-45AB-B494-3BA91B6AFC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A30389D2-2873-4F15-B249-066B6D37AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0487928D-6630-4E23-BBA5-BED0A0F156B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C3088131-C48D-463B-8709-78A90EDE1FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DADF01E6-CB58-4593-B444-A59232EE83CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"06442F70-22B4-49E5-B25B-92E03973B57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"6E8FDCEA-336D-4BC9-AE93-9A0CCE443AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"B5505E58-DF70-4408-A347-FBB74D119566"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"5D406D9D-A51A-4EE6-88BF-279422A4DBA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B08A7BE-7C98-4659-808F-86A8EB4676D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4BF38DD1-2604-41AD-975A-56CC24767799"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C76392F6-6992-4B67-97BA-607A091DDA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"BB396E84-FE69-4E19-9937-B82A63D347AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF7C7-3730-43EC-B63E-B004D979E57A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"889B2130-CB88-487B-92FB-959DB44B8E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F9BE4879-972C-45EA-8253-46E5BE98FFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"653411BA-9F0B-4BFC-8A42-6576E956F96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"268DAF2F-4484-4212-AEB0-F9A10596F874"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"BCD7A424-DA4D-4508-B4EB-14A1BA65E596"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C190A7C8-2DAE-4F72-A620-9D184CBF10B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"6E8764DC-1C01-4C3E-A7AC-C8AF69F944E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"C7A45FBF-A89E-4F1C-B397-AB2A53DB805C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"78B3B781-7DEC-475C-A429-11D1B2F69CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"1FDCCDDC-6CDA-4D3B-BB4C-C370C69EB1C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"63209CD1-2710-462C-9AEC-A9DE2B41A7B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"336CB8D4-EBE0-4E34-9F71-DD0FEA8A99C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3:*:*:*:*:*:*:*","matchCriteriaId":"207DF654-326E-43A9-A5EC-BC239BF30422"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8794F8C5-A639-4C89-8C51-87787B29833F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5B50AB2A-FA23-4BB0-AA21-724E770ADEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"94BC4C82-371C-4B80-A615-AE0F15F1D6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D0E114D7-1323-4965-9680-8638ACDFF20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"A7BBF39F-668E-4771-99A0-F008B18B03F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"8CC929DD-566D-4906-8960-7BCFA7EE0384"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C3E41754-D2AB-4DE1-9ED9-A88F5E28ABFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"14D1738D-D85A-4650-9DAB-C626E7F52812"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A91B8DD5-FB80-47E7-8AF3-57D72CD4D034"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A1ADB969-FA62-4238-83DF-D5703603A9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"2D51D915-0FAF-449F-825B-1F2B1F9BAF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"19772D67-FAE5-4178-815D-4F511AE0411E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2A6097F4-A8D1-4070-A4B2-8479421C15DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8BBBBB2E-F454-44F7-8131-BFF852BC6DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"BE75C995-BCB6-4F46-AE8C-B86FBF2702E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"291E07BD-70C0-403B-ACB3-B49D2DED59C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"3FA5BAC2-C23B-4D4E-8CA1-57780761AC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"B0AE997C-54E3-4619-A269-E96E79164C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"7D13C0AC-8AB4-49E1-8A5C-98DCA6F01D08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5:*:*:*:*:*:*:*","matchCriteriaId":"F19A0139-AF47-434F-AFE9-ECC003675537"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DF38E5B7-AB89-418E-B507-3D660FE753C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5249D4A-D8D9-4B89-96B6-E957A2210750"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"29619AAD-6792-4B38-8DFB-706BEACA46F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"88FEC8E4-6B53-459E-B257-BEE424463592"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"8A0A20D5-EAFD-4B79-818A-B834E9A11C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"045AD46C-4D1E-42C9-9CFB-7924B58AE55F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1A56E5B7-2C52-49F0-8EB1-8A090ACBF1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"3B412DEE-9257-4588-83F2-F8DAC3F7E1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"35121E51-84B8-4725-B027-AE381CA1C9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6:*:*:*:*:*:*:*","matchCriteriaId":"DDCDF3E1-280C-4539-80F8-3B131461FDF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"CBE52F27-7AEC-40AB-9349-4C3E0E4743BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"01917E14-8DB6-43FE-A7B9-02C87308F09B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"6D3C37FF-6B21-409F-AC19-6C2F2F429109"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"3EE84614-E84C-496D-933C-5BEFD385451B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"59F6842E-041C-4076-8A2F-170DB783CC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B53136-92CB-45D4-8CA8-589D332AEBDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7:*:*:*:*:*:*:*","matchCriteriaId":"4876E244-8F7F-4EF2-B7D9-5146BCF02F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8D3F7BF7-D609-44B1-9536-4A07DC149824"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CBD5E478-1654-4A75-904D-8453DDC680A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"AF3C0E7A-533F-4AD7-BD0C-B91C0139790A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"150B1880-BFC3-42C4-B6A3-B96C67CD671D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAA8F265-CE4D-46FE-9871-FDD4D6738DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8:dev:*:*:*:*:*:*","matchCriteriaId":"756A3888-E151-4FEA-8D14-F45F3192BCBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3F5FAA-AD9E-4FC1-B91C-E9A561E95173"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"18A269C0-FE0F-4178-8195-955D373D9055"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"CCA6A474-DA24-4510-8AAA-5DF2E85B4D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"0D124F06-CF7E-4549-82EC-D0EC0B73D146"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://habrahabr.ru/company/mailru/blog/274855","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3506","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/14/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/80501","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034932","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.529036","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2944-1","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201606-09","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201705-08","source":"cve@mitre.org"},{"url":"https://www.kb.cert.org/vuls/id/772447","source":"cve@mitre.org"},{"url":"http://habrahabr.ru/company/mailru/blog/274855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/14/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/80501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.529036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2944-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201606-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201705-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/772447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8675","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T19:59:00.117","lastModified":"2026-06-17T00:35:01.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei S5300 Campus Series switches with software before V200R005SPH008 do not mask the password when uploading files, which allows physically proximate attackers to obtain sensitive password information by reading the display."},{"lang":"es","value":"Switches Huawei S5300 Campus Series con software anterior a V200R005SPH008 no enmascara la contraseña cuando se cargan archivos, lo que permite a atacantes físicamente próximos obtener información sensible de contraseña leyendo la pantalla."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300_firmware:v200r005c02:*:*:*:*:*:*:*","matchCriteriaId":"EDC356D3-F015-46A0-8F7A-1C594F19535B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5300:*:*:*:*:*:*:*:*","matchCriteriaId":"EF480893-332C-48EB-9402-0E3ABEE28C2A"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160112-01-switch-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160112-01-switch-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8685","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T19:59:01.837","lastModified":"2026-06-17T00:35:02.673","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) external calendar url or (2) the bank name field in the \"import external calendar\" page."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Dolibarr ERP/CRM 3.8.3 y versiones anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de (1) la url de calendario externa o (2) el campo bank name en la página \"import external calendar\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dolibarr:dolibarr:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.2","matchCriteriaId":"5B755DDB-1C9A-48E7-8514-7568BA191B86"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135256/dolibarr-HTML-Injection.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Jan/40","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://github.com/Dolibarr/dolibarr/issues/4291","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/135256/dolibarr-HTML-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Jan/40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://github.com/Dolibarr/dolibarr/issues/4291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8688","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T19:59:03.133","lastModified":"2026-06-17T00:35:02.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza."},{"lang":"es","value":"Gajim en versiones anteriores a 0.16.5 permite a atacantes remotos modificar la lista e interceptar mensajes a través de una inserción en la lista IQ stanza manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gajim:gajim:*:*:*:*:*:*:*:*","versionEndIncluding":"0.16.4","matchCriteriaId":"B5336977-7521-439E-A0E0-48C07796F749"}]}]}],"references":[{"url":"http://gultsch.de/gajim_roster_push_and_message_interception.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175503.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175526.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00027.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3492","source":"cve@mitre.org"},{"url":"https://hg.gajim.org/gajim/file/gajim-0.16.5/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://gultsch.de/gajim_roster_push_and_message_interception.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175526.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hg.gajim.org/gajim/file/gajim-0.16.5/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8749","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T19:59:04.133","lastModified":"2026-06-17T00:35:09.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The volume_utils._parse_volume_info function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the StorageError message when using the Xen backend, which might allow attackers to obtain sensitive password information by reading log files or other unspecified vectors."},{"lang":"es","value":"La función volume_utils._parse_volume_info en OpenStack Compute (Nova) en versiones anteriores a 2015.1.3 (kilo) y 12.0.x en versiones anteriores a 12.0.1 (liberty) incluye el diccionario connection_info en el mensaje StorageError cuando utiliza el backend Xen, lo que permitiría a atacantes obtener información sensible de contraseña leyendo archivos de registro u otros vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.0.1","matchCriteriaId":"5ACD733B-4598-483E-A4D9-1832A4FF8C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","versionStartIncluding":"2015.1.0","versionEndExcluding":"2015.1.3","matchCriteriaId":"91367215-987B-46AE-A997-016C0BD8BEF3"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/01/07/8","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/07/9","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/80189","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.launchpad.net/nova/+bug/1516765","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/07/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/07/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/80189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.launchpad.net/nova/+bug/1516765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1256","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T19:59:05.210","lastModified":"2026-06-17T00:41:35.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R7, 14.1 before 14.1R5, 14.1X53 before 14.1X53-D18 or 14.1X53-D30, 14.1X55 before 14.1X55-D25, 14.2 before 14.2R4, 15.1 before 15.1R2, and 15.1X49 before 15.1X49-D10 allow remote attackers to cause a denial of service via a malformed IGMPv3 packet, aka a \"multicast denial of service.\""},{"lang":"es","value":"Juniper Junos OS en versiones anteriores a 12.1X44-D55, 12.1X46 en versiones anteriores a 12.1X46-D40, 12.1X47 en versiones anteriores a 12.1X47-D25, 12.3 en versiones anteriores a 12.3R10, 12.3X48 en versiones anteriores a 12.3X48-D20, 13.2 en versiones anteriores a 13.2R8, 13.2X51 en versiones anteriores a 13.2X51-D40, 13.3 en versiones anteriores a 13.3R7, 14.1 en versiones anteriores a 14.1R5, 14.1X53 en versiones anteriores a 14.1X53-D18 o 14.1X53-D30, 14.1X55 en versiones anteriores a 14.1X55-D25, 14.2 en versiones anteriores a 14.2R4, 15.1 en versiones anteriores a 15.1R2 y 15.1X49 en versiones anteriores a 15.1X49-D10 permite a atacantes remotos provocar una denegación de servicio a través de un paquete IGMPv3 mal formado, también conocido como un \"multicast denial of service\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*","matchCriteriaId":"1B307477-C5F2-4D98-AF4C-640D326164C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*","matchCriteriaId":"AC405A12-112D-4C9D-90DA-6ED484109793"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*","matchCriteriaId":"3FC42F2D-7593-4DBE-AE89-A6B78E7F9089"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*","matchCriteriaId":"731A6469-3DE0-491A-BCC5-7642FB347ACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*","matchCriteriaId":"D12A8119-3E59-4062-9A04-1F6EA48B78E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*","matchCriteriaId":"E8B33B80-3189-4412-BFE0-359E755AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*","matchCriteriaId":"C0E8F87E-DEB2-4849-ABB5-75A67CFD2D39"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d40:*:*:*:*:*:*","matchCriteriaId":"BDE231CE-0D93-4293-8720-4CCEE2EA651E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d45:*:*:*:*:*:*","matchCriteriaId":"74253C79-C13F-4FBD-B173-8E87A62845DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d50:*:*:*:*:*:*","matchCriteriaId":"96831D1B-881B-4B18-A330-9E32A0D21148"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*","matchCriteriaId":"CFB89F64-16BB-4A14-9084-B338668D7FF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*","matchCriteriaId":"A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*","matchCriteriaId":"4FD4237A-C257-4D8A-ABC4-9B2160530A4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*","matchCriteriaId":"5A449C87-C5C3-48FE-9E46-64ED5DD5F193"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*","matchCriteriaId":"F4B6215F-76BF-473F-B325-0975B0EB101E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*","matchCriteriaId":"A1C4A10C-49A3-4103-9E56-F881113BC5D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*","matchCriteriaId":"50E7FD07-A309-48EC-A520-C7F0FA35865C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*","matchCriteriaId":"0BB3DE56-1B04-4A53-B4A4-93286FC98463"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*","matchCriteriaId":"181C0D30-4476-48EE-A4A4-3B2461F4AC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*","matchCriteriaId":"63F559A2-2744-4771-9420-C70AA87496A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*","matchCriteriaId":"040A6307-236E-4FAA-9A74-676F1DB0CF17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8E014A0D-0054-4EBA-BA1F-035B74BD822F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*","matchCriteriaId":"371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*","matchCriteriaId":"7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*","matchCriteriaId":"C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*","matchCriteriaId":"960059B5-0701-4B75-AB51-0A430247D9F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*","matchCriteriaId":"1D1DCA52-DA81-495B-B516-5571F01E3B0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*","matchCriteriaId":"05E187F6-BACD-4DD5-B393-B2FE4349053A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*","matchCriteriaId":"3C240840-A6BC-4E3D-A60D-22F08E67E2B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*","matchCriteriaId":"CC90563F-6BCB-4D77-8FD4-584E3A6C7741"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*","matchCriteriaId":"5AD03BA7-D9EC-420F-97C4-383F79D6873F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:*:*:*:*:*:*:*","matchCriteriaId":"CAB7D840-9469-4CE2-8DBF-017A44741374"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*","matchCriteriaId":"D3A0A607-7D3C-4F2A-B5F5-576A70649CB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*","matchCriteriaId":"32E9620A-7C0A-474C-919E-13609FFE580D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*","matchCriteriaId":"672D3A38-92B4-4F33-82A6-B2D3F3403AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r4:*:*:*:*:*:*","matchCriteriaId":"F5C24441-6E9D-4EF7-8903-A109A52340C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r5:*:*:*:*:*:*","matchCriteriaId":"7CB98C4F-617F-4F51-A86E-D1EBE2BDE583"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*","matchCriteriaId":"3947A516-2054-48B3-ADFD-3CF88EC2288D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*","matchCriteriaId":"D0951235-4A0A-4200-A7B1-9FF4540A3755"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*","matchCriteriaId":"9E3A9AB1-202A-4480-8FFD-872C79325854"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d25:*:*:*:*:*:*","matchCriteriaId":"7478F581-8A89-49D7-B9F9-E0E90BEEAEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d26:*:*:*:*:*:*","matchCriteriaId":"28B80348-B130-4178-BFD9-4AE390E139D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d30:*:*:*:*:*:*","matchCriteriaId":"D1EE6518-C224-4019-8393-85893AC29898"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d35:*:*:*:*:*:*","matchCriteriaId":"718A304D-1DBD-4BC1-B038-2BD4755E8793"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*","matchCriteriaId":"E4AF5DAA-62F5-491F-A9CE-098970671D43"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"3FF9FF91-9184-4D18-8288-9110E35F4AE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*","matchCriteriaId":"0F2E537B-9504-4912-B231-0D83F4459469"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2-s2:*:*:*:*:*:*","matchCriteriaId":"99A946CE-FFC7-4F16-82F4-795A6E5B84C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*","matchCriteriaId":"4BCB3837-DCBC-4997-B63E-E47957584709"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*","matchCriteriaId":"6C88E2B1-469B-442B-9FC0-7C9408CE3917"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*","matchCriteriaId":"1FB5A368-E582-4DFD-87B4-C887DA908E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*","matchCriteriaId":"70ED0B93-2CFC-474F-B199-F78E1C67E8C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*","matchCriteriaId":"6237291A-B861-4D53-B7AA-C53A44B76896"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"9C778627-820A-48F5-9680-0205D6DB5EB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"FA7F03DC-73A2-4760-B386-2A57E9C97E65"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"0CA10003-D52B-4110-9D7A-F50895E6BA17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*","matchCriteriaId":"1B2D843A-8ADE-4888-8960-B48394DEA1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*","matchCriteriaId":"9C7FCCC1-B151-465A-8327-26DB5DC074F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*","matchCriteriaId":"09771B8F-8B2A-4E8B-B4D3-80677697FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*","matchCriteriaId":"E1AA12C5-4520-4F79-80BE-66112F7AFC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x55:*:*:*:*:*:*:*","matchCriteriaId":"A51AFC81-0CF9-49BD-89A7-2C5729A09250"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*","matchCriteriaId":"79149AA0-17D1-4522-894F-C025F7A30FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*","matchCriteriaId":"30726286-7CB1-4E5D-AE44-2B4D84795900"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*","matchCriteriaId":"33BE028F-2961-414A-9D42-C4861566C2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*","matchCriteriaId":"D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10714","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035107","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1257","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T19:59:06.210","lastModified":"2026-06-17T00:41:35.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R1 before 14.2R5, 14.2R3 before 14.2R3-S4, 14.2R4 before 14.2R4-S1, 15.1 before 15.1R3, 15.1F2 before 15.1F2-S2, and 15.1X49 before 15.1X49-D40, when LDP is enabled, allows remote attackers to cause a denial of service (RPD routing process crash) via a crafted LDP packet."},{"lang":"es","value":"El Routing Engine en Juniper Junos OS 13.2R5 hasta la versión 13.2R8, 13.3R1 en versiones anteriores a 13.3R8, 13.3R7 en versiones anteriores a 13.3R7-S3, 14.1R1 en versiones anteriores a 14.1R6, 14.1R3 en versiones anteriores a 14.1R3-S9, 14.1R4 en versiones anteriores a 14.1R4-S7, 14.1X51 en versiones anteriores a 14.1X51-D65, 14.1X53 en versiones anteriores a 14.1X53-D12, 14.1X53 en versiones anteriores a 14.1X53-D28, 14.1X53 en versiones anteriores a 4.1X53-D35, 14.2R1 en versiones anteriores a 14.2R5, 14.2R3 en versiones anteriores a 14.2R3-S4, 14.2R4 en versiones anteriores a 14.2R4-S1, 15.1 en versiones anteriores a 15.1R3, 15.1F2 en versiones anteriores a 15.1F2-S2 y 15.1X49 en versiones anteriores a 15.1X49-D40, cuando LDP está habilitado, permite a atacantes remotos provocar una denegación de servicio (caída del proceso de enrutamiento RPD) a través de un paquete LDP manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r5:*:*:*:*:*:*","matchCriteriaId":"7CB98C4F-617F-4F51-A86E-D1EBE2BDE583"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r6:*:*:*:*:*:*","matchCriteriaId":"A24E3EA6-810D-4885-8BE5-8A70E61E7589"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r7:*:*:*:*:*:*","matchCriteriaId":"767182F3-E97B-4E21-8FD5-A50C9F42ED60"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r7-s1:*:*:*:*:*:*","matchCriteriaId":"8935F46F-084A-473E-94B1-011DA15D52AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r7-s2:*:*:*:*:*:*","matchCriteriaId":"2D252DA6-1269-42A0-A6DB-070AAC8396B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"3FF9FF91-9184-4D18-8288-9110E35F4AE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*","matchCriteriaId":"0F2E537B-9504-4912-B231-0D83F4459469"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*","matchCriteriaId":"4BCB3837-DCBC-4997-B63E-E47957584709"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*","matchCriteriaId":"6C88E2B1-469B-442B-9FC0-7C9408CE3917"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*","matchCriteriaId":"1FB5A368-E582-4DFD-87B4-C887DA908E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*","matchCriteriaId":"70ED0B93-2CFC-474F-B199-F78E1C67E8C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*","matchCriteriaId":"B8D270B6-1681-4EC5-9BC2-1312A50C8E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"9C778627-820A-48F5-9680-0205D6DB5EB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"FA7F03DC-73A2-4760-B386-2A57E9C97E65"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"0CA10003-D52B-4110-9D7A-F50895E6BA17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*","matchCriteriaId":"1B2D843A-8ADE-4888-8960-B48394DEA1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*","matchCriteriaId":"3BE66516-A06D-4C0F-8346-DFC8865C8FE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x51:*:*:*:*:*:*:*","matchCriteriaId":"4C09DA24-7852-42F7-9F32-5CF87B1E0A6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x51:d60:*:*:*:*:*:*","matchCriteriaId":"F8718E33-F28E-40F2-AD31-F85C4152830C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*","matchCriteriaId":"9C7FCCC1-B151-465A-8327-26DB5DC074F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*","matchCriteriaId":"09771B8F-8B2A-4E8B-B4D3-80677697FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*","matchCriteriaId":"55E2F909-E1CC-45AA-ABA9-58178B751808"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*","matchCriteriaId":"807C8110-5CC2-45F0-B094-BBF9C0B63BDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*","matchCriteriaId":"547E5737-D385-49B9-A69F-A3B185A34116"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*","matchCriteriaId":"79149AA0-17D1-4522-894F-C025F7A30FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*","matchCriteriaId":"30726286-7CB1-4E5D-AE44-2B4D84795900"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*","matchCriteriaId":"33BE028F-2961-414A-9D42-C4861566C2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*","matchCriteriaId":"E85AB30C-03FC-44DB-A8AA-B916A905CA66"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*","matchCriteriaId":"BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*","matchCriteriaId":"1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*","matchCriteriaId":"AC196685-3B0C-4754-AE6A-6BE456CC6B52"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*","matchCriteriaId":"D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*","matchCriteriaId":"0E6CD065-EC06-4846-BD2A-D3CA7866070F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*","matchCriteriaId":"18468579-0195-4DDE-BAA5-4BE4068F3A69"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10715","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035117","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1258","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T19:59:07.383","lastModified":"2026-06-17T00:41:35.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Embedthis Appweb, as used in J-Web in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R8, 14.1 before 14.1R6, and 14.2 before 14.2R5, allows remote attackers to cause a denial of service (J-Web crash) via unspecified vectors."},{"lang":"es","value":"Embedthis Appweb, tal como se utiliza en J-Web en Juniper Junos OS en versiones anteriores a 12.1X44-D60, 12.1X46 en versiones anteriores a 12.1X46-D45, 12.1X47 en versiones anteriores a 12.1X47-D30, 12.3 en versiones anteriores a 12.3R10, 12.3X48 en versiones anteriores a 12.3X48-D20, 13.2X51 en versiones anteriores a 13.2X51-D20, 13.3 en versiones anteriores a 13.3R8, 14.1 en versiones anteriores a 14.1R6 y 14.2 en versiones anteriores a 14.2R5, permite a atacantes remotos provocar una denegación de servicio (caída de J-Web) a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*","matchCriteriaId":"1B307477-C5F2-4D98-AF4C-640D326164C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*","matchCriteriaId":"AC405A12-112D-4C9D-90DA-6ED484109793"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*","matchCriteriaId":"3FC42F2D-7593-4DBE-AE89-A6B78E7F9089"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*","matchCriteriaId":"731A6469-3DE0-491A-BCC5-7642FB347ACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*","matchCriteriaId":"D12A8119-3E59-4062-9A04-1F6EA48B78E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*","matchCriteriaId":"E8B33B80-3189-4412-BFE0-359E755AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*","matchCriteriaId":"C0E8F87E-DEB2-4849-ABB5-75A67CFD2D39"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d40:*:*:*:*:*:*","matchCriteriaId":"BDE231CE-0D93-4293-8720-4CCEE2EA651E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d45:*:*:*:*:*:*","matchCriteriaId":"74253C79-C13F-4FBD-B173-8E87A62845DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d50:*:*:*:*:*:*","matchCriteriaId":"96831D1B-881B-4B18-A330-9E32A0D21148"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d55:*:*:*:*:*:*","matchCriteriaId":"802A9024-3921-49CA-9B38-3BF8937687C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*","matchCriteriaId":"CFB89F64-16BB-4A14-9084-B338668D7FF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*","matchCriteriaId":"A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*","matchCriteriaId":"4FD4237A-C257-4D8A-ABC4-9B2160530A4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*","matchCriteriaId":"5A449C87-C5C3-48FE-9E46-64ED5DD5F193"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*","matchCriteriaId":"F4B6215F-76BF-473F-B325-0975B0EB101E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*","matchCriteriaId":"A1C4A10C-49A3-4103-9E56-F881113BC5D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*","matchCriteriaId":"50E7FD07-A309-48EC-A520-C7F0FA35865C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*","matchCriteriaId":"F868948A-04D7-473B-971F-721302653633"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*","matchCriteriaId":"0BB3DE56-1B04-4A53-B4A4-93286FC98463"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*","matchCriteriaId":"181C0D30-4476-48EE-A4A4-3B2461F4AC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*","matchCriteriaId":"63F559A2-2744-4771-9420-C70AA87496A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*","matchCriteriaId":"040A6307-236E-4FAA-9A74-676F1DB0CF17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*","matchCriteriaId":"350A0F1E-1057-4A8E-AB0B-7615B3877858"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8E014A0D-0054-4EBA-BA1F-035B74BD822F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*","matchCriteriaId":"371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*","matchCriteriaId":"7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*","matchCriteriaId":"C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*","matchCriteriaId":"960059B5-0701-4B75-AB51-0A430247D9F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*","matchCriteriaId":"1D1DCA52-DA81-495B-B516-5571F01E3B0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*","matchCriteriaId":"05E187F6-BACD-4DD5-B393-B2FE4349053A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*","matchCriteriaId":"3C240840-A6BC-4E3D-A60D-22F08E67E2B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*","matchCriteriaId":"CC90563F-6BCB-4D77-8FD4-584E3A6C7741"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*","matchCriteriaId":"5AD03BA7-D9EC-420F-97C4-383F79D6873F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*","matchCriteriaId":"7192552C-7D4A-4D95-BA79-CDF465E27D37"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:*:*:*:*:*:*:*","matchCriteriaId":"8B73BE56-F298-4EC5-88A3-D9808B89B63B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*","matchCriteriaId":"3947A516-2054-48B3-ADFD-3CF88EC2288D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*","matchCriteriaId":"D0951235-4A0A-4200-A7B1-9FF4540A3755"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*","matchCriteriaId":"9E3A9AB1-202A-4480-8FFD-872C79325854"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d25:*:*:*:*:*:*","matchCriteriaId":"7478F581-8A89-49D7-B9F9-E0E90BEEAEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d26:*:*:*:*:*:*","matchCriteriaId":"28B80348-B130-4178-BFD9-4AE390E139D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d30:*:*:*:*:*:*","matchCriteriaId":"D1EE6518-C224-4019-8393-85893AC29898"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d35:*:*:*:*:*:*","matchCriteriaId":"718A304D-1DBD-4BC1-B038-2BD4755E8793"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*","matchCriteriaId":"E4AF5DAA-62F5-491F-A9CE-098970671D43"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"3FF9FF91-9184-4D18-8288-9110E35F4AE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*","matchCriteriaId":"0F2E537B-9504-4912-B231-0D83F4459469"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*","matchCriteriaId":"4BCB3837-DCBC-4997-B63E-E47957584709"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*","matchCriteriaId":"6C88E2B1-469B-442B-9FC0-7C9408CE3917"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*","matchCriteriaId":"1FB5A368-E582-4DFD-87B4-C887DA908E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*","matchCriteriaId":"70ED0B93-2CFC-474F-B199-F78E1C67E8C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*","matchCriteriaId":"B8D270B6-1681-4EC5-9BC2-1312A50C8E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*","matchCriteriaId":"6237291A-B861-4D53-B7AA-C53A44B76896"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"9C778627-820A-48F5-9680-0205D6DB5EB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"FA7F03DC-73A2-4760-B386-2A57E9C97E65"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"0CA10003-D52B-4110-9D7A-F50895E6BA17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*","matchCriteriaId":"1B2D843A-8ADE-4888-8960-B48394DEA1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*","matchCriteriaId":"3BE66516-A06D-4C0F-8346-DFC8865C8FE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*","matchCriteriaId":"D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*","matchCriteriaId":"79149AA0-17D1-4522-894F-C025F7A30FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*","matchCriteriaId":"30726286-7CB1-4E5D-AE44-2B4D84795900"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*","matchCriteriaId":"33BE028F-2961-414A-9D42-C4861566C2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*","matchCriteriaId":"E85AB30C-03FC-44DB-A8AA-B916A905CA66"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10720","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035116","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1260","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T19:59:08.400","lastModified":"2026-06-17T00:41:35.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Juniper Junos OS before 13.2X51-D36, 14.1X53 before 14.1X53-D25, and 15.2 before 15.2R1 on EX4300 series switches allow remote attackers to cause a denial of service (network loop and bandwidth consumption) via unspecified vectors related to Spanning Tree Protocol (STP) traffic."},{"lang":"es","value":"Juniper Junos OS en versiones anteriores a 13.2X51-D36, 14.1X53 en versiones anteriores a 14.1X53-D25 y 15.2 en versiones anteriores a 15.2R1 en switches de las series EX4300 permite a atacantes remotos provocar una denegación de servicio (bucle de red y consumo de ancho de banda) a través de vectores no especificados relacionados con tráfico Spanning Tree Protocol (STP)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*","matchCriteriaId":"3947A516-2054-48B3-ADFD-3CF88EC2288D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*","matchCriteriaId":"D0951235-4A0A-4200-A7B1-9FF4540A3755"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*","matchCriteriaId":"9E3A9AB1-202A-4480-8FFD-872C79325854"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d25:*:*:*:*:*:*","matchCriteriaId":"7478F581-8A89-49D7-B9F9-E0E90BEEAEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d26:*:*:*:*:*:*","matchCriteriaId":"28B80348-B130-4178-BFD9-4AE390E139D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d30:*:*:*:*:*:*","matchCriteriaId":"D1EE6518-C224-4019-8393-85893AC29898"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d35:*:*:*:*:*:*","matchCriteriaId":"718A304D-1DBD-4BC1-B038-2BD4755E8793"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*","matchCriteriaId":"9C7FCCC1-B151-465A-8327-26DB5DC074F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*","matchCriteriaId":"09771B8F-8B2A-4E8B-B4D3-80677697FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*","matchCriteriaId":"E1AA12C5-4520-4F79-80BE-66112F7AFC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*","matchCriteriaId":"807C8110-5CC2-45F0-B094-BBF9C0B63BDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:r1:*:*:*:*:*:*","matchCriteriaId":"F976AE31-75F6-4A52-A8F0-DCDDF62BBEEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.2:*:*:*:*:*:*:*","matchCriteriaId":"57342DBF-5D18-42C7-B69C-C603E2C4D5AE"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035106","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1262","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T19:59:09.273","lastModified":"2026-06-17T00:41:36.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled, allow remote attackers to cause a denial of service (flowd crash) via a crafted RTSP packet."},{"lang":"es","value":"Juniper Junos OS en versiones anteriores a 12.1X46-D45, 12.1X47 en versiones anteriores a 12.1X47-D30, 12.1X48 en versiones anteriores a 12.3X48-D20 y 15.1X49 en versiones anteriores a 15.1X49-D30 en dispositivos de las series SRX, cuando el Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) está habilitado, permite a atacantes remotos provocar una denegación de servicio (caída de flowd) a través de un paquete RTSP manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:*:d40:*:*:*:*:*:*","versionEndIncluding":"12.1x46","matchCriteriaId":"4711A29F-326C-44CF-B079-FFA2E5C0B2C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*","matchCriteriaId":"0BB3DE56-1B04-4A53-B4A4-93286FC98463"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*","matchCriteriaId":"181C0D30-4476-48EE-A4A4-3B2461F4AC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*","matchCriteriaId":"63F559A2-2744-4771-9420-C70AA87496A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*","matchCriteriaId":"040A6307-236E-4FAA-9A74-676F1DB0CF17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*","matchCriteriaId":"18468579-0195-4DDE-BAA5-4BE4068F3A69"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035108","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1910","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T20:59:01.583","lastModified":"2026-06-17T00:42:50.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290."},{"lang":"es","value":"El User Management Engine (UME) en SAP NetWeaver 7.4 permite a atacantes descifrar datos no especificados a través de vectores desconocidos, también conocido como SAP Security Note 2191290."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*","matchCriteriaId":"F019F7F5-7740-4BD4-850F-D7A1923C6200"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2016/Apr/60","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/80920","source":"cve@mitre.org"},{"url":"https://erpscan.io/advisories/erpscan-16-003-sap-netweaver-7-4-cryptographic-issues/","source":"cve@mitre.org"},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/43495/","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Apr/60","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/80920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://erpscan.io/advisories/erpscan-16-003-sap-netweaver-7-4-cryptographic-issues/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/43495/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1911","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T20:59:02.957","lastModified":"2026-06-17T00:42:50.893","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) Runtime Workbench (RWB) or (2) Pmitest servlet in the Process Monitoring Infrastructure (PMI), aka SAP Security Notes 2206793 and 2234918."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en SAP NetWeaver 7.4 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores relacionados con el (1) Runtime Workbench (RWB) o (2) Pmitest servlet en el Process Monitoring Infrastructure (PMI), vulnerabilidad también también conocida como SAP Security Notes 2206793 y 2234918."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*","matchCriteriaId":"F019F7F5-7740-4BD4-850F-D7A1923C6200"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2016/Apr/58","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Apr/64","source":"cve@mitre.org"},{"url":"https://erpscan.io/advisories/erpscan-16-001-xss-sap-netweaver-7-4-mdt-servlet/","source":"cve@mitre.org"},{"url":"https://erpscan.io/advisories/erpscan-16-004-sap-netweaver-7-4-pmitest-servlet-xss/","source":"cve@mitre.org"},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Apr/58","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Apr/64","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://erpscan.io/advisories/erpscan-16-001-xss-sap-netweaver-7-4-mdt-servlet/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://erpscan.io/advisories/erpscan-16-004-sap-netweaver-7-4-pmitest-servlet-xss/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1912","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T20:59:04.363","lastModified":"2026-06-17T00:42:51.017","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lastname, (2) firstname, (3) email, (4) job, or (5) signature parameter to htdocs/user/card.php."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Dolibarr ERP/CRM 3.8.3 permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro (1) lastname, (2) firstname, (3) email, (4) job o (5) signature en htdocs/user/card.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dolibarr:dolibarr:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.2","matchCriteriaId":"5B755DDB-1C9A-48E7-8514-7568BA191B86"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135201/Dolibarr-3.8.3-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.information-security.fr/xss-dolibarr-version-3-8-3/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://github.com/Dolibarr/dolibarr/issues/4341","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8","source":"cve@mitre.org"},{"url":"https://twitter.com/MickaelDorigny/status/684456187870457857","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/135201/Dolibarr-3.8.3-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.information-security.fr/xss-dolibarr-version-3-8-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://github.com/Dolibarr/dolibarr/issues/4341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://twitter.com/MickaelDorigny/status/684456187870457857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1913","sourceIdentifier":"cve@mitre.org","published":"2016-01-15T20:59:05.503","lastModified":"2026-06-17T00:42:51.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Redhen module 7.x-1.x before 7.x-1.11 for Drupal allow remote authenticated users with certain access to inject arbitrary web script or HTML via unspecified vectors, related to (1) individual contacts, (2) notes, or (3) engagement scores."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en el módulo Redhen 7.x-1.x versiones anteriores a 7.x-1.11 para Drupal permiten a usuarios remotos autenticados con cierto acceso inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, relacionado con (1) contactos individuales, (2) notas o (3) puntuaciones de compromiso."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.0:*:*:*:*:drupal:*:*","matchCriteriaId":"8EBCE80D-0E67-4959-B6CF-71079E775F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.0:alpha1:*:*:*:drupal:*:*","matchCriteriaId":"79D6DD3E-D0DB-4192-ACFA-A8F76166C723"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.0:alpha2:*:*:*:drupal:*:*","matchCriteriaId":"033179D3-6F8B-4AE6-BC69-0F39A66A9A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.0:alpha3:*:*:*:drupal:*:*","matchCriteriaId":"36B135E3-AFE1-48AC-9286-9C4F00A8A425"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.0:beta1:*:*:*:drupal:*:*","matchCriteriaId":"9BEAD79C-DEF5-4BF5-B850-B8649AF30E35"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.0:beta2:*:*:*:drupal:*:*","matchCriteriaId":"5492E250-EC4A-497D-878C-5F18ED88F220"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.0:beta3:*:*:*:drupal:*:*","matchCriteriaId":"50BB7F3E-A3CD-4B39-879D-4ADCCE271064"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.1:*:*:*:*:drupal:*:*","matchCriteriaId":"938C1B98-D83F-4E21-9A81-585F4F0238E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.2:*:*:*:*:drupal:*:*","matchCriteriaId":"5F103A34-E369-4455-B0F8-F5F912355EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.3:*:*:*:*:drupal:*:*","matchCriteriaId":"C9E8F970-D864-427F-8B72-1B9D31FEBFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.4:*:*:*:*:drupal:*:*","matchCriteriaId":"26E5A985-CC84-41A7-A02A-76624146A4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.5:*:*:*:*:drupal:*:*","matchCriteriaId":"1429858E-CABA-4D32-B62C-A6E53593D59B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.6:*:*:*:*:drupal:*:*","matchCriteriaId":"4633A838-D3DC-4A20-BE4D-7CB816A07D6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.7:*:*:*:*:drupal:*:*","matchCriteriaId":"CC3BF031-B3DB-4632-AA43-704EA7B3D740"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.8:*:*:*:*:drupal:*:*","matchCriteriaId":"E26C0DF9-2F04-423A-9D98-BED9060870EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.10:*:*:*:*:drupal:*:*","matchCriteriaId":"BCAF37B1-699A-46DB-A7FD-4A4D02458023"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhen_project:redhen:7.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"10A9BD6F-D774-4FA6-823F-188734960DF2"}]}]}],"references":[{"url":"https://www.drupal.org/node/2649780","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.drupal.org/node/2649800","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.drupal.org/node/2649780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.drupal.org/node/2649800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-6864","sourceIdentifier":"cve@mitre.org","published":"2016-01-16T05:59:01.973","lastModified":"2026-06-17T00:31:33.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component."},{"lang":"es","value":"HPE ArcSight Logger en versiones anteriores a 6.1P1 permite a usuarios remotos autenticados ejecutar código arbitrario a través de una entrada no especificada al componente de subida (1) Intellicus o (2) client-certificat."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:arcsight_logger:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"D23DB089-4AEC-4A62-B2DF-A1906357CDEA"}]}]}],"references":[{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04941487","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04941487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1293","sourceIdentifier":"psirt@cisco.com","published":"2016-01-16T05:59:05.440","lastModified":"2026-06-17T00:41:39.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Management Center in Cisco FireSIGHT System Software 6.0.0 and 6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCux40414."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en el Management Center en Cisco FireSIGHT System Software 6.0.0 y 6.0.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros no especificados, también conocida como Bug ID CSCux40414."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"55D52DB0-4441-41C9-900E-DE917B0CBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC5565FE-174C-41C7-9462-9138BB31507D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-FireSIGHT","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034689","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-FireSIGHT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1294","sourceIdentifier":"psirt@cisco.com","published":"2016-01-16T05:59:06.473","lastModified":"2026-06-17T00:41:39.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted cookie, aka Bug ID CSCuw89094."},{"lang":"es","value":"Vulnerabilidad de XSS en el Management Center en Cisco FireSIGHT System Software 6.0.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una cookie manipulada, también conocida como Bug ID CSCuw89094."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC5565FE-174C-41C7-9462-9138BB31507D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-fmc1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034690","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-fmc1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1295","sourceIdentifier":"psirt@cisco.com","published":"2016-01-16T05:59:07.410","lastModified":"2026-06-17T00:41:39.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775."},{"lang":"es","value":"Cisco Adaptive Security Appliance (ASA) Software 8.4 permite a atacantes remotos obtener información sensible a través de un intento de autenticación AnyConnect, también conocido como Bug ID CSCuo65775."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FA1C5485-EAF4-4F4D-AFA1-E105F433665E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"989F9AC4-C2D1-49A0-95C3-79A4EB827E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BFE2E079-D7AC-4FE9-8938-A75C12AF5CA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"B442C852-2465-4EA8-A977-1F10A4CE23AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C6DB6ED4-3095-46C1-9CB6-2975A7B05303"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EE68CD8E-B9CF-4519-8B0E-4C4488B34887"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D762C9A7-005C-44FD-9BB2-7A1DD4EBE90B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3:*:*:*:*:*:*:*","matchCriteriaId":"EE0B1212-87F3-46E5-B14A-C0C6BBAAAC98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"518D4826-06B0-4DDC-B082-A536418FD292"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"E343DE08-58FA-4C39-99F9-8CB5F57D0CD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4:*:*:*:*:*:*:*","matchCriteriaId":"76363698-DB62-4D92-8EE4-069891A9F92C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6159BEE3-D097-4E07-9962-06DB740E2AE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD606591-F69A-47AD-9256-20B98CA16135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A4EF3895-F372-45D3-9C7D-15F5C4712D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"4DC5960D-B917-4ABA-850F-A710676ACB40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5:*:*:*:*:*:*:*","matchCriteriaId":"B746A138-6650-49A3-87C8-3728FE5CF215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E50C2A13-5A8B-4FA5-ABB8-1157E560503B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.6:*:*:*:*:*:*:*","matchCriteriaId":"909F9D55-9276-4CF1-BC63-7CEEF8F25C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7:*:*:*:*:*:*:*","matchCriteriaId":"F383D276-D5EC-4335-AC09-9D30F6443AF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"39C2A7FF-6AC3-42B5-954A-9AA5950C523A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.15:*:*:*:*:*:*:*","matchCriteriaId":"9D7F36A8-C291-423D-AF28-56AAD8D0F712"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.22:*:*:*:*:*:*:*","matchCriteriaId":"3C2009F4-F832-49D6-8346-54A7328BD93B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.23:*:*:*:*:*:*:*","matchCriteriaId":"C9221DD4-498A-4867-B647-47E42299CE45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.26:*:*:*:*:*:*:*","matchCriteriaId":"B839A425-E08C-41B1-9270-E177E40B1E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.28:*:*:*:*:*:*:*","matchCriteriaId":"8F4DDF53-0995-4971-A980-30FD15A40C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.29:*:*:*:*:*:*:*","matchCriteriaId":"2F3BD921-A58A-47EB-B90D-21C3A5D02D40"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-asa","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034691","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-asa","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2015-4960","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-17T05:59:01.510","lastModified":"2026-06-17T00:28:15.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site."},{"lang":"es","value":"IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 en versiones anteriores a 11.0.0.0 IF11, 11.3 en versiones anteriores a 11.3.0.0 IF7 y 11.4 en versiones anteriores a 11.4.0.4 IF1 permite a usuarios remotos autenticados llevar a cabo ataques de secuestro de clic a través de un sitio web manipulado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:9.1:*:*:*:collaborative:*:*:*","matchCriteriaId":"18359235-B788-4E8A-97E9-9E297712D102"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:10.1:*:*:*:collaborative:*:*:*","matchCriteriaId":"38FBFED0-F44F-48BF-96C0-33025890C4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:11.0:*:*:*:collaborative:*:*:*","matchCriteriaId":"6FE73850-0816-4C28-B114-4FEB2A0B6586"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:11.3:*:*:*:collaborative:*:*:*","matchCriteriaId":"2B51C2B1-4363-455F-8A0D-F92BEDFC0BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:11.4:*:*:*:collaborative:*:*:*","matchCriteriaId":"C30A337D-6D75-4F46-AF7E-195AB539686C"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971545","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7414","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-17T05:59:02.747","lastModified":"2026-06-17T00:32:29.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en el componente GDS en IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 en versiones anteriores a 11.0.0.0 IF11, 11.3 en versiones anteriores a 11.3.0.0 IF7 y 11.4 en versiones anteriores a 11.4.0.4 IF1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:9.1:*:*:*:collaborative:*:*:*","matchCriteriaId":"18359235-B788-4E8A-97E9-9E297712D102"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:10.1:*:*:*:collaborative:*:*:*","matchCriteriaId":"38FBFED0-F44F-48BF-96C0-33025890C4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:11.0:*:*:*:collaborative:*:*:*","matchCriteriaId":"6FE73850-0816-4C28-B114-4FEB2A0B6586"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:11.3:*:*:*:collaborative:*:*:*","matchCriteriaId":"2B51C2B1-4363-455F-8A0D-F92BEDFC0BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management:11.4:*:*:*:collaborative:*:*:*","matchCriteriaId":"C30A337D-6D75-4F46-AF7E-195AB539686C"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971545","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7467","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-17T05:59:04.073","lastModified":"2026-06-17T00:32:35.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en Report Builder en IBM Jazz Reporting Service (JRS) 5.x en versiones anteriores a 5.0.2-Rational-CLM-ifix011 y 6.0 en versiones anteriores a 6.0.0-Rational-CLM-ifix005 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4D226029-A37F-486C-9DCD-1921671F242D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"83152595-8909-4AA4-A7D1-2E113A197B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"103F9E24-E11F-4BAC-8EDB-86D332B9EC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*","matchCriteriaId":"07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972485","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7468","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-17T05:59:05.043","lastModified":"2026-06-17T00:32:35.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended restrictions on administrator tasks via unspecified vectors."},{"lang":"es","value":"Report Builder en IBM Jazz Reporting Service (JRS) 5.x en versiones anteriores a 5.0.2-Rational-CLM-ifix011 y 6.0 en versiones anteriores a 6.0.0-Rational-CLM-ifix005 permite a usuarios remotos autenticados eludir las restricciones sobre tareas de administrador previstas a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4D226029-A37F-486C-9DCD-1921671F242D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"83152595-8909-4AA4-A7D1-2E113A197B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"103F9E24-E11F-4BAC-8EDB-86D332B9EC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*","matchCriteriaId":"07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972485","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7469","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-17T05:59:06.043","lastModified":"2026-06-17T00:32:35.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended read-only restrictions by leveraging a JazzGuest role."},{"lang":"es","value":"Report Builder en IBM Jazz Reporting Service (JRS) 5.x en versiones anteriores a 5.0.2-Rational-CLM-ifix011 y 6.0 en versiones anteriores a 6.0.0-Rational-CLM-ifix005 permite a usuarios remotos autenticados eludir las restricciones destinadas de solo lectura aprovechando un rol JazzGuest."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4D226029-A37F-486C-9DCD-1921671F242D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"83152595-8909-4AA4-A7D1-2E113A197B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"103F9E24-E11F-4BAC-8EDB-86D332B9EC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*","matchCriteriaId":"07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972485","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-4942","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-18T05:59:00.117","lastModified":"2026-06-17T00:28:13.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than CVE-2015-4943."},{"lang":"es","value":"IBM WebSphere MQ Light 1.x en versiones anteriores a 1.0.2 permite a atacantes remotos provocar una denegación de servicio (caída de servicio MQXR) a través de una series de acciones de conexión y desconexión, una vulnerabilidad diferente a CVE-2015-4943."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq_light:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CA8E67B9-3E81-4A98-B9B5-CCA7ADCCFC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq_light:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE9296FA-DC39-46F7-BDB7-295E60C0F6BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974169","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034698","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-4959","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-18T05:59:01.367","lastModified":"2026-06-17T00:28:15.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP16 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 en versiones anteriores a FP16 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"93F48368-9617-4EE6-BF7A-6873229C0D66"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV77558","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974157","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034697","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV77558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5002","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-18T05:59:03.427","lastModified":"2026-06-17T00:28:18.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Host On-Demand 11.0 through 11.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Host On-Demand 11.0 hasta la versión 11.0.14 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0:*:*:*:*:*:*:*","matchCriteriaId":"E51D5AEF-B3D4-4782-9988-BC1DB3F3F296"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E179FC2F-C700-4998-9D7A-3B945874CAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2341D5E7-15CD-4C8F-ABE8-AA915BFA2804"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.3:*:*:*:*:*:*:*","matchCriteriaId":"474DC3BA-27F2-452A-85AD-BCC476EDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"997CA07C-EBB7-4D7F-AF23-A161817BF4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5BFE87FC-7B77-4840-8185-1707CB37323B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1FA56704-18EB-4F3B-A36F-BCEF67B07C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B7132A0E-C2A1-403E-9516-A6911563D7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F32CA797-ED68-426E-9370-E16C90075E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.9:*:*:*:*:*:*:*","matchCriteriaId":"412C2722-75B6-4636-B173-5213C929779C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F2388851-C8A9-4478-B063-8EC2C7875B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.11:*:*:*:*:*:*:*","matchCriteriaId":"6B30F2DF-CFED-4860-BF6E-BDD60FE2D82A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.12:*:*:*:*:*:*:*","matchCriteriaId":"F0E5962A-2BFE-4308-BD22-965035B4C6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:host_on-demand:11.0.13:*:*:*:*:*:*:*","matchCriteriaId":"0BD47521-AC05-47DC-8B5A-C223586EFD3D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973985","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5008","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-18T05:59:04.427","lastModified":"2026-06-17T00:28:18.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Commerce 6.0 hasta la versión FP11, 6.0 Feature Pack 4, 7.0 hasta la versión FP9, 7.0 Feature Pack 5 hasta la versión 8 y 8.0 en versiones anteriores a 8.0.0.1permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B59C1AD7-5E0A-4DB6-B1F9-BAE6C6BC52D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C21677D0-CF4E-4958-83A7-EF8C3AF4B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAF24659-1284-4762-925C-4879B56AC386"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"162FF755-CFF5-4AF2-B5D4-AEBA107DD93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4783F5D2-0709-4E5B-B6B7-DF7823E928CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8EB6E277-36B8-483E-8F9E-34D350BBB0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"40A7EA48-BCC0-41BD-975D-0C01B6066BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FA2AE738-BC94-4731-B6C3-54F808756ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FE23443C-6FB5-43AC-9822-1267AE61D14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"5952ADD8-4D62-401A-A5D3-1A63706D2F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8BA04184-B648-48CB-8664-D53AE07196BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F7D656-CFD1-4447-97CE-1D183CB41571"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_5:*:*:*:*:*:*","matchCriteriaId":"BCA4B012-167C-476A-8B64-8A96ED755C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_6:*:*:*:*:*:*","matchCriteriaId":"AA703ED9-B993-4FD1-93F6-DA0D3A0B0694"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_7:*:*:*:*:*:*","matchCriteriaId":"CAFA688F-2BFF-42D9-A62E-7C12ADB51ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_8:*:*:*:*:*:*","matchCriteriaId":"7C20CB96-9E05-4702-94F1-E6C7439FAA13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"213C52C9-C5B5-4F26-BBB7-EE0824A995AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3CC937CD-1BE1-4827-9145-E2EA7F3AA792"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2A6189A9-E083-41D3-9D36-7B41D82EC197"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE6F4DC0-41E3-4F73-9F62-3D415F8949C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1ACFED34-9B1E-4950-9D03-756942EF32F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"202F791B-697B-4D9C-BF5D-84F7C657C790"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"012405FA-CE85-47B6-B368-2EAEBD06A15E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"05260EDC-BD28-4F89-809A-7852E294A540"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"66F86968-8BD4-42D0-A5C5-9685E3287D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CE2E7243-19A2-47B2-905E-47219F08F4EB"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54824","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54825","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54834","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54899","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972610","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034695","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5009","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-18T05:59:05.630","lastModified":"2026-06-17T00:28:18.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Commerce 6.0 hasta la versión FP11, 6.0 Feature Pack 4, 7.0 hasta la versión FP9, 7.0 Feature Pack 5 hasta la versión 8 y 8.0 en versiones anteriores a 8.0.0.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B59C1AD7-5E0A-4DB6-B1F9-BAE6C6BC52D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C21677D0-CF4E-4958-83A7-EF8C3AF4B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAF24659-1284-4762-925C-4879B56AC386"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"162FF755-CFF5-4AF2-B5D4-AEBA107DD93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4783F5D2-0709-4E5B-B6B7-DF7823E928CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8EB6E277-36B8-483E-8F9E-34D350BBB0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"40A7EA48-BCC0-41BD-975D-0C01B6066BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FA2AE738-BC94-4731-B6C3-54F808756ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FE23443C-6FB5-43AC-9822-1267AE61D14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"5952ADD8-4D62-401A-A5D3-1A63706D2F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8BA04184-B648-48CB-8664-D53AE07196BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F7D656-CFD1-4447-97CE-1D183CB41571"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_5:*:*:*:*:*:*","matchCriteriaId":"BCA4B012-167C-476A-8B64-8A96ED755C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_6:*:*:*:*:*:*","matchCriteriaId":"AA703ED9-B993-4FD1-93F6-DA0D3A0B0694"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_7:*:*:*:*:*:*","matchCriteriaId":"CAFA688F-2BFF-42D9-A62E-7C12ADB51ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_8:*:*:*:*:*:*","matchCriteriaId":"7C20CB96-9E05-4702-94F1-E6C7439FAA13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"213C52C9-C5B5-4F26-BBB7-EE0824A995AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3CC937CD-1BE1-4827-9145-E2EA7F3AA792"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2A6189A9-E083-41D3-9D36-7B41D82EC197"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE6F4DC0-41E3-4F73-9F62-3D415F8949C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1ACFED34-9B1E-4950-9D03-756942EF32F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"202F791B-697B-4D9C-BF5D-84F7C657C790"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"012405FA-CE85-47B6-B368-2EAEBD06A15E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"05260EDC-BD28-4F89-809A-7852E294A540"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"66F86968-8BD4-42D0-A5C5-9685E3287D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CE2E7243-19A2-47B2-905E-47219F08F4EB"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54824","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54825","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54834","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54899","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972610","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034695","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0201","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-18T05:59:07.647","lastModified":"2026-06-17T00:37:06.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"GSKit in IBM Security Network Protection 5.3.1 before 5.3.1.7 and 5.3.2 allows remote attackers to discover credentials by triggering an MD5 collision."},{"lang":"es","value":"GSKit en IBM Security Network Protection 5.3.1 en versiones anteriores a 5.3.1.7 y 5.3.2 permite a atacantes remotos descubrir credenciales desencadenando una colisión MD5."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_network_protection_firmware:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EF599A15-19DE-4107-9FC8-D11607F5D8A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_network_protection_firmware:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C3929C35-38ED-49DB-A4CA-B317CF0D4836"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974242","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/80883","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034696","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/80883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1907","sourceIdentifier":"security@debian.org","published":"2016-01-19T05:59:10.560","lastModified":"2026-06-17T00:42:50.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic."},{"lang":"es","value":"La función ssh_packet_read_poll2 en packet.c en OpenSSH en versiones anteriores a 7.1p2 permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de tráfico de red manipulado."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.8:*:*:*:*:*:*:*","matchCriteriaId":"65A8629A-CFAE-4403-BEE7-622912483702"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.8:p1:*:*:*:*:*:*","matchCriteriaId":"50836FA3-8116-4D58-B73E-B4830FB3A551"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.9:*:*:*:*:*:*:*","matchCriteriaId":"D0607649-62FE-41CB-9444-53CD9C5B67C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:6.9:p1:*:*:*:*:*:*","matchCriteriaId":"3397D8DC-3410-401F-8854-BFCC35AD6686"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0B0FB8D5-75CB-4691-AB9F-B4FA46973421"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:7.0:p1:*:*:*:*:*:*","matchCriteriaId":"42DCED2D-76C5-49D1-A72D-E578CF686F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:7.1:*:*:*:*:*:*:*","matchCriteriaId":"67E1B240-BD86-41D3-BAC1-96005CB31DEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:7.1:p1:*:*:*:*:*:*","matchCriteriaId":"4BFC8587-FB9E-4FE2-B725-81CE3CE590F8"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html","source":"security@debian.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html","source":"security@debian.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html","source":"security@debian.org"},{"url":"http://www.openssh.com/txt/release-7.1p2","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81293","source":"security@debian.org"},{"url":"https://anongit.mindrot.org/openssh.git/commit/?id=2fecfd486bdba9f51b3a789277bb0733ca36e1c0","source":"security@debian.org"},{"url":"https://bto.bluecoat.com/security-advisory/sa109","source":"security@debian.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"security@debian.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","source":"security@debian.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","source":"security@debian.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"security@debian.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssh.com/txt/release-7.1p2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://anongit.mindrot.org/openssh.git/commit/?id=2fecfd486bdba9f51b3a789277bb0733ca36e1c0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-4951","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-20T05:59:00.157","lastModified":"2026-06-17T00:28:14.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted Web client URL."},{"lang":"es","value":"Client Acceptor Daemon (CAD) en el client en IBM Spectrum Protect (anteriormente Tivoli Storage Manager) 5.5 y 6.x en versiones anteriores a 6.3.2.5, 6.4 en versiones anteriores a 6.4.3.1 y 7.1 en versiones anteriores a 7.1.3 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de una URL de cliente Web manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.5:*:*:*:*:*:*:*","matchCriteriaId":"D5D9816F-5D2A-4B2B-A654-16B4AE04B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"E11F79C4-D61F-481B-9BDC-ADEDE1494AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B7660C8A-2C6A-4AA1-95DB-DA6F4BA7A821"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:6.3:*:*:*:*:*:*:*","matchCriteriaId":"DF7A543F-FD79-42C8-9DAF-2DD549926DDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:6.4:*:*:*:*:*:*:*","matchCriteriaId":"FA4D3E9E-144A-4F7C-973A-F7FBE0776FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"212B26BB-0A19-41EB-811C-04C765374E8A"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973484","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034692","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8777","sourceIdentifier":"secalert@redhat.com","published":"2016-01-20T05:59:01.237","lastModified":"2026-06-17T00:35:13.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable."},{"lang":"es","value":"La función process_envvars en elf/rtld.c en la GNU C Library (también conocida como glibc o libc6) en versiones anteriores a 2.23 permite a usuarios locales eludir un mecanismo de protección de puntero a través de un valor cero de la variable de entorno LD_POINTER_GUARD."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*","versionEndIncluding":"2.22","matchCriteriaId":"E1E32895-9C7B-4DE8-9BB5-0177406EB761"}]}]}],"references":[{"url":"http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3480","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/20/1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/81469","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034811","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2985-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2985-2","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:1916","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201702-11","source":"secalert@redhat.com"},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=18928","source":"secalert@redhat.com"},{"url":"http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2985-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2985-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201702-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=18928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8704","sourceIdentifier":"cve@mitre.org","published":"2016-01-20T15:59:00.330","lastModified":"2026-06-17T00:35:03.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record."},{"lang":"es","value":"apl_42.c en ISC BIND 9.x en versiones anteriores a 9.9.8-P3, 9.9.x y 9.10.x en versiones anteriores a 9.10.3-P3 permite a usuarios remotos autenticados provocar una denegación de servicio (fallo de la afirmación INSIST y salida de demonio) a través de un registro Address Prefix List (APL) mal formado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*","matchCriteriaId":"C52373DC-3E05-424B-9C78-4092A75C75A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"098633E6-88F0-4DBC-986F-D11EDA29877F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1861756C-CC81-4EAB-8427-57A3C62BFF96"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CDD642FC-1764-4090-A32D-830CEAE69E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DE954FD0-56AF-4757-BAA8-B0C64703F6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BF891263-4ACE-47C3-83F3-C06E49F32451"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*","matchCriteriaId":"1F947835-8E96-4793-B81E-EEC103BF0CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6520F4-B203-400A-8629-8A40B739DB11"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2AF07E87-B109-4B15-A358-7A454502E077"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614C9459-D526-4880-AE03-4A1558CB941F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"A969C3E7-9E4F-4767-86D1-7E6B3970A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1CFA05CD-0BE4-4E85-A3DE-8B3E2622159F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D43375C5-0736-43DE-99B5-B75719D0AD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E4360536-0BA6-41DB-AA87-45AFB51562CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*","matchCriteriaId":"438AEC8C-DD71-4A25-9E9D-A89415F7EC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:*","matchCriteriaId":"2CDF6B08-6BA8-400C-BF01-ABD2306FE0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*","matchCriteriaId":"8FA93166-513D-40AA-9855-FC89060BA03C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"847C1017-F964-4A33-BEA8-DDB202DD0FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8B0D8854-64B6-42C9-B4D2-B2AF16AC0F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"92F95086-3107-4C38-BB3B-7BABA9BD15C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1AE49740-2220-4305-BB8A-80E56CF4D9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*","matchCriteriaId":"5C8B18D7-4D15-46A7-8013-E6267127A427"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D7C7524-6943-4D94-8835-0221F0F0CD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8F0AA9D0-9657-4E18-BF8B-45284C2D40A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"916D4013-27A5-4688-A985-A9B77F90AC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F8583B8D-54A4-4064-810B-34F4F5A33A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E01A12DF-E94B-426E-8751-96FC56105D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:*","matchCriteriaId":"19ADAB10-BDD0-409E-93C2-9E7223464131"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5:*:*:*:*:*:*:*","matchCriteriaId":"9A944178-032B-4637-842D-BC6B227043A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"32CEF8AD-9EE7-4ADA-888E-883751962529"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"90EE9C4A-F014-4ABA-9C4C-5D9561DD0A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F592D0F-095C-4F3B-97E7-E92C259D0CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"C55EC1E1-4D79-4357-94CB-7E152DFDE8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:rc2:*:*:*:*:*:*","matchCriteriaId":"83205FA5-56A2-4BBD-9278-2844704BAB07"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F4449E90-2112-4860-A981-66639B9318ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.2:rc1:*:*:*:*:*:*","matchCriteriaId":"A49A7D91-73BC-4894-A548-C46691AA66AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.3:*:*:*:*:*:*:*","matchCriteriaId":"5B9707CD-5410-4254-B44C-A0B80D4FDCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.3:rc1:*:*:*:*:*:*","matchCriteriaId":"0374932B-AE66-42C1-9797-380E8B73155E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:*:*:*:*:*:*:*","matchCriteriaId":"20B4B4DA-5780-4D04-8A2B-371C06A470CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r5_p1:*:*:*:*:*:*","matchCriteriaId":"9672E9A0-C7F1-48DE-AE5B-977DFD614E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r6_b1:*:*:*:*:*:*","matchCriteriaId":"11FBC346-F6B6-40D6-8DA2-345BF20B450C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r6_rc1:*:*:*:*:*:*","matchCriteriaId":"5272F28D-4257-4116-8C66-98EF875BEE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r6_rc2:*:*:*:*:*:*","matchCriteriaId":"E6BF457D-BDF9-4C0D-98B8-B8AB677BFB33"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r7_p1:*:*:*:*:*:*","matchCriteriaId":"4A9A0380-C0A1-4957-A199-3165F691F0A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r7_p2:*:*:*:*:*:*","matchCriteriaId":"51913202-006F-4A5B-AAF0-637AAFA8CE43"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.8:p2:*:*:*:*:*:*","matchCriteriaId":"B02B1665-1283-4B0B-9AD2-827C8BEFCF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:*","matchCriteriaId":"16EB6777-8E49-4B07-B859-06D0C2F29DC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:*","matchCriteriaId":"54E5A7DC-D432-470A-B95A-AF8EE1ECB561"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:*:*:*:*:*:*:*","matchCriteriaId":"5374616E-7AA5-4C36-A0B3-9AE74E080A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:*","matchCriteriaId":"D35C161A-3CCC-4FFC-9698-98FAE71BBF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:*","matchCriteriaId":"6518FD7D-0249-4793-9531-E5338EEC4C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:*","matchCriteriaId":"D468B433-D785-4A5B-A8CC-B2F1B27BAB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:*","matchCriteriaId":"7BCF9BD9-F557-408C-9CD7-BD0EAD66366F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:*","matchCriteriaId":"407F36C2-886C-48A7-A3AB-E5F9194775D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:*","matchCriteriaId":"24CEA3F3-C4F8-4BD1-92EA-AC1B54A3CFE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:*","matchCriteriaId":"40BD4A8C-785C-4460-AB52-B249C5DC9BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*","matchCriteriaId":"88359A5D-CE32-4920-BE5D-98EC262B41EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*","matchCriteriaId":"B77760E4-57C5-4A5E-A169-C84409930757"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*","matchCriteriaId":"893ACAAC-406E-4A1C-970B-A15B42961271"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00024.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00025.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=145680832702035&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0073.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0074.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3449","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/81329","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034739","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2874-1","source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01438","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201610-07","source":"cve@mitre.org"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:08.bind.asc","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176564.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175973.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175977.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=145680832702035&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0074.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.isc.org/article/AA-01335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-07","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:08.bind.asc","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5295","sourceIdentifier":"secalert@redhat.com","published":"2016-01-20T16:59:00.113","lastModified":"2026-06-17T00:28:50.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero."},{"lang":"es","value":"El comando template-validate en OpenStack Orchestration API (Heat) en versiones anteriores a 2015.1.3 (kilo) y 5.0.x en versiones anteriores a 5.0.1 (liberty) permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de memoria) o determinar la existencia de archivos locales a través del tipo de recurso en una plantilla, según lo demostrado por el archivo:///dev/zero."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:orchestration_api:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.1","matchCriteriaId":"8062966E-5693-4940-A6CC-5031B6A5719E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:orchestration_api:*:*:*:*:*:*:*:*","versionStartIncluding":"2015.1.0","versionEndExcluding":"2015.1.3","matchCriteriaId":"C75BAD38-70DD-4B13-A3A8-AEA14F77808D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9DAA72A4-AC7D-4544-89D4-5B07961D5A95"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176700.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0266.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81438","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.launchpad.net/heat/+bug/1496277","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-003.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176700.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0266.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.launchpad.net/heat/+bug/1496277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1867","sourceIdentifier":"cve@mitre.org","published":"2016-01-20T16:59:02.537","lastModified":"2026-06-17T00:42:47.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image."},{"lang":"es","value":"La función jpc_pi_nextcprl en JasPer 1.900.1 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de una imagen JPEG 2000 manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jasper_project:jasper:1.900.1:*:*:*:*:*:*:*","matchCriteriaId":"79C699BE-8585-4A07-88AE-E17CF17D92CD"}]}]}],"references":[{"url":"http://www.debian.org/security/2017/dsa-3785","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/13/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/13/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/81488","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1208","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2017/dsa-3785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/13/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0502","sourceIdentifier":"secalert_us@oracle.com","published":"2016-01-21T03:00:50.667","lastModified":"2026-06-17T00:37:39.360","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.31 y versiones anteriores y 5.6.11 y versiones anteriores permite a usuarios remotos autenticados afectar a la disponibilidad a través de vectores desconocidos relacionados con Optimizer."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.31","matchCriteriaId":"A73500AE-1FEC-4D0D-A49D-0B2C8B6D5A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.11","matchCriteriaId":"D9B43CE7-D424-47A9-BBA4-230FD4839973"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.32","matchCriteriaId":"3CD04090-8460-4E38-9640-DC7B359A340F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.4","matchCriteriaId":"5E9A4370-E2AF-407E-9CDF-5935AECE7C4E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034708","source":"secalert_us@oracle.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1135","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-01-22T11:59:06.307","lastModified":"2026-06-17T00:41:21.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en dispositivos BUFFALO BHR-4GRV2 con firmware 1.04 y versiones anteriores, dispositivos WEX-300 con firmware 1.90 y versiones anteriores, dispositivos WHR-1166DHP con firmware 1.90 y versiones anteriores, dispositivos WHR-300HP2 con firmware 1.90 y versiones anteriores, dispositivos WHR-600D con firmware 1.90 y versiones anteriores, dispositivos WMR-300 con firmware 1.90 y versiones anteriores, dispositivos WMR-433 con firmware 1.01 y versiones anteriores y dispositivos WSR-1166DHP con firmware 1.01 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalotech:wmr-300:-:*:*:*:*:*:*:*","matchCriteriaId":"A2A3F352-8B87-466F-A0FA-BD14B9CF9D2F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:wmr-300_firmware:1.90:*:*:*:*:*:*:*","matchCriteriaId":"65304F8F-98C4-46F7-986B-75BEA28B352A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalotech:wex-300:-:*:*:*:*:*:*:*","matchCriteriaId":"0DA4990B-8BD9-45FD-8398-BA8DC71FDEC3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:wex-300_firmware:1.90:*:*:*:*:*:*:*","matchCriteriaId":"3A67631F-1D66-41E0-A245-7C9AC5FD3F5B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalotech:wmr-433:-:*:*:*:*:*:*:*","matchCriteriaId":"71A0823E-754E-4AF4-AB3D-B1B891373D78"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:wmr-433_firmware:1.01:*:*:*:*:*:*:*","matchCriteriaId":"E2E6D547-90FC-4F73-BE2C-5BA3CC7A39C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalotech:bhr-4grv2:-:*:*:*:*:*:*:*","matchCriteriaId":"DF7FB55C-6A22-4750-B44B-19E1427AF251"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:bhr-4grv2_firmware:1.04:*:*:*:*:*:*:*","matchCriteriaId":"40031273-04B3-4476-9E21-8F1536B42462"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalotech:whr-300hp2:-:*:*:*:*:*:*:*","matchCriteriaId":"DBC2CA67-6E1C-4AA1-B3B2-B0CAC8F16BDC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:whr-300hp2_firmware:1.90:*:*:*:*:*:*:*","matchCriteriaId":"3766ED4C-2FAB-4664-AACD-76B21156721F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalotech:whr-1166dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"8D857063-0CB1-4B06-A7E5-39D5A995AB51"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:whr-1166dhp_firmware:1.90:*:*:*:*:*:*:*","matchCriteriaId":"A937DB27-F813-4A0A-8706-3DF2E044501A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalotech:whr-600d:-:*:*:*:*:*:*:*","matchCriteriaId":"B1267DDE-4D61-4498-9DFD-B429CC49696E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:whr-600d_firmware:1.90:*:*:*:*:*:*:*","matchCriteriaId":"8DEB6082-C3D8-4DBA-ABFB-1ECAEBF87214"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalotech:wsr-1166dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"8385DDF8-9E6F-4397-9232-1DD943EBED6D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalotech:wsr-1166dhp_firmware:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F70C6F98-1BD0-4A8D-B944-A5FAA5AC6FE2"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN49225722/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000006","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN49225722/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7744","sourceIdentifier":"cve@mitre.org","published":"2016-01-22T15:59:04.570","lastModified":"2026-06-17T00:33:03.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack."},{"lang":"es","value":"wolfSSL (anteriormente CyaSSL) en versiones anteriores a 3.6.8 no maneja correctamente fallos asociados con el proceso Chinese Remainder Theorem (CRT) cuando permiten el intercambio de claves efímeras sin optimizaciones de memoria baja en un servidor, lo que hace que sea más fácil para atacantes remotos obtener claves privadas RSA mediante la captura de un apretón de manos TLS, también conocido como un ataque Lenstra."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionEndExcluding":"3.6.8","matchCriteriaId":"DCCE5683-CB64-46B4-8936-B1FCDD586892"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.46","matchCriteriaId":"B570B154-3385-45E5-BD26-F8F114ADD39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.22","matchCriteriaId":"4539D293-8B6D-4ADB-98C9-5C7FF5B01CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.9","matchCriteriaId":"70B6417F-7B57-4DDE-8663-919C14C13B1D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034708","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wolfssl.com/wolfSSL/Blog/Entries/2015/9/17_Two_Vulnerabilities_Recently_Found%2C_An_Attack_on_RSA_using_CRT_and_DoS_Vulnerability_With_DTLS.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wolfssl.com/wolfSSL/Blog/Entries/2015/9/17_Two_Vulnerabilities_Recently_Found%2C_An_Attack_on_RSA_using_CRT_and_DoS_Vulnerability_With_DTLS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1571","sourceIdentifier":"cve@mitre.org","published":"2016-01-22T15:59:06.867","lastModified":"2026-06-17T00:42:11.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check."},{"lang":"es","value":"La función paging_invlpg en include/asm-x86/paging.h en Xen 3.3.x hasta la versión 4.6.x, cuando se utiliza paginación en modo shadow o la virtualización anidada está habilitada, permite a usuarios HVM invitados locales provocar una denegación de servicio (caída de host) a través de una dirección de invitado no canónica en una instrucción INVVPID, lo que desencadena una comprobación de errores de hipervisor."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:*:sp1:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"28C047F6-2394-49E3-A2C6-1E0C1C6409D7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EB157D09-B91B-486A-A9F7-C9BA75AE8823"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FA95119D-EAF1-48D4-AE7C-0C4927D06CDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5D40E4E4-3FCB-4980-8DD2-49DDABCB398E"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7F7D1B7E-C30F-430F-832D-2A405DA1F2D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B7C1D0AD-B804-474C-96A3-988BADA0DAD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1DCD1F05-9F96-40DD-B506-750E87306325"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"25B6AE42-E1EB-47A8-8FAF-7A93A67EC67F"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"60BADA43-94D5-4E80-B5C8-D01A0249F13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D532B60-C8DD-4A2F-9D05-E574D23EB754"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5D83CA8B-8E49-45FA-8FAB-C15052474542"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"27537DF5-7E0F-463F-BA87-46E329EE07AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3EA4F978-9145-4FE6-B4F9-15207E52C40A"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"22A995FD-9B7F-4DF0-BECF-4B086E470F1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"219597E2-E2D7-4647-8A7C-688B96300158"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A0C59417-493C-493A-9AB2-317F240BF387"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"65E55950-EACA-4209-B2A1-E09026FC6006"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8F0AF8EF-6FF6-4E22-B16E-82C9F90C6B00"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"47640819-FC43-49ED-8A77-728C3D7255B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2448537F-87AD-45C1-9FB0-7A49CA31BD76"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E36B2265-70E1-413B-A7CF-79D39E9ADCFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"37148A72-BE20-45C5-8589-2309ED84D08C"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FB736B4C-325A-4B27-8C8A-15E60B8A8C82"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF948E6A-07BE-4C7D-8A98-002E89D35F4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C0E23B94-1726-4F63-84BB-8D83FAB156D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C76124AB-4E3D-4BE0-AAEA-7FC05868E2FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F30B5EF5-0AE8-420B-A103-B1B25A372F09"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F784EF07-DBEC-492A-A0F4-F9F7B2551A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1044792C-D544-457C-9391-4F3B5BAB978D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CF23B21B-594A-42E2-AF90-D5C4246B39A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBD9AD01-50B7-4951-8A73-A6CF4801A487"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"89AA8FD5-E997-4F0D-AFB6-FFBE0073BA5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"75615D84-9CA1-456C-816D-768E37B074A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"90CCECD0-C0F9-45A8-8699-64428637EBCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F0ED340C-6746-471E-9F2D-19D62D224B7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"99BD7C4F-DE4C-4508-B20D-46A94B616C5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B6F7CE9-C409-4D88-9A99-B21420633F45"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX205496","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3519","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034745","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-168.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX205496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-168.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-6317","sourceIdentifier":"psirt@cisco.com","published":"2016-01-23T05:59:00.113","lastModified":"2026-06-17T00:30:41.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926."},{"lang":"es","value":"Cisco Identity Services Engine (ISE) en versiones anteriores a 2.0 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso de recurso-web a través de una petición directa, también conocido como Bug ID CSCuu45926."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:C/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.0.4.573:*:*:*:*:*:*:*","matchCriteriaId":"694B3E06-FAA9-4A60-97FE-C51518CE151F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.0_base:*:*:*:*:*:*:*","matchCriteriaId":"BE34CBD5-FF02-42C6-B4C3-D42FB6D30EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.0_mr_base:*:*:*:*:*:*:*","matchCriteriaId":"24A70480-2229-410B-8291-8813A4AC417B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.1:p1:*:*:*:*:*:*","matchCriteriaId":"824AFCCC-537B-4CD1-873D-FC5ADB3E6625"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.1:p2:*:*:*:*:*:*","matchCriteriaId":"6C77ECD0-C872-410E-8525-4013CD9FEF0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.1:p3:*:*:*:*:*:*","matchCriteriaId":"42EA25D7-2DF0-4811-8D29-7C65A36A117E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.1:p4:*:*:*:*:*:*","matchCriteriaId":"57E38A8B-A717-4795-BAFC-EC04781136D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.1:p5:*:*:*:*:*:*","matchCriteriaId":"4CA142CA-C90A-4CCC-897C-F5FF6B6AB576"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.1:p6:*:*:*:*:*:*","matchCriteriaId":"1D149B6E-44EC-41B2-A23D-E670B865AC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.2:p1:*:*:*:*:*:*","matchCriteriaId":"66F0F676-226D-4509-AADE-DD86844B098C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.2:p2:*:*:*:*:*:*","matchCriteriaId":"58014103-898F-437B-BA76-3C6F0D0709DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.2:p3:*:*:*:*:*:*","matchCriteriaId":"A2EFF6FC-7058-4CFE-966B-DF124AD2286F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.2:p4:*:*:*:*:*:*","matchCriteriaId":"27009B65-3EFB-4038-8310-60FB0968C141"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.2:p5:*:*:*:*:*:*","matchCriteriaId":"2F4EC156-55BA-4C1C-ACA3-724F797B76C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.2:p6:*:*:*:*:*:*","matchCriteriaId":"DD74ABF5-E38E-4363-ABF5-2C76FBB9FB5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.2:p7:*:*:*:*:*:*","matchCriteriaId":"A86B70C2-838D-4E52-9CD3-3227D6450498"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.2:p8:*:*:*:*:*:*","matchCriteriaId":"9E7DBDEB-BDD1-46E7-BF4B-946B11071056"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.2:p9:*:*:*:*:*:*","matchCriteriaId":"6FC656C0-629E-40E8-90A5-2D84BEA327C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.3:p1:*:*:*:*:*:*","matchCriteriaId":"BC84D3B3-36E2-4F5C-85B2-6419088C324A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.3:p2:*:*:*:*:*:*","matchCriteriaId":"2ECF4497-24DA-43BB-9723-5D34C2B3CB67"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.3:p3:*:*:*:*:*:*","matchCriteriaId":"A8C8EB11-E866-4275-9D81-77BF8F746297"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.3:p4:*:*:*:*:*:*","matchCriteriaId":"6252AF57-B742-4B9C-8F41-CB6A0507E3CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.3:p5:*:*:*:*:*:*","matchCriteriaId":"2016B837-F984-4FED-991C-836E1C6A84E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.3:p6:*:*:*:*:*:*","matchCriteriaId":"B1547F7E-9B6D-4643-81D0-B8CF3913FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.3:p7:*:*:*:*:*:*","matchCriteriaId":"D16606E3-0181-44E1-8599-865C09BEE7FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.4:p1:*:*:*:*:*:*","matchCriteriaId":"27DFF577-674F-4ECB-AD4F-67CBA44C99A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.4:p2:*:*:*:*:*:*","matchCriteriaId":"4C825BD3-EDA2-425E-8996-5E26A29CECF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.4:p3:*:*:*:*:*:*","matchCriteriaId":"83AC276E-0B3F-4837-9918-6066FF78BFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.4:p4:*:*:*:*:*:*","matchCriteriaId":"6CB114A4-B46B-434F-BDCB-264837BFB246"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.4:p5:*:*:*:*:*:*","matchCriteriaId":"D303E482-A46D-444E-9220-EF6E088E8F90"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.4:p6:*:*:*:*:*:*","matchCriteriaId":"49DAEA26-7440-4FF0-8F6B-10ECBB303A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1.4:p7:*:*:*:*:*:*","matchCriteriaId":"D89B1F19-794B-458B-84C0-623D8A3EDA39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.1_base:*:*:*:*:*:*:*","matchCriteriaId":"F7A2054E-0ACD-47AC-9FA6-DE3289B4C6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.2\\(0.747\\):*:*:*:*:*:*:*","matchCriteriaId":"4388586C-A521-421E-ABBE-34DB8AFBD05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.2\\(0.793\\):*:*:*:*:*:*:*","matchCriteriaId":"02270440-39DC-4105-B54F-25CF15507461"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.2\\(1.198\\):*:*:*:*:*:*:*","matchCriteriaId":"E4448DC8-E3DE-4D1D-870A-F399B2CAAD7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.2\\(1.901\\):*:*:*:*:*:*:*","matchCriteriaId":"B634CA68-6F80-4D69-9A00-32E62E15D294"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.2.0.899:p14:*:*:*:*:*:*","matchCriteriaId":"254C0C70-12D9-4F43-8EDA-24B66D4127DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.2.1:p1:*:*:*:*:*:*","matchCriteriaId":"663B6931-F31C-4BF1-8A6F-8CE066AA9B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.2.1:p2:*:*:*:*:*:*","matchCriteriaId":"8895CC4C-405A-4A6E-8D22-F70AA5A12888"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.2_base:*:*:*:*:*:*:*","matchCriteriaId":"C47DA0F0-DF8E-4B0A-B184-C57A4F706D30"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.3\\(0.722\\):*:*:*:*:*:*:*","matchCriteriaId":"75C5C1DD-658E-4376-9E05-997297E49C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.3\\(0.876\\):*:*:*:*:*:*:*","matchCriteriaId":"0F0C8A13-77BB-4D48-99C1-6C16D6A13FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.3\\(106.146\\):*:*:*:*:*:*:*","matchCriteriaId":"00932EDA-FF42-4422-893B-654DD3460230"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.3\\(120.135\\):*:*:*:*:*:*:*","matchCriteriaId":"DA183646-B28E-4565-A0C2-C8B1591F0569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.4\\(0.109\\):*:*:*:*:*:*:*","matchCriteriaId":"C56C16D1-F75E-49A7-850C-0A7E4CE25CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.4\\(0.181\\):*:*:*:*:*:*:*","matchCriteriaId":"CC32610B-2D09-4F85-A2A1-775E6A778A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.4\\(0.253\\):*:*:*:*:*:*:*","matchCriteriaId":"D2621F2E-B212-40C6-9C17-90E49F75FAE0"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-ise2","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034767","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-ise2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7417","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-23T05:59:01.627","lastModified":"2026-06-17T00:32:30.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 7.0 before 7.0.0.41, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.9 allows remote authenticated users to inject arbitrary web script or HTML via crafted data from an OAuth provider."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Application Server 7.0 en versiones anteriores a 7.0.0.41, 8.0 en versiones anteriores a 8.0.0.12 y 8.5 en versiones anteriores a 8.5.5.9 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de datos de un proveedor OAuth manipulados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAC5F6C-D589-4337-88AD-4693AE953D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A8FC820-48D5-4850-82F7-8DA4A18EFF51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9BFBDE57-3895-4841-B23C-06336A7016EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"30B7A7B9-FCD1-4509-93CF-C5B736B04F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"90BA0923-4064-49D3-82A2-EEFC4B0F9A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"833256BB-E2A6-4FE9-BE4F-982578023E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE94EFF2-CA86-4179-8250-350DF0D2BE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"920F69CD-DEDB-4393-BE6E-B837BA6820B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"5662B903-5480-403D-BC3D-2222F88264A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"4D82C3F2-9C50-4D1A-B939-77FC53E44EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"03E6BAB6-D0D8-4698-BCF9-05D5A256FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EF042A51-E34A-482C-8601-9FD09E6C866A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*","matchCriteriaId":"3BFE6260-F130-44E1-9A31-985153F51385"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*","matchCriteriaId":"489E4427-4059-4026-B952-72364AFFC135"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.29:*:*:*:*:*:*:*","matchCriteriaId":"B95D1940-E5AD-4B59-80B4-C3370BB03169"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.31:*:*:*:*:*:*:*","matchCriteriaId":"C7083F0E-57BA-4828-99E0-ECA8B54E2069"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.33:*:*:*:*:*:*:*","matchCriteriaId":"799B6FA0-0094-4CE9-8C63-8DBFF45E7260"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.35:*:*:*:*:*:*:*","matchCriteriaId":"ABEFAA7D-56F8-4F73-A4E9-1A164B889F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.37:*:*:*:*:*:*:*","matchCriteriaId":"C39BC1E7-EDF9-4AD6-BA15-4E750903B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.39:*:*:*:*:*:*:*","matchCriteriaId":"28AF3645-415B-40BA-8024-32F7A3FCB7AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AF1667C5-D19B-469C-82D5-8406B6D75EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"89551609-69B7-452A-9CB2-04C12D268B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AF27B7D7-4442-47CA-880D-D3B5412AEF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B595B048-4204-49B4-9497-B8D119C8784D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC38B5D4-66A3-4671-9099-0F38D283BA94"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B357DB53-061F-43D5-9E9F-5D5468A5805B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"29ADADD2-EC21-4C45-A381-BC2091CD9F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2AD901DE-9258-40DA-A09B-B0CA9DCCF843"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8C21DDD3-C1CF-4CB2-BA13-4807F17AC5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A6DBD14D-F0F2-4606-BC55-ECB6CCA3EF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"1F994982-0972-4AC2-A0AB-BD3E46F7AA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7FAAF976-032D-49F7-AE25-29A85E371EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1FD8F9CE-4E98-4187-B84A-429FA1C65E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FC1D7570-4AB4-44B0-B5ED-D103F0946F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E709E36-B5D0-42E5-A305-AF385FD7F347"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"49506702-1B31-4421-8DEE-5B789272EC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"158777FD-83D1-44B9-83B4-A3F490CA76F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"EDA2FE6B-6E42-4E97-B803-DAB671D30FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"72F5A562-5B2E-4BC7-8A81-EFE5ED265803"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"168E2F18-56C6-4789-BBAC-C99D4792046F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B53EBD40-8E1A-4516-927D-ED1CF212B211"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"1A4E88BA-F637-4400-A64F-E6516AE8917C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"32C745A6-FDE7-4236-BA1D-8BB22D184AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C8EE753-8773-4DFF-90A7-35CE45C7EC30"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI49272","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974520","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81738","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1034783","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI49272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034783","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1614","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-01-25T11:59:02.460","lastModified":"2026-06-17T00:42:15.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a crafted web site."},{"lang":"es","value":"La clase UnacceleratedImageBufferSurface en WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp en Blink, tal como se utiliza en Google Chrome en versiones anteriores a 48.0.2564.82, no maneja correctamente el modo de inicialización, lo que permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.2526.106","matchCriteriaId":"68EEC241-F8D3-4CF6-AE28-1B7BA2E4E6A4"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/81430","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1034801","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2877-1","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=544691","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1407393002/","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2877-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=544691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1407393002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1615","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-01-25T11:59:03.647","lastModified":"2026-06-17T00:42:15.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors."},{"lang":"es","value":"La implementación de Omnibox en Google Chrome en versiones anteriores a 48.0.2564.82 permite a atacantes remotos suplantar el origen de un documento a través de vectores no especificados."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.2526.106","matchCriteriaId":"68EEC241-F8D3-4CF6-AE28-1B7BA2E4E6A4"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/81430","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1034801","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=468179","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=468179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1616","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-01-25T11:59:04.773","lastModified":"2026-06-17T00:42:15.907","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button."},{"lang":"es","value":"La función CustomButton::AcceleratorPressed en ui/views/controls/button/custom_button.cc en Google Chrome en versiones anteriores a 48.0.2564.82 permite a atacantes remotos suplantar URLs a través de vectores implicando un botón personalizado no enfocado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.2526.106","matchCriteriaId":"68EEC241-F8D3-4CF6-AE28-1B7BA2E4E6A4"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/81430","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1034801","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=541415","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1437523005","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=541415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1437523005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1617","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-01-25T11:59:05.773","lastModified":"2026-06-17T00:42:16.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report."},{"lang":"es","value":"La función CSPSource::schemeMatches en WebKit/Source/core/frame/csp/CSPSource.cpp en la implementación de Content Security Policy (CSP) en Blink, tal como se utiliza en Google Chrome en versiones anteriores a 48.0.2564.82, no aplica políticas http a URLs https y no aplica políticas ws a URLs wss, lo que hace más fácil para atacantes remotos determinar si un sitio web específico HSTS ha sido visitado leyendo un informe CSP."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.2526.106","matchCriteriaId":"68EEC241-F8D3-4CF6-AE28-1B7BA2E4E6A4"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/81430","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1034801","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2877-1","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=544765","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1455973003","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2877-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=544765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1455973003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1618","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-01-25T11:59:06.803","lastModified":"2026-06-17T00:42:16.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors."},{"lang":"es","value":"Blink, tal como se utiliza en Google Chrome en versiones anteriores a 48.0.2564.82, no asegura que se utilice un generador de números aleatorios cryptographicallyRandomValues adecuado, lo que hace más fácil para atacantes remotos vencer mecanismos de protección de cifrado a través de vectores no especificados."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.2526.106","matchCriteriaId":"68EEC241-F8D3-4CF6-AE28-1B7BA2E4E6A4"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/81430","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1034801","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2877-1","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=552749","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1419293005","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2877-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=552749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1419293005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-6337","sourceIdentifier":"psirt@cisco.com","published":"2016-01-26T05:59:00.083","lastModified":"2026-06-17T00:30:43.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attackers to inject arbitrary web script or HTML via a crafted hostname in an SNMP response, aka Bug ID CSCuw47238."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un hostname manipulado en una respuesta SNMP, también conocida como Bug ID CSCuw47238."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_policy_infrastructure_controller_enterprise_module:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"95A3BC9C-98D9-47B1-8B62-71468199C788"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_policy_infrastructure_controller_enterprise_module:1.0_ga:*:*:*:*:*:*:*","matchCriteriaId":"12930544-714C-47FA-A5AB-10201D94E72B"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160125-api","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034827","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160125-api","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1298","sourceIdentifier":"psirt@cisco.com","published":"2016-01-26T05:59:01.223","lastModified":"2026-06-17T00:41:40.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1) y 11.0(1) permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores relacionados con enlaces permanentes, también conocido como Bug ID CSCux92033."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_express:10.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B43D9C6E-7541-4667-A723-3CE27DB008B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_express:10.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"1C277058-F33F-4E60-AE89-658CB6558D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_express:10.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D6F83A65-F3AC-4F6B-97A3-9FC582683BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_express:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D7CDF110-17D3-4A1A-ADA2-4D158E172293"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160125-ucce","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034828","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160125-ucce","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-0869","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-01-26T19:59:02.373","lastModified":"2026-06-17T00:38:23.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to cause a denial of service via a malformed HTML document."},{"lang":"es","value":"Desbordamiento de buffer basado en memoria dinámica en MICROSYS PROMOTIC en versiones anteriores a 8.3.11 permite a usuarios remotos autenticados provocar una denegación de servicio a través de un documento HTML mal formado."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsys:promotic:*:*:*:*:*:*:*:*","versionEndIncluding":"8.3.10","matchCriteriaId":"5BB9D3DA-88D7-4D1C-8C9D-3151A55D9293"}]}]}],"references":[{"url":"http://www.promotic.eu/en/pmdoc/NewsPm803.htm#ver80311","source":"ics-cert@hq.dhs.gov","tags":["Patch","Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-026-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.promotic.eu/en/pmdoc/NewsPm803.htm#ver80311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-026-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-1490","sourceIdentifier":"cve@mitre.org","published":"2016-01-26T19:59:05.343","lastModified":"2026-06-17T00:42:04.093","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list."},{"lang":"es","value":"El hotspot Wifi en Lenovo SHAREit en versiones anteriores a 3.2.0 para Windows permite a atacantes remotos obtener nombres sensibles de archivo a través de una petición de archivo a /list manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:S/C:P/I:N/A:N","baseScore":2.7,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":5.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:shareit:*:*:*:*:*:windows:*:*","versionEndIncluding":"2.5.1.1","matchCriteriaId":"825B5C55-44F3-4A76-84E0-A9E323DF3BDA"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/67","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537365/100/0/threaded","source":"cve@mitre.org"},{"url":"https://support.lenovo.com/us/en/product_security/len_4058","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/67","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537365/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.lenovo.com/us/en/product_security/len_4058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1492","sourceIdentifier":"cve@mitre.org","published":"2016-01-26T19:59:07.517","lastModified":"2026-06-17T00:42:04.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area."},{"lang":"es","value":"El hotspot Wifi en Lenovo SHAREit en versiones anteriores a 3.5.48_ww para Android, cuando está configurado para recibir archivos, no requiere una contraseña, lo que facilita a atacantes remotos obtener acceso aprovechando una posición dentro del área de cobertura WLAN."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:N/A:N","baseScore":2.9,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":5.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:shareit:3.0.18_ww:*:*:*:*:android:*:*","matchCriteriaId":"717131AD-D9B2-4DEB-9870-766C7AA4A3D5"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/67","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537365/100/0/threaded","source":"cve@mitre.org"},{"url":"https://support.lenovo.com/us/en/product_security/len_4058","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/67","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537365/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.lenovo.com/us/en/product_security/len_4058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1926","sourceIdentifier":"cve@mitre.org","published":"2016-01-26T19:59:09.500","lastModified":"2026-06-17T00:42:52.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a get_aggregate command to omp."},{"lang":"es","value":"Vulnerabilidad de XSS en el módulo charts en Greenbone Security Assistant (GSA) 6.x en versiones anteriores a 6.0.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro aggregate_type en un comando get_aggregate para omp."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"69333FB7-18F8-4968-907B-3EE2ECB903BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AA8E8263-99A2-403B-96C0-5B466ADB1051"},{"vulnerable":true,"criteria":"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29029981-78BE-4AC4-B224-537E9EFF8F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E1BA798-54B4-40E7-A4A7-4E2FC8B68F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"185ABA96-2E9F-4096-806F-BEC26313E9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E3681566-0991-42CE-A3C5-FA88457995E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7667391C-4776-4825-A5A8-C53EF6DF96A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5093FAAF-3D2A-427D-9FBF-E19BA157CC4C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0295EC73-98B4-48D9-9A0C-72A0A12F47E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CCBD155D-7A96-419F-924F-AF9F629BB531"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"B9550F88-8762-422F-8993-C56EB82E8346"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"5FCA2F27-AB6D-4745-ABB6-154BFBCDAD2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A5FB4211-CBD9-4C54-BF7E-BD4278AF8556"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"BF51DCBB-284B-40A7-847D-AB789DD90B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.11:*:*:*:*:*:*:*","matchCriteriaId":"339B458A-BE74-4055-BBB3-6DD794408254"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"04E1096A-DE15-4411-B06F-443DC7396952"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.13:*:*:*:*:*:*:*","matchCriteriaId":"32331AE1-15E0-4B78-8EC0-C7472BF68C65"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.14:*:*:*:*:*:*:*","matchCriteriaId":"3887CA0D-450C-436D-9C01-4B2961817DD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.15:*:*:*:*:*:*:*","matchCriteriaId":"4B9BBDE1-8AF0-478E-99E8-0D4BF96FA468"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.16:*:*:*:*:*:*:*","matchCriteriaId":"957AEE90-C1A0-48D7-94F2-53C7AF320BFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.17:*:*:*:*:*:*:*","matchCriteriaId":"05D0B263-8B84-42E9-8596-28E0977AD558"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.18:*:*:*:*:*:*:*","matchCriteriaId":"45936C50-7584-4A40-A45D-75061EDC6E25"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.19:*:*:*:*:*:*:*","matchCriteriaId":"283BBA85-7465-4309-A927-64AD81A01DDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.20:*:*:*:*:*:*:*","matchCriteriaId":"5EE7DFAC-808C-422F-B91D-D2E4815E7889"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.21:*:*:*:*:*:*:*","matchCriteriaId":"294F58D0-2931-4851-85B5-2A40DF8B8F30"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.22:*:*:*:*:*:*:*","matchCriteriaId":"92A511EF-C892-418E-A13E-69756F14E176"},{"vulnerable":true,"criteria":"cpe:2.3:o:greenbone:greenbone_os:3.1.23:*:*:*:*:*:*:*","matchCriteriaId":"C19BBD51-080C-449E-AC37-3AA39BC7DF92"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183371.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184478.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/135328/OpenVAS-Greenbone-Security-Assistant-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.greenbone.net/technology/gbsa2016-01.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.openvas.org/OVSA20160113.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537335/100/0/threaded","source":"cve@mitre.org"},{"url":"https://en.internetwache.org/cve-2016-1926-xss-in-the-greenbone-security-assistant-20-01-2016/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183371.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184478.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/135328/OpenVAS-Greenbone-Security-Assistant-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.greenbone.net/technology/gbsa2016-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.openvas.org/OVSA20160113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://en.internetwache.org/cve-2016-1926-xss-in-the-greenbone-security-assistant-20-01-2016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-7439","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-27T05:59:00.103","lastModified":"2026-06-17T00:32:32.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software (RSA4WS) 8.5 through 9.5, and Rational Software Architect RealTime (RSART) 8.5 through 9.5, allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en InfoSphere Data Architect (IDA), tal como es distribuido en IBM Rational Software Architect 8.5 hasta la versión 9.5, Rational Software Architect for WebSphere Software (RSA4WS) 8.5 hasta la versión 9.5 y Rational Software Architect RealTime (RSART) 8.5 hasta la versión 9.5, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3B0890FE-EC2C-4B20-9323-233B409D13A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E0767B4A-4469-4B0C-B0CA-E6C86CA60BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:8.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE3A64DD-FE9B-48AF-8E09-60F8EE296B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:8.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4385352D-A26E-40BD-8C86-63BB932753B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:8.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5DA897EC-DD94-4827-83BB-E31B6670B0BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:8.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"66692CE9-0250-4F7F-9FEA-6AB6F7F04D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:8.5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"1A6B9839-8484-4816-A593-9A71F40303BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:8.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DEDE33E8-EB63-442B-BDD5-7DA87CDE1367"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2052A654-468A-4C84-B7BC-C1D3A039A3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:9.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"366E70CA-915D-48D4-9843-69433D7A183F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"46219905-C2CE-4D4F-8A38-5E4D1C8430C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F1E37391-F80E-4F75-B7EA-D8BA5703E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B83B8BB6-404C-4133-863F-2EA56F578EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:9.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FAB2F429-3FDC-4417-B87D-B18F14BF3E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_realtime:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F387F0AF-A9A2-4917-8629-C825A7245C31"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5AE76F94-2D79-461A-9AE3-DF3B6BA298E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EAF9DB3F-44B9-4913-831A-3CC090D526B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:8.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C271F9B6-C2FC-44F1-A11A-1FE7E0D77B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:8.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E9388CA4-5788-47D2-9FDF-742E1FCD1DCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:8.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"927442F7-1308-4885-B6D8-74262D5B5734"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:8.5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A13B7E9B-47E9-4CFF-906B-47BA7B9BCD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:8.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"66A57DC1-5908-4901-8544-8959F2550E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3A5524A4-A3A7-48E6-8D88-478A2475EAE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:9.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"48CD42F7-D3BE-4B30-913B-B9D3E30C38C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"371E9242-F789-4BBB-AF9B-DD2CBB5C3890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"68D84B4C-956A-4274-A467-A3A30E19D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E8448264-4C92-4C44-823C-CC1B20853611"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:9.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"06FC859E-4B40-4A95-AED7-0D4A792EA222"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8D388EEE-3BBB-40CB-82E1-E3C150A76BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect_for_websphere_software\\':8.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BF9ED-7DB5-4D57-92EF-6825C50837F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8D5F2F18-6946-459D-9789-F32CBD783D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D3D9678E-FBB7-4C88-BF3C-6A9DCD3AF26C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:8.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2AEEC4F8-D65B-4233-9F49-BCA6D20C825B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:8.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E0121E14-22DC-4DBF-B197-E01998937BBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:8.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C6E3D169-14AA-4A10-B2EF-9E53A0F91A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:8.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"41AB9C7A-B83B-40A0-974C-C6662C910793"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:8.5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"39AEE008-9216-4757-BE37-57E07071F191"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:8.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"12BF54A5-3D0E-4219-A399-4F6669D755C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3366D021-ACB1-4C0B-A48D-CF499486612A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:9.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"570FB15D-E709-4BEE-A6A9-68AE7F7DC77B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"949A79A8-332D-4601-9D54-9663EDE77BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE81BAC8-C441-4DAE-97D9-E3050D113524"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DF4EAAB5-F4C1-4B5B-90D7-F369D3F0455B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:9.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7DCD8E9F-0B9C-480B-83EC-C6E7EAAA223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"7E8F963E-1892-4AD4-87A9-82D7E58080C3"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972909","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7487","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-27T05:59:01.260","lastModified":"2026-06-17T00:32:36.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow local users to obtain sensitive information by leveraging administrative privileges and reading log files."},{"lang":"es","value":"IBM Maximo Asset Management 7.1 hasta la versión 7.1.1.13, 7.5.0 en versiones anteriores a 7.5.0.9 IFIX002 y 7.6.0 en versiones anteriores a 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 en versiones anteriores a 7.5.0.9 IFIX002, 7.5.1 y 7.6.0 en versiones anteriores a 7.6.0.3 IFIX001 para SmartCloud Control Desk; y Maximo Asset Management 7.1 hasta la versión 7.1.1.13 y 7.2 para Tivoli IT Asset Management for IT y otros ciertos productos permiten a usuarios locales obtener información sensible aprovechando privilegios administrativos y leyendo archivos de registro."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1AF3DBFF-A377-4147-A6EB-BEC6F38FD8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2:*:*:*:*:*:*:*","matchCriteriaId":"83470AC7-A06B-4443-9E60-B0AA18B69AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*","matchCriteriaId":"DE721CF9-0F75-410B-A0F4-542041E25925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F261A268-7CD0-4328-8FBB-6AC40927DDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"537C2C01-302E-48A2-9D50-C98AB6DBC466"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"65C72B48-0C0F-4C90-A34B-528A5C67432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"59090B6A-09AE-4597-A60A-38C20AEA8F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"74B7BC68-4BCB-4E02-9F6D-0F99DBE87FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6FB99EBA-9725-4AB3-B816-5E00ADD7B7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"19A4B2CD-94F5-4449-8D1F-E69C3BA9929C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"9F077F88-37D3-43FA-8EA6-A7FBD9869AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"741A13F4-DED0-43A2-8761-AAEAA0557B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8945E452-7D50-4C59-B8CE-8F1C756DB01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"D0632D29-B9B9-48E1-9762-A80B660CEBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"048BAB63-0A88-4E3D-998B-06EC7917DC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4B590C42-21A1-4C62-8293-5A0D7AD628E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"01604919-877F-4BDF-A137-C1A54E04BEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4577B9CD-45CA-4D01-B99D-7C39131C9C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBB734EA-42EE-4BE0-934E-9E783BCDA31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"16981EC3-76AE-441B-92C4-8DD6E6A1EA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"36BB996E-17BC-4E35-97A0-142946F6B2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BA8B991C-2AE4-499D-B173-BF016D7F78F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"804A2AD3-94FB-4085-AE08-F7120EDDEFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D2659CCD-6D04-4479-BA93-B906DC200424"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C47DB9B3-C8CD-45E9-9F53-617354F3A339"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*","matchCriteriaId":"58B773C7-9386-4704-B85F-748578DBC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B028794E-5FA0-4E3D-AC4D-A2826DD6282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"050D798F-F9CC-447B-94F4-81A893349695"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"948B518D-129E-42E7-B07F-5E1CA5056DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7038EBF6-E527-492B-A6A5-14F9A2F79BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FCA89D39-C008-49CD-9D1E-7109644970AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5F7AF98E-13F3-4D28-9BD1-4D17DFF290D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1CF1B4FA-A938-4A1C-91C7-21255ACDB0DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E5C2A28-739B-42A3-9161-E88BACB1876A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7BB685AE-C72D-41BD-B9E3-0767328EAB73"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8BDC50C9-49EF-47CA-88FB-A8BCDF44922B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7197C12C-5CD7-4F7D-8B38-F792FAABC1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1EE096D4-40A8-4FD8-905C-3B13476BF748"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1E369397-1BC9-42E3-94AB-1CDB01D4838C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_energy_optimization:7.1:*:*:*:*:*:*:*","matchCriteriaId":"47FE69C7-D7C4-4707-B3EF-AC290F2CF92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3D8673B0-D385-467A-A60C-90A436C976D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4908AC9D-7410-47A6-BC46-5587C60061A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.1:*:*:*:*:*:*:*","matchCriteriaId":"9B315997-8DD3-4244-B292-68568FB82CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.5:*:*:*:*:*:*:*","matchCriteriaId":"360D781D-AD52-4309-A484-2150B10DFB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4796CF9E-0065-4DE2-8C7A-22EB76F65E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5:*:*:*:*:*:*:*","matchCriteriaId":"75C69BA7-055F-446B-9E76-398D57680BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1:*:*:*:*:*:*:*","matchCriteriaId":"764D9D95-26A8-441E-95E1-55C9CDEA59BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5:*:*:*:*:*:*:*","matchCriteriaId":"012787EB-E7F0-4CAD-B406-6057A7F6F14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.1:*:*:*:*:*:*:*","matchCriteriaId":"2F780ADF-3151-4B2C-98B9-7FFD0DB47A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4367602D-5736-459D-82C1-099CD484F2FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.1:*:*:*:*:*:*:*","matchCriteriaId":"553D4A7C-E2F0-40F7-88FC-AB372DFCA9DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1480E9F7-9CA1-4F8D-977F-0F13594D0D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6EECFFA3-6D8F-454F-AD00-2DC51A954B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.6:*:*:*:*:*:*:*","matchCriteriaId":"A9FC166C-B9B7-4DD9-B22E-174247578F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*","matchCriteriaId":"013D299A-6A9C-44C7-B49C-A4115F4C13E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:*","matchCriteriaId":"3D5C1BCF-1DC0-45E7-B624-9221F8610346"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"54234F72-760A-4E80-8172-1AD93F0A372B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2:*:*:*:*:*:*:*","matchCriteriaId":"95FF438A-31FC-44DD-AC14-C9332F0B0A3D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974537","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7488","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-27T05:59:02.323","lastModified":"2026-06-17T00:32:36.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via unspecified vectors."},{"lang":"es","value":"IBM Spectrum Scale 4.1.1.x en versiones anteriores a 4.1.1.4 y 4.2.x en versiones anteriores a 4.2.0.1, en ciertas configuraciones de protocolo LDAP File, permite a atacantes remotos descubrir una contraseña LDAP a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2E29D816-7A73-47EA-8DE6-E553CA0D1079"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"18C5A85C-F932-44CF-B3EA-691737C96C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9385B07C-881D-4A4E-A0F5-FF1BC88F8CFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_scale:4.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9A55A717-5CA2-4073-80AA-16044EC23B7B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005580","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0209","sourceIdentifier":"psirt@us.ibm.com","published":"2016-01-27T05:59:03.417","lastModified":"2026-06-17T00:37:07.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Portal 8.5.0 en versiones anteriores a CF09 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974564","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034844","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1923","sourceIdentifier":"cve@mitre.org","published":"2016-01-27T20:59:01.407","lastModified":"2026-06-17T00:42:52.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image."},{"lang":"es","value":"Desbordamiento de buffer basado en memoria dinámica en la función opj_j2k_update_image_data en OpenJpeg 2016.1.18 permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de una imagen JPEG 2000 manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uclouvain:openjpeg:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3F92DCC7-979D-40C1-B21C-544AB686076F"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/7","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201612-26","source":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1924","sourceIdentifier":"cve@mitre.org","published":"2016-01-27T20:59:02.390","lastModified":"2026-06-17T00:42:52.317","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image."},{"lang":"es","value":"La función opj_tgt_reset en OpenJpeg 2016.1.18 permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de una imagen JPEG 2000 manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.0","matchCriteriaId":"BA6BA5BE-0BB1-43CD-8F99-1252CA514E6D"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3665","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/7","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201612-26","source":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Per <a href=\"https://github.com/uclouvain/openjpeg/issues/704\">LINK</a> that the version affected is the current latest version available for download (2.1.0)."}},{"cve":{"id":"CVE-2016-2047","sourceIdentifier":"cve@mitre.org","published":"2016-01-27T20:59:05.610","lastModified":"2026-06-17T00:43:19.593","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"/CN=\" string in a field in a certificate, as demonstrated by \"/OU=/CN=bar.com/CN=foo.com.\""},{"lang":"es","value":"La función ssl_verify_server_cert en sql-common/client.c en MariaDB en versiones anteriores a 5.5.47, 10.0.x en versiones anteriores a 10.0.23 y 10.1.x en versiones anteriores a 10.1.10; Oracle MySQL 5.5.48 y versiones anteriores, 5.6.29 y versiones anteriores y 5.7.11 y versiones anteriores; y Percona Server no verifica correctamente que el nombre de host del servidor coincide con un nombre de dominio en el Common Name (CN) del asunto o en el campo subjectAltName del certificado X.509, lo que permite a atacantes man-in-the-middlesuplantar servidores SSL a través de una cadena \"/CN=\" en un campo en un certificado, según lo demostrado por \"/OU=/CN=bar.com/CN=foo.com\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.47","matchCriteriaId":"F2EA70BB-425F-4E0F-A618-F72258430EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.23","matchCriteriaId":"889BD0D7-BB02-4317-A9F1-C6E5E03F16D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.10","matchCriteriaId":"C682E800-3908-422D-91FE-4C2956691CEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.48","matchCriteriaId":"386760AA-48FC-429A-9206-07B081361BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.29","matchCriteriaId":"D880856F-559E-43B5-9D46-181D01C0E8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.11","matchCriteriaId":"04D3333B-F3AC-4BB9-9F38-AC0BA9B5B8F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3453","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/26/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81810","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://mariadb.atlassian.net/browse/MDEV-9212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mdb-10023-rn/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/26/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.atlassian.net/browse/MDEV-9212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mdb-10023-rn/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1299","sourceIdentifier":"psirt@cisco.com","published":"2016-01-27T22:59:02.677","lastModified":"2026-06-17T00:41:40.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174."},{"lang":"es","value":"La implementación de la GUI de gestión web en dispositivos Cisco Small Business SG300 1.4.1.x permite a atacantes remotos causar una denegación de servicio (interrupción de HTTPS) a través de peticiones manipuladas HTTPS, también conocida como Bug ID CSCuw87174."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:300_series_managed_switch_firmware:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0A1354BD-4EBE-4DCE-B061-088FE90C72A6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf300-08:*:*:*:*:*:*:*:*","matchCriteriaId":"BD1FF561-DDB4-4EEB-B94E-B086C95DED0E"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf300-24:*:*:*:*:*:*:*:*","matchCriteriaId":"8EDD17F8-9246-4DA2-BA0D-3C599B992A78"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf300-24mp:*:*:*:*:*:*:*:*","matchCriteriaId":"2DF17618-ED20-4211-8B42-EB7CFA21FD2F"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf300-24p:*:*:*:*:*:*:*:*","matchCriteriaId":"76F9CED7-FEF5-475D-AC5C-B8BDF717428F"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf300-24pp:*:*:*:*:*:*:*:*","matchCriteriaId":"B12F4DFF-C758-4527-9DF6-779D58BA60E0"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf300-48:*:*:*:*:*:*:*:*","matchCriteriaId":"239838D3-BDA1-4E46-8C89-8AC591FF8A08"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf300-48p:*:*:*:*:*:*:*:*","matchCriteriaId":"303860EA-113B-4A2A-8E6B-6F78BE83F43D"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf300-48pp:*:*:*:*:*:*:*:*","matchCriteriaId":"0CF9609A-B31E-4333-BF81-0206A2C5F109"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf302-08:*:*:*:*:*:*:*:*","matchCriteriaId":"B369B76B-4646-47AB-994B-C286A4C9DA4C"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf302-08mp:*:*:*:*:*:*:*:*","matchCriteriaId":"C081885D-5780-49AB-9892-95050CCC82A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf302-08mpp:*:*:*:*:*:*:*:*","matchCriteriaId":"4F4CAABC-7AC4-4633-9E9C-83BD6CC72F50"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf302-08p:*:*:*:*:*:*:*:*","matchCriteriaId":"AE2C717B-530E-4CC2-BD08-CC5374D03EF9"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sf302-08pp:*:*:*:*:*:*:*:*","matchCriteriaId":"2AD85B3E-9E2B-43BB-81C4-A1076588CA7E"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-10:*:*:*:*:*:*:*:*","matchCriteriaId":"9D921109-B496-4EAD-9973-82A3F3C4A04D"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-10mp:*:*:*:*:*:*:*:*","matchCriteriaId":"E775E9C1-2346-40AC-95DB-51B853656E7A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-10mpp:*:*:*:*:*:*:*:*","matchCriteriaId":"D933957E-C037-41D8-816F-BB1DEE9F3800"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-10p:*:*:*:*:*:*:*:*","matchCriteriaId":"F0A6D158-5D25-4C02-AFDA-59225C38D3E4"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-10pp:*:*:*:*:*:*:*:*","matchCriteriaId":"40306F26-176A-46DB-AB8F-77009BAD5444"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-10sfp:*:*:*:*:*:*:*:*","matchCriteriaId":"964B81B3-D488-448C-9EBB-0AD4A31B9ABD"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-20:*:*:*:*:*:*:*:*","matchCriteriaId":"C7E3015E-BB9D-42E6-8EE2-B728B8BB877D"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-28:*:*:*:*:*:*:*:*","matchCriteriaId":"170FB2FB-BDE9-400B-82BE-80E54418FC7E"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-28mp:*:*:*:*:*:*:*:*","matchCriteriaId":"FAE0ECDE-64D6-49C4-9406-24473108B1B4"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-28p:*:*:*:*:*:*:*:*","matchCriteriaId":"7A1B6D87-C501-4A82-99CC-5FDE0BC9B0D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-28pp:*:*:*:*:*:*:*:*","matchCriteriaId":"BB018B21-D494-4C20-88EE-3D81E9C956C4"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-52:*:*:*:*:*:*:*:*","matchCriteriaId":"9C79BAC9-B707-426F-9647-8646AFF50212"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-52mp:*:*:*:*:*:*:*:*","matchCriteriaId":"0C5E6A36-11C7-41F0-BCE9-BB54762A7AF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sg300-52p:*:*:*:*:*:*:*:*","matchCriteriaId":"C8816043-4271-4E56-9BF1-6702980DCA9B"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1300","sourceIdentifier":"psirt@cisco.com","published":"2016-01-27T22:59:03.770","lastModified":"2026-06-17T00:41:40.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Unity Connection (UC) 10.5(2.3009) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocida como Bug ID CSCux82582."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity_connection:10.5\\(2.3009\\):*:*:*:*:*:*:*","matchCriteriaId":"0C9B5432-11E5-4800-BB0F-48DFCAF409FA"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-uc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-uc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8790","sourceIdentifier":"cve@mitre.org","published":"2016-01-29T19:59:02.157","lastModified":"2026-06-17T00:35:15.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access."},{"lang":"es","value":"La función EbmlUnicodeString::UpdateFromUTF8 en libEBML en versiones anteriores a 1.3.3 permite a atacantes dependientes del contexto obtener información sensible desde la memoria dinámica de proceso a través de una cadena UTF-8 manipulada, lo que desencadena un acceso de memoria no válido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matroska:libebml:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"96E02511-A860-4F99-9DD2-37F63856A267"}]}]}],"references":[{"url":"http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3538","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/85307","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/95124","source":"cve@mitre.org"},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0036/","source":"cve@mitre.org"},{"url":"https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833ba12036b","source":"cve@mitre.org"},{"url":"http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/85307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/95124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0036/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833ba12036b","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8791","sourceIdentifier":"cve@mitre.org","published":"2016-01-29T19:59:03.217","lastModified":"2026-06-17T00:35:15.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access."},{"lang":"es","value":"La función EbmlElement::ReadCodedSizeValue en libEBML en versiones anteriores a 1.3.3 permite a atacantes dependientes del contexto obtener información sensible desde la memoria dinámica de proceso a través de un valor de longitud manipulado en un id EBML, lo que desencadena un acceso de memoria no válido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matroska:libebml:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"96E02511-A860-4F99-9DD2-37F63856A267"}]}]}],"references":[{"url":"http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3538","source":"cve@mitre.org"},{"url":"https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/Matroska-Org/libebml/commit/24e5cd7c666b1ddd85619d60486db0a5481c1b90","source":"cve@mitre.org"},{"url":"http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/Matroska-Org/libebml/commit/24e5cd7c666b1ddd85619d60486db0a5481c1b90","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8792","sourceIdentifier":"cve@mitre.org","published":"2016-01-29T19:59:04.203","lastModified":"2026-06-17T00:35:15.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access."},{"lang":"es","value":"La función KaxInternalBlock::ReadData en libMatroska en versiones anteriores a 1.4.4 permite a atacantes dependientes del contexto obtener información sensible desde la memoria dinámica de proceso a través de un EBML lacing manipulado, lo que desencadena un acceso a memoria no válido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matroska:libmatroska:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"CA7C862C-7095-4CAE-A873-9056C6C6A878"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3526","source":"cve@mitre.org"},{"url":"https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f","source":"cve@mitre.org"},{"url":"http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8793","sourceIdentifier":"cve@mitre.org","published":"2016-01-29T19:59:05.170","lastModified":"2026-06-17T00:35:15.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937."},{"lang":"es","value":"Vulnerabilidad de XSS en program/include/rcmail.php en Roundcube en versiones anteriores a 1.0.6 y 1.1.x en versiones anteriores a 1.1.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro _mbox en una tarea correo a la URL por defecto, una vulnerabilidad diferente a CVE-2011-2937."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.5","matchCriteriaId":"F0563DDC-071C-46F2-8AAD-22CC7EBE5286"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3EDF68D9-C3DF-49CA-929F-1010F93F978C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3EF1A038-BB16-4695-B22F-4FBFC4F233A1"}]}]}],"references":[{"url":"http://trac.roundcube.net/ticket/1490417","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch"]},{"url":"http://trac.roundcube.net/wiki/Changelog#RELEASE1.1.2","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://trac.roundcube.net/ticket/1490417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch"]},{"url":"http://trac.roundcube.net/wiki/Changelog#RELEASE1.1.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8794","sourceIdentifier":"cve@mitre.org","published":"2016-01-29T19:59:06.140","lastModified":"2026-06-17T00:35:15.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the _alt parameter, related to contact photo handling."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en program/steps/addressbook/photo.inc en Roundcube en versiones anteriores a 1.0.6 y 1.1.x en versiones anteriores a 1.1.2 permite a usuarios remotos autenticados leer archivos arbitrarios a través de un nombre de ruta completa en el parámetro _alt, relacionado con la manipulación de la foto de contacto."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:roundcube_webmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.5","matchCriteriaId":"8DD8E608-8097-4332-B75D-75FACA46A6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:roundcube_webmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E9EB6E2E-9715-4480-A54F-91A23C6EE209"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:roundcube_webmail:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DDB20CBA-5A6E-4AAA-8ACF-91FF96488F4E"}]}]}],"references":[{"url":"http://trac.roundcube.net/changeset/6ccd4c54b/github","source":"cve@mitre.org"},{"url":"http://trac.roundcube.net/changeset/e84fafcec/github","source":"cve@mitre.org"},{"url":"http://trac.roundcube.net/ticket/1490379","source":"cve@mitre.org"},{"url":"https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://trac.roundcube.net/changeset/6ccd4c54b/github","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.roundcube.net/changeset/e84fafcec/github","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.roundcube.net/ticket/1490379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0754","sourceIdentifier":"secalert@redhat.com","published":"2016-01-29T20:59:04.780","lastModified":"2026-06-17T00:38:09.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon in a remote file name."},{"lang":"es","value":"cURL en versiones anteriores a 7.47.0 en Windows permite a atacantes escribir en archivos arbitrarios en el directorio de trabajo actual en un disco diferente a través de dos puntos en un nombre de archivo remoto."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*","versionEndIncluding":"7.46.0","matchCriteriaId":"70B94835-9FDC-4EFE-A37D-9BFCEFA12197"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://curl.haxx.se/docs/adv_20160127B.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://curl.haxx.se/docs/adv_20160127B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0756","sourceIdentifier":"secalert@redhat.com","published":"2016-01-29T20:59:06.560","lastModified":"2026-06-17T00:38:09.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix."},{"lang":"es","value":"La función generate_dialback en el módulo mod_dialback en Prosody en versiones anteriores a 0.9.10 no separa campos correctamente cuando genera claves de devolución de llamada, lo que permite a atacantes remotos suplantar dominios de red XMPP a través de una identidad de flujo y un nombre de dominio manipulados que están incluidos en el dominio objetivo como un sufijo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prosody:prosody:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.9","matchCriteriaId":"7335EF0B-26AC-4407-880D-9A92F5D5D722"}]}]}],"references":[{"url":"http://blog.prosody.im/prosody-0-9-10-released/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176796.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176914.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3463","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/27/10","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/82241","source":"secalert@redhat.com"},{"url":"https://prosody.im/issues/issue/596","source":"secalert@redhat.com"},{"url":"https://prosody.im/security/advisory_20160127/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://blog.prosody.im/prosody-0-9-10-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176796.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176914.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/27/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://prosody.im/issues/issue/596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://prosody.im/security/advisory_20160127/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1304","sourceIdentifier":"psirt@cisco.com","published":"2016-01-30T12:59:02.243","lastModified":"2026-06-17T00:41:40.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux82596."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Unity Connection 10.5(2.3009) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un valor manipulado, también conocida como Bug ID CSCux82596."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity_connection:10.5\\(2.3009\\):*:*:*:*:*:*:*","matchCriteriaId":"0C9B5432-11E5-4800-BB0F-48DFCAF409FA"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160128-uc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034868","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160128-uc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1488","sourceIdentifier":"cve@mitre.org","published":"2016-01-30T12:59:03.103","lastModified":"2026-06-17T00:42:03.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices before 6.00 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en el formulario de inicio de sesión en el servidor web integrado en dispositivos Siemens OZW OZW672 en versiones anteriores a 6.00 y OZW772 en versiones anteriores a 6.00 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:ozw672:-:*:*:*:*:*:*:*","matchCriteriaId":"2B44996E-361B-4A33-BCBA-E834612D891E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:ozw672_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"7334FDED-A93B-49F4-9FA6-3407DBCC336E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:ozw772:-:*:*:*:*:*:*:*","matchCriteriaId":"D76AA89B-3B42-4A6D-858D-63F503D8F953"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:ozw772_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"1E55E919-90FC-46F8-92F0-20876D392646"}]}]}],"references":[{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-743465.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-019-01","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-743465.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-019-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-1136","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-01-30T15:59:01.093","lastModified":"2026-06-17T00:41:21.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en dispositivos KDDI HOME SPOT CUBE en versiones anteriores a 2 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kddi:home_spot_cube_firmware:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45565F93-4277-4413-963D-704F364189E3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:kddi:home_spot_cube:*:*:*:*:*:*:*:*","matchCriteriaId":"1AF17DC0-2320-4283-A8E9-BC42F309CBBB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN54686544/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000007","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN54686544/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1138","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-01-30T15:59:03.047","lastModified":"2026-06-17T00:41:21.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en dispositivos KDDI HOME SPOT CUBE en versiones anteriores a 2 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kddi:home_spot_cube_firmware:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45565F93-4277-4413-963D-704F364189E3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:kddi:home_spot_cube:*:*:*:*:*:*:*:*","matchCriteriaId":"1AF17DC0-2320-4283-A8E9-BC42F309CBBB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN54686544/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000009","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN54686544/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/93.html\">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>"}},{"cve":{"id":"CVE-2016-1140","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-01-30T15:59:04.970","lastModified":"2026-06-17T00:41:22.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors."},{"lang":"es","value":"Dispositivos KDDI HOME SPOT CUBE en versiones anteriores a 2 permiten a atacantes remotos llevar a cabo ataques de secuestro de clic a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kddi:home_spot_cube_firmware:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45565F93-4277-4413-963D-704F364189E3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:kddi:home_spot_cube:*:*:*:*:*:*:*:*","matchCriteriaId":"1AF17DC0-2320-4283-A8E9-BC42F309CBBB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN54686544/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000011","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN54686544/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1141","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-01-30T15:59:05.860","lastModified":"2026-06-17T00:41:22.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors."},{"lang":"es","value":"Dispositivos KDDI HOME SPOT CUBE en versiones anteriores a 2 permiten a usuarios remotos autenticados ejecutar comandos OS arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kddi:home_spot_cube_firmware:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45565F93-4277-4413-963D-704F364189E3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:kddi:home_spot_cube:*:*:*:*:*:*:*:*","matchCriteriaId":"1AF17DC0-2320-4283-A8E9-BC42F309CBBB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN54686544/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000012","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN54686544/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1143","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-01-30T15:59:06.767","lastModified":"2026-06-17T00:41:22.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in main.rb in Vine MV before 2015-11-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en main.rb en Vine MV en versiones anteriores a 2015-11-08 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vine_mv_project:vine_mv:*:*:*:*:*:*:*:*","versionEndIncluding":"2015-09-09","matchCriteriaId":"40FB96BA-93E7-498F-893C-D84FCEB4D69B"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN12165579/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000016","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://github.com/ikeay/vinemv/commit/f41efbcac1f9262a161ebc1babfcf55fae9e939a","source":"vultures@jpcert.or.jp","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN12165579/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/ikeay/vinemv/commit/f41efbcac1f9262a161ebc1babfcf55fae9e939a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-1144","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-01-30T15:59:07.813","lastModified":"2026-06-17T00:41:22.457","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en JOB-CUBE -JOB WEB SYSTEM en versiones anteriores a 1.2.2 y -JOB WEB SYSTEM High Income 1.0.6 y versiones anteriores permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:websquare:job-cube:*:*:*:*:high_income:*:*:*","versionEndIncluding":"1.0.6","matchCriteriaId":"07B90A61-FBB8-449E-B6CB-45ED0ECAF8DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:websquare:job-cube:*:*:*:*:-:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"3665B32B-0044-4CDC-BA44-BDB1E0C0DA61"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN26921563/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000017","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.ws-download.net/info.php?type=version&id=V0001081","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN26921563/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.ws-download.net/info.php?type=version&id=V0001081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1933","sourceIdentifier":"security@mozilla.org","published":"2016-01-31T18:59:02.200","lastModified":"2026-06-17T00:42:53.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted GIF image."},{"lang":"es","value":"Desbordamiento de entero en la funcionalidad image-deinterlacing en Mozilla Firefox en versiones anteriores a 44.0 permite a atacantes remotos causar una denegación de servicio (consumo de memoria o caída de aplicación) a través de una imagen GIF manipulada."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"43.0.4","matchCriteriaId":"11233031-7034-4B56-8D8A-FCBD100B26F3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-02.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81956","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1034825","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1231761","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1231761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1937","sourceIdentifier":"security@mozilla.org","published":"2016-01-31T18:59:04.027","lastModified":"2026-06-17T00:42:53.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended."},{"lang":"es","value":"El diálogo del manejador de protocolo en Mozilla Firefox en versiones anteriores a 44.0 permite a atacantes remotos llevar a cabo ataques de secuestro de clic a través de un sitio web manipulado que desencadena una acción de clic simple en una situación en la que se pretendía una acción de doble clic."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"43.0.4","matchCriteriaId":"11233031-7034-4B56-8D8A-FCBD100B26F3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-06.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81957","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1034825","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=724353","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=724353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1938","sourceIdentifier":"security@mozilla.org","published":"2016-01-31T18:59:05.107","lastModified":"2026-06-17T00:42:53.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function."},{"lang":"es","value":"La función s_mp_div en lib/freebl/mpi/mpi.c en Mozilla Network Security Services (NSS) en versiones anteriores a 3.21, como se utiliza en Mozilla Firefox en versiones anteriores a 44.0, no divide adecuadamente números, lo que podría hacer mas fácil para atacantes remotos vencer el mecanismo de protección criptográfico mediante el aprovechamiento del uso de la función (1) mp_div o (2) mp_exptmod."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:*","versionEndIncluding":"3.20.1","matchCriteriaId":"06ECACCD-8004-4774-8806-585879B7CB87"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"43.0.4","matchCriteriaId":"11233031-7034-4B56-8D8A-FCBD100B26F3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3688","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-07.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81955","source":"security@mozilla.org"},{"url":"http://www.securityfocus.com/bid/91787","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034825","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2903-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2903-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2973-1","source":"security@mozilla.org"},{"url":"https://blog.fuzzing-project.org/37-Mozilla-NSS-Wrong-calculation-results-in-mp_div-and-mp_exptmod.html","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1190248","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1194947","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_div.c","source":"security@mozilla.org"},{"url":"https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_exptmod.c","source":"security@mozilla.org"},{"url":"https://hg.mozilla.org/projects/nss/diff/a555bf0fc23a/lib/freebl/mpi/mpi.c","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201701-46","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2903-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2903-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2973-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blog.fuzzing-project.org/37-Mozilla-NSS-Wrong-calculation-results-in-mp_div-and-mp_exptmod.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1190248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1194947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_div.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_exptmod.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hg.mozilla.org/projects/nss/diff/a555bf0fc23a/lib/freebl/mpi/mpi.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-46","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1939","sourceIdentifier":"security@mozilla.org","published":"2016-01-31T18:59:06.027","lastModified":"2026-06-17T00:42:54.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7208."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 44.0 almacena cookies con nombres que contienen caracteres de tabulación verticales, lo que permite a atacantes remotos obtener información sensible mediante la lectura de cabeceras HTTP Cookie. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2015-7208."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"43.0.4","matchCriteriaId":"11233031-7034-4B56-8D8A-FCBD100B26F3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-04.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034825","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1233784","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1233784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1940","sourceIdentifier":"security@mozilla.org","published":"2016-01-31T18:59:06.917","lastModified":"2026-06-17T00:42:54.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a data: URL that is mishandled during (1) shortcut opening or (2) BOOKMARK intent processing."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 44.0 en Android permite a atacantes remotos suplantar la barra de direcciones a través de un data: URL que se maneja incorrectamente durante el procesamiento de (1) la apertura de un acceso directo o (2) un BOOKMARK intent."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","matchCriteriaId":"8255F035-04C8-4158-B301-82101711939C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"43.0.4","matchCriteriaId":"11233031-7034-4B56-8D8A-FCBD100B26F3"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-05.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034825","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1208525","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1208525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1941","sourceIdentifier":"security@mozilla.org","published":"2016-01-31T18:59:07.810","lastModified":"2026-06-17T00:42:54.263","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The file-download dialog in Mozilla Firefox before 44.0 on OS X enables a certain button too quickly, which allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended."},{"lang":"es","value":"El dialogo de descarga de archivo en Mozilla Firefox en versiones anteriores a 44.0 en OS X habilita un determinado botón muy rápido, lo que permite a atacantes remotos llevar a cabo ataques de secuestro de clic a través de un sitio web manipulado que desencadena una acción de clic simple en una situación en la que se pretendía una acción de doble clic."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"43.0.4","matchCriteriaId":"11233031-7034-4B56-8D8A-FCBD100B26F3"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-08.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034825","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1116385","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1116385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1943","sourceIdentifier":"security@mozilla.org","published":"2016-01-31T18:59:09.653","lastModified":"2026-06-17T00:42:54.483","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 44.0 en Android permite a atacantes remotos suplantar la barra de direcciones a través del método scrollTo."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:43.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2BA4661-5AA5-4DE1-8897-23F01CC8FC29"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","matchCriteriaId":"8255F035-04C8-4158-B301-82101711939C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-09.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81948","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1034825","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1228590","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1228590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1947","sourceIdentifier":"security@mozilla.org","published":"2016-01-31T18:59:13.387","lastModified":"2026-06-17T00:42:54.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data."},{"lang":"es","value":"Mozilla Firefox 43.x no maneja adecuadamente los intentos de conexión al servicio Application Reputation, lo que hace que sea más fácil para atacantes remotos desencadenar una descarga involuntaria , aprovechando la ausencia de datos de reputación."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:43.0:*:*:*:*:*:*:*","matchCriteriaId":"F0A4FDC2-4904-4862-BC6C-627848D2C828"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:43.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E70DD85A-AB0F-4717-BF41-1D1B8C58C5CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:43.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C541BA08-967F-43F5-99EE-5E2C1547A240"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:43.0.3:*:*:*:*:*:*:*","matchCriteriaId":"81D3E615-04A1-4064-8D9B-58DD8C1B9C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:43.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2BA4661-5AA5-4DE1-8897-23F01CC8FC29"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-11.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81949","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034825","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1237103","source":"security@mozilla.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/81949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2880-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2880-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1237103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1948","sourceIdentifier":"security@mozilla.org","published":"2016-01-31T18:59:14.263","lastModified":"2026-06-17T00:42:55.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 44.0 en Android no asegura que se utiliza HTTPS para una instalación lightweight-theme, lo que permite a atacantes man-in-the-middle reemplazar imágenes y colores de un tema modificando el flujo de datos cliente-servidor."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","matchCriteriaId":"8255F035-04C8-4158-B301-82101711939C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:43.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2BA4661-5AA5-4DE1-8897-23F01CC8FC29"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-12.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034825","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1235876","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1235876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1728","sourceIdentifier":"product-security@apple.com","published":"2016-02-01T11:59:13.073","lastModified":"2026-06-17T00:42:31.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the \"a:visited button\" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site."},{"lang":"es","value":"La implementación Cascading Style Sheets (CSS) en Apple iOS en versiones anteriores a 9.2.1 y Safari en versiones anteriores a 9.0.3 no maneja adecuadamente el selector \"a:visited button\" durante un alto procesamiento, lo que hace que sea más fácil para atacantes remotos obtener información sensible del historial del navegador a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.2","matchCriteriaId":"F580CA0D-705B-42AD-A121-30694E297470"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2","matchCriteriaId":"66F0A17C-3DC1-4E8A-9291-DD97F386F40C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/archive/1/537771/100/0/threaded","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/81263","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1034737","source":"product-security@apple.com"},{"url":"https://security.gentoo.org/glsa/201706-15","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205730","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205732","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537771/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201706-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1730","sourceIdentifier":"product-security@apple.com","published":"2016-02-01T11:59:14.887","lastModified":"2026-06-17T00:42:31.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebSheet in Apple iOS before 9.2.1 allows remote attackers to read or write to cookies by operating a crafted captive portal."},{"lang":"es","value":"WebSheet en Apple iOS en versiones anteriores a 9.2.1 permite a atacantes remotos leer o escribir en cookies, mediante la operación de un portal cautivo manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2","matchCriteriaId":"66F0A17C-3DC1-4E8A-9291-DD97F386F40C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034737","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205732","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8781","sourceIdentifier":"security@debian.org","published":"2016-02-01T21:59:01.110","lastModified":"2026-06-17T00:35:14.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782."},{"lang":"es","value":"tif_luv.c en libtiff permite a atacantes provocar una denegación de servicio (escritura fuera de rango) a través de un número no válido de muestras por píxel en una imagen TIFF comprimida con LogL, una vulnerabilidad diferente a CVE-2015-8782."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0.7","matchCriteriaId":"A375D786-08EE-4FE2-8C5E-7D8EC155F227"}]}]}],"references":[{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2522#c0","source":"security@debian.org","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/3","source":"security@debian.org","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/7","source":"security@debian.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81730","source":"security@debian.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2522#c0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8782","sourceIdentifier":"security@debian.org","published":"2016-02-01T21:59:02.110","lastModified":"2026-06-17T00:35:14.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781."},{"lang":"es","value":"tif_luv.c en libtiff permite a atacantes provocar una denegación de servicio (escrituras fuera de rango) a través de una imagen TIFF manipulada, una vulnerabilidad diferente a CVE-2015-8781."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0.7","matchCriteriaId":"A375D786-08EE-4FE2-8C5E-7D8EC155F227"}]}]}],"references":[{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2522","source":"security@debian.org","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/3","source":"security@debian.org","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/7","source":"security@debian.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81730","source":"security@debian.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8783","sourceIdentifier":"security@debian.org","published":"2016-02-01T21:59:03.063","lastModified":"2026-06-17T00:35:14.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image."},{"lang":"es","value":"tif_luv.c en libtiff permite a atacantes provocar una denegación de servicio (lecturas fuera de rango) a través de una imagen TIFF manipulada."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0.7","matchCriteriaId":"A375D786-08EE-4FE2-8C5E-7D8EC155F227"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2522","source":"security@debian.org","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/3","source":"security@debian.org","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/7","source":"security@debian.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81730","source":"security@debian.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2213","sourceIdentifier":"cve@mitre.org","published":"2016-02-03T14:59:00.120","lastModified":"2026-06-17T00:43:41.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (out-of-bounds array read access) via crafted JPEG 2000 data."},{"lang":"es","value":"La función jpeg2000_decode_tile en libavcodec/jpeg2000dec.c en FFmpeg en versiones anteriores a 2.8.6 permite a atacantes remotos causar una denegación de servicio (acceso a lectura de array fuera de rango) a través de datos JPEG 2000 manipulados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.5","matchCriteriaId":"0ECD5CDE-9845-439A-8E5A-D547CCDC0C98"}]}]}],"references":[{"url":"http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=0aada30510d809bccfd539a90ea37b61188f2cb4","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034923","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201606-09","source":"cve@mitre.org"},{"url":"http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=0aada30510d809bccfd539a90ea37b61188f2cb4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201606-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7536","sourceIdentifier":"secalert@redhat.com","published":"2016-02-03T18:59:01.070","lastModified":"2026-06-17T00:32:42.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts."},{"lang":"es","value":"Vulnerabilidad de XSS en Jenkins en versiones anteriores a 1.640 y LTS en versiones anteriores a 1.625.2 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados relacionados con espacios de trabajo y artefactos archivados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","versionEndIncluding":"1.625.1","matchCriteriaId":"7A8FFE37-57EC-4DEA-A2A5-F605AC622F0A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"1.639","matchCriteriaId":"DCFC646A-BA70-404D-9DE1-EE758455546E"}]}]}],"references":[{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8748","sourceIdentifier":"security@debian.org","published":"2016-02-03T18:59:06.837","lastModified":"2026-06-17T00:35:09.833","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by \".*\"."},{"lang":"es","value":"Radicale en versiones anteriores a 1.1 permite a usuarios remotos autenticados eludir las limitaciones owner_write y owner_only a través de metacaracteres regex en el nombre de usuario, según lo demostrado por \".*\"."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radicale:radicale:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"7DEE81B3-0AB4-4246-9FE5-DD483A5157A2"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175738.html","source":"security@debian.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.html","source":"security@debian.org"},{"url":"http://www.debian.org/security/2016/dsa-3462","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/05/7","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/06/4","source":"security@debian.org"},{"url":"http://www.securityfocus.com/bid/80255","source":"security@debian.org"},{"url":"https://github.com/Kozea/Radicale/pull/341","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/Unrud/Radicale/commit/4bfe7c9f7991d534c8b9fbe153af9d341f925f98","source":"security@debian.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175738.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/05/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/06/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/80255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/Kozea/Radicale/pull/341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/Unrud/Radicale/commit/4bfe7c9f7991d534c8b9fbe153af9d341f925f98","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1284","sourceIdentifier":"cve@mitre.org","published":"2016-02-04T11:59:01.097","lastModified":"2026-06-17T00:41:38.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query."},{"lang":"es","value":"rdataset.c en ISC BIND 9 Supported Preview Edition 9.9.8-S en versiones anteriores a 9.9.8-S5, cuando la redirección nxdomain está habilitada, permite a atacantes remotos causar una denegación de servicio (error de aserción REQUIRE y salida de demonio) a través de valores de indicadores manipulados en una consulta."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.8:s1:*:*:*:*:*:*","matchCriteriaId":"52C0DC21-D024-4ABD-910B-3C6A9A04C8B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.8:s2:*:*:*:*:*:*","matchCriteriaId":"72392A81-BBFE-419F-84D1-2376CB552213"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.8:s3:*:*:*:*:*:*","matchCriteriaId":"BBB98AAF-3EA6-47AD-949D-FBAC04AEC28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.8:s4:*:*:*:*:*:*","matchCriteriaId":"A15FEF31-D201-4087-ACEB-D6E68B5F8AAC"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034935","source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01348","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01438","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.securitytracker.com/id/1034935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.isc.org/article/AA-01348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2016-0862","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-02-05T11:59:01.173","lastModified":"2026-06-17T00:38:22.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors."},{"lang":"es","value":"Dispositivos General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter con firmware en versiones anteriores a 4.8 permiten a usuarios remotos autenticados obtener información de cuenta en texto plano sensible a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ge:snmp\\/web_adapter_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"09091EDE-6B49-4C19-9F80-4A87B62D3427"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ge:snmp\\/web_adapter_1024746:-:*:*:*:*:*:*:*","matchCriteriaId":"B62C852E-3AF0-477A-9D80-8752AE76175F"},{"vulnerable":false,"criteria":"cpe:2.3:h:ge:snmp\\/web_adapter_1024747:-:*:*:*:*:*:*:*","matchCriteriaId":"41363794-A020-49C1-9F87-A8AEAE8C533E"},{"vulnerable":false,"criteria":"cpe:2.3:h:ge:snmp\\/web_adapter_1024748:-:*:*:*:*:*:*:*","matchCriteriaId":"EFC1E8CF-7CF7-4972-A871-F38F020FBBC6"},{"vulnerable":false,"criteria":"cpe:2.3:h:ge:snmp\\/web_adapter_1024921:-:*:*:*:*:*:*:*","matchCriteriaId":"FDBAAC25-C111-4D4E-AA05-825D530A56E2"}]}]}],"references":[{"url":"http://apps.geindustrial.com/publibrary/checkout/Application%20and%20Technical%7CGEIS_SNMP%7CPDF&filename=GEIS_SNMP.pdf","source":"ics-cert@hq.dhs.gov","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/21","source":"ics-cert@hq.dhs.gov","tags":["Mailing List","Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.exploit-db.com/exploits/39408/","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://apps.geindustrial.com/publibrary/checkout/Application%20and%20Technical%7CGEIS_SNMP%7CPDF&filename=GEIS_SNMP.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.exploit-db.com/exploits/39408/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2015-7916","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-02-06T05:59:02.323","lastModified":"2026-06-17T00:33:23.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query."},{"lang":"es","value":"Vulnerabilidad de XSS en Sauter EY-WS505F0x0 moduWeb Vision en versiones anteriores a 1.6.0 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una consulta manipulada."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.3,"impactScore":3.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sauter-controls:moduweb_vision:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"2D4E142D-850B-42F0-836E-502B7C17D43F"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2016/Feb/25","source":"ics-cert@hq.dhs.gov","tags":["Mailing List","Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-1306","sourceIdentifier":"psirt@cisco.com","published":"2016-02-06T05:59:03.370","lastModified":"2026-06-17T00:41:41.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Cisco Fog Director 1.0(0) permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un parámetro manipulado, también conocida como Bug ID CSCux80466."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*","matchCriteriaId":"09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160201-fd","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160201-fd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1310","sourceIdentifier":"psirt@cisco.com","published":"2016-02-06T05:59:04.387","lastModified":"2026-06-17T00:41:41.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Unity Connection 11.5(0.199) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocida como Bug ID CSCuy09033."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*","matchCriteriaId":"09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-uc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034937","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-uc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1311","sourceIdentifier":"psirt@cisco.com","published":"2016-02-06T05:59:05.417","lastModified":"2026-06-17T00:41:41.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de administración en Cisco Jabber Guest Server 10.6(8) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro de etiqueta host, también conocida como Bug ID CSCuy08224."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:jabber_guest:10.6.8:*:*:*:*:*:*:*","matchCriteriaId":"51B81F21-6836-444E-82B9-86CF04552E32"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-jgs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034936","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-jgs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0808","sourceIdentifier":"security@android.com","published":"2016-02-07T01:59:06.977","lastModified":"2026-06-17T00:38:16.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows attackers to cause a denial of service (continuous rebooting) via an application that triggers loading of a crafted TTF font, aka internal bug 25645298."},{"lang":"es","value":"Desbordamiento de entero en la función getCoverageFormat12 en CmapCoverage.cpp en la librería Minikin en Android 5.x en versiones anteriores a 5.1.1 LMY49G y 6.x en versiones anteriores a 2016-02-01 permite a atacantes provocar una denegación de servicio (reinicio continuo) a través de una aplicación que desencadena la carga de una fuente TTF manipulada, también conocido como error interno 25645298."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9915371-C730-41F7-B86E-7E4DE0DF5385"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-02-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/minikin/+/ed4c8d79153baab7f26562afb8930652dfbf853b","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-02-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/minikin/+/ed4c8d79153baab7f26562afb8930652dfbf853b","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0812","sourceIdentifier":"security@android.com","published":"2016-02-07T01:59:10.880","lastModified":"2026-06-17T00:38:17.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25229538."},{"lang":"es","value":"La función interceptKeyBeforeDispatching en policy/src/com/android/internal/policy/impl/PhoneWindowManager.java en Setup Wizard en Android 5.1.x en versiones anteriores a 5.1.1 LMY49G and 6.0 en versiones anteriores a 2016-02-01 no verifica adecuadamente completar la instalación, lo que permite a atacantes físicamente próximos eludir el mecanismo de protección Factory Reset Protection y borrar datos a través de vectores no especificados, también conocido como error interno 25229538."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","baseScore":6.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-02-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-02-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0813","sourceIdentifier":"security@android.com","published":"2016-02-07T01:59:11.803","lastModified":"2026-06-17T00:38:17.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before 2016-02-01 does not properly check for device provisioning, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25476219."},{"lang":"es","value":"packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java en Setup Wizard en Android 5.1.x en versiones anteriores a 5.1.1 LMY49G y 6.x en versiones anteriores a 2016-02-01 no verifica adecuadamente para aprovisionamiento de dispositivos, lo que permite a atacantes físicamente próximos eludir el mecanismo de protección Factory Reset Protection y borrar datos a través de vectores no especificados, también conocido como error interno 25476219."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","baseScore":6.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-02-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-02-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1305","sourceIdentifier":"psirt@cisco.com","published":"2016-02-07T11:59:02.880","lastModified":"2026-06-17T00:41:41.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML entities, aka Bug ID CSCux15511."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores que implican entidades HTML, también conocido como Bug ID CSCux15511."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_policy_infrastructure_controller_enterprise_module:1.1_base:*:*:*:*:*:*:*","matchCriteriaId":"D6BBBC4D-1C89-4B9A-BAF0-C151CEED587A"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160201-apic-em","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034902","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160201-apic-em","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1307","sourceIdentifier":"psirt@cisco.com","published":"2016-02-07T11:59:03.880","lastModified":"2026-06-17T00:41:41.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085."},{"lang":"es","value":"El servidor Openfire en Cisco Finesse Desktop 10.5(1) y 11.0(1) y Unified Contact Center Express 10.6(1) tiene una cuenta embebida, lo que hace más fácil para atacantes remotos obtener acceso a través de una sesión XMPP, también conocido como Bug ID CSCuw79085."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"},{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.50\\(aazi.0\\)c0","matchCriteriaId":"21D9999F-C55E-4BAB-A401-007FB34B2A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:zzinc:keymouse_firmware:3.08:*:*:*:*:windows:*:*","matchCriteriaId":"83223AC7-22F3-4FCA-B11B-B769086DCF04"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.50\\(aazi.0\\)c0","matchCriteriaId":"21D9999F-C55E-4BAB-A401-007FB34B2A5E"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160202-fducce","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034920","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1034921","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160202-fducce","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1308","sourceIdentifier":"psirt@cisco.com","published":"2016-02-07T11:59:04.803","lastModified":"2026-06-17T00:41:41.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Cisco Unified Communications Manager 10.5(2.13900.9) permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de una URL manipulada, también conocido como Bug ID CSCux99227."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*","matchCriteriaId":"3A5867B4-EC19-45D4-87BE-867E1D41ECD5"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-ucm","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034938","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-ucm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1309","sourceIdentifier":"psirt@cisco.com","published":"2016-02-07T11:59:05.710","lastModified":"2026-06-17T00:41:41.413","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Cisco WebEx Meetings Server 2.5.1.5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros no especificados, también conocido como Bug ID CSCuy01843."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings_server:2.5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D5C7BE43-0F81-4550-813E-66D0844E9291"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160202-wms","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034919","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160202-wms","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-4312","sourceIdentifier":"secalert@redhat.com","published":"2016-02-08T03:59:00.120","lastModified":"2026-06-16T23:57:00.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c."},{"lang":"es","value":"El kernel de Linux en versiones anteriores a 4.4.1 permite a usuarios locales eludir los limites de descriptor de fichero y provocar una denegación de servicio (consumo de memoria) enviando cada descriptor a través de un socket UNIX antes de cerrarlo, relacionado con net/unix/af_unix.c y net/unix/garbage.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"8B458ACF-17C3-4551-9F11-8D02B6D52B7C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=712f4aad406bb1ed67f3f98d04c044191f0ff593","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0855.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3448","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/82986","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297813","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/712f4aad406bb1ed67f3f98d04c044191f0ff593","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-4312","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=712f4aad406bb1ed67f3f98d04c044191f0ff593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0855.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/82986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/712f4aad406bb1ed67f3f98d04c044191f0ff593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-4312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2015-7513","sourceIdentifier":"secalert@redhat.com","published":"2016-02-08T03:59:01.107","lastModified":"2026-06-17T00:32:40.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions."},{"lang":"es","value":"arch/x86/kvm/x86.c en el kernel de Linux en versiones anteriores a 4.4 no reinicia los valores del contador PIT durante la restauración del estado, lo que permite a usuarios invitados del SO provocar una denegación de servicio (error de división por cero y caída del host del SO) a través del valor cero, relacionado con las funciones kvm_vm_ioctl_set_pit y kvm_vm_ioctl_set_pit2."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-369"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4","matchCriteriaId":"311A4477-1B05-4B33-8886-88EF75FEB5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:-:*:*:*:*:*:*","matchCriteriaId":"A244C4E3-A56C-4F7D-91FF-441A3A51AE9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc1:*:*:*:*:*:*","matchCriteriaId":"E425B7E4-0104-4CF8-A874-4CAF3273BCDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc2:*:*:*:*:*:*","matchCriteriaId":"C066AC79-4021-4414-A9F2-6B75C2D62773"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc3:*:*:*:*:*:*","matchCriteriaId":"A8FD5845-6A12-42D1-B59F-C3F8AED2EFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc4:*:*:*:*:*:*","matchCriteriaId":"7B37BB89-774E-43E3-B676-BC19C14B1823"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc5:*:*:*:*:*:*","matchCriteriaId":"48D4FDF4-7ECF-4B68-87F9-58E3D8E6181B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc6:*:*:*:*:*:*","matchCriteriaId":"5DE43D99-452A-43FD-A459-B33D07B2CA7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0185604c2d82c560dab2f2933a18f797e74ab5a8","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/07/2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79901","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034602","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2887-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2887-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2889-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2889-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1284847","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/0185604c2d82c560dab2f2933a18f797e74ab5a8","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0185604c2d82c560dab2f2933a18f797e74ab5a8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/07/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2887-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2887-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2889-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2889-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1284847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/0185604c2d82c560dab2f2933a18f797e74ab5a8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-7550","sourceIdentifier":"secalert@redhat.com","published":"2016-02-08T03:59:02.010","lastModified":"2026-06-17T00:32:43.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not properly use a semaphore, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted application that leverages a race condition between keyctl_revoke and keyctl_read calls."},{"lang":"es","value":"La función keyctl_read_key en security/keys/keyctl.c en el kernel de Linux en versiones anteriores a 4.3.4 no utiliza adecuadamente un semáforo, lo que permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL y caída del sistema) o posiblemente tiene otro impacto no especificado a través de una aplicación manipulada que aprovecha una condición de carrera entre llamadas keyctl_revoke y keyctl_read."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"},{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.3","matchCriteriaId":"35E3DC8E-8900-4874-A272-E3EC1174360B"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b4a1b4f5047e4f54e194681125c74c0aa64d637d","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79903","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2911-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2911-2","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291197","source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/b4a1b4f5047e4f54e194681125c74c0aa64d637d","source":"secalert@redhat.com"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7550","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b4a1b4f5047e4f54e194681125c74c0aa64d637d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/79903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2911-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2911-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/b4a1b4f5047e4f54e194681125c74c0aa64d637d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7550","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-7566","sourceIdentifier":"secalert@redhat.com","published":"2016-02-08T03:59:03.027","lastModified":"2026-06-17T00:32:45.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a bulk-out endpoint."},{"lang":"es","value":"La función clie_5_attach en drivers/usb/serial/visor.c en el kernel de Linux hasta la versión 4.4.1 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída del sistema) o posiblemente tener otro impacto no especificado insertando un dispositivo USB que carezca de un punto final de expansión."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"6477D16E-3D4C-4C4F-9F40-5AF8989CAF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"B942E0F5-7FDC-4AE5-985D-25F4EA7406F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11:sp4:*:*:*:*:*:*","matchCriteriaId":"BFF56CE7-91EF-4FF9-B306-5F00249D9FEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5AB3CAA1-C20C-4A86-841E-EC0858164D7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11:extra:*:*:*:*:*:*","matchCriteriaId":"4B24E780-3254-4577-BCFF-7FBB6D97C780"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"095856BE-4E55-4FEA-BCAC-352C29083545"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.1","matchCriteriaId":"EDD97C46-E284-47DB-B96A-3B8D5013F2F7"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb3232138e37129e88240a98a1d2aba2187ff57c","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3448","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/537733/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/82975","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283371","source":"secalert@redhat.com","tags":["Issue Tracking","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1296466","source":"secalert@redhat.com","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/cb3232138e37129e88240a98a1d2aba2187ff57c","source":"secalert@redhat.com"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7566","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/39540/","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb3232138e37129e88240a98a1d2aba2187ff57c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537733/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1296466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/cb3232138e37129e88240a98a1d2aba2187ff57c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/39540/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-8575","sourceIdentifier":"security@opentext.com","published":"2016-02-08T03:59:04.887","lastModified":"2026-06-17T00:34:48.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application."},{"lang":"es","value":"La función sco_sock_bind en net/bluetooth/sco.c en el kernel de Linux en versiones anteriores a 4.3.4 no verifica la longitud de una dirección, lo que permite a usuarios locales obtener información sensible de la memoria del kernel y eludir el mecanismo de protección KASLR a través de una aplicación manipulada."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.3","matchCriteriaId":"35E3DC8E-8900-4874-A272-E3EC1174360B"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5233252fce714053f0151680933571a2da9cbfb4","source":"security@opentext.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"security@opentext.com"},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"security@opentext.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4","source":"security@opentext.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/16/3","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/79724","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292840","source":"security@opentext.com"},{"url":"https://github.com/torvalds/linux/commit/5233252fce714053f0151680933571a2da9cbfb4","source":"security@opentext.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5233252fce714053f0151680933571a2da9cbfb4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/16/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2888-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2890-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/5233252fce714053f0151680933571a2da9cbfb4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8767","sourceIdentifier":"cve@mitre.org","published":"2016-02-08T03:59:06.793","lastModified":"2026-06-17T00:35:12.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a crafted sctp_accept call."},{"lang":"es","value":"net/sctp/sm_sideeffect.c en el kernel de Linux en versiones anteriores a 4.3 no maneja adecuadamente la relación entre un bloqueo y un socket, lo que permite a usuarios locales provocar una denegación de servicio (interbloqueo) a través de una llamada sctp_accept manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"24716AE4-6BBB-4E20-B9CC-8D2D43014BBD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=635682a14427d241bab7bbdeebb48a7d7b91638e","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0715.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3448","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/11/4","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/80268","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1277","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1301","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1341","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297389","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/635682a14427d241bab7bbdeebb48a7d7b91638e","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=635682a14427d241bab7bbdeebb48a7d7b91638e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0715.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/11/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/80268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/635682a14427d241bab7bbdeebb48a7d7b91638e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8785","sourceIdentifier":"security@debian.org","published":"2016-02-08T03:59:07.823","lastModified":"2026-06-17T00:35:14.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov."},{"lang":"es","value":"La función fuse_fill_write_pages en fs/fuse/file.c en el kernel de Linux en versiones anteriores a 4.4 permite a usuarios locales provocar una denegación de servicio (bucle infinito) a través de una llamada a sistema writev que desencadena una longitud cero para el primer segmento de un iov."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4","matchCriteriaId":"311A4477-1B05-4B33-8886-88EF75FEB5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc1:*:*:*:*:*:*","matchCriteriaId":"E425B7E4-0104-4CF8-A874-4CAF3273BCDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc2:*:*:*:*:*:*","matchCriteriaId":"C066AC79-4021-4414-A9F2-6B75C2D62773"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc3:*:*:*:*:*:*","matchCriteriaId":"A8FD5845-6A12-42D1-B59F-C3F8AED2EFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc4:*:*:*:*:*:*","matchCriteriaId":"7B37BB89-774E-43E3-B676-BC19C14B1823"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"18D823E3-E1F3-4A15-A9C7-1AB61C1B6703"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3ca8138f014a913f98e6ef40e939868e1e9ea876","source":"security@debian.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/1","source":"security@debian.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81688","source":"security@debian.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290642","source":"security@debian.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/3ca8138f014a913f98e6ef40e939868e1e9ea876","source":"security@debian.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3ca8138f014a913f98e6ef40e939868e1e9ea876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2886-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/3ca8138f014a913f98e6ef40e939868e1e9ea876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0723","sourceIdentifier":"secalert@redhat.com","published":"2016-02-08T03:59:09.840","lastModified":"2026-06-17T00:38:05.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call."},{"lang":"es","value":"Condición de carrera en la función tty_ioctl en drivers/tty/tty_io.c en el kernel de Linux hasta la versión 4.4.1 permite a usuarios locales obtener información sensible de la memoria del kernel o provocar una denegación de servicio (uso después de liberación y caída de aplicación) al hacer una llamada ioctl TIOCGETD ioctl durante el procesamiento de una llamada ioctl TIOCSETD."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:C","baseScore":5.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-362"},{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.1","matchCriteriaId":"EDD97C46-E284-47DB-B96A-3B8D5013F2F7"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c17c861a357e9458001f021a7afa7aab9937439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3448","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/82950","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035695","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1296253","source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/5c17c861a357e9458001f021a7afa7aab9937439","source":"secalert@redhat.com"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-0723","source":"secalert@redhat.com"},{"url":"https://support.f5.com/csp/article/K43650115","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c17c861a357e9458001f021a7afa7aab9937439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1296253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/5c17c861a357e9458001f021a7afa7aab9937439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-0723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K43650115","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>"}},{"cve":{"id":"CVE-2015-2012","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-08T16:59:00.363","lastModified":"2026-06-17T00:23:27.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file."},{"lang":"es","value":"El servicio MQXR en WMQ Telemetry en IBM WebSphere MQ 7.1 en versiones anteriores a 7.1.0.7, 7.5 hasta la versión 7.5.0.5 y 8.0 en versiones anteriores a 8.0.0.4 utiliza permisos de lectura para todos para un archivo de texto plano que contiene la contraseña del almacén de claves SSL, lo que permite a usuarios locales obtener información sensible mediante la lectura de dicho archivo."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"56C38EE8-1F6D-4BCF-AA46-D71E6F3EDAC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"25AC9713-B00C-4A51-AEFB-7927B675E977"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AFFC891B-ECE0-44DD-A0AD-5CA4A263961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CE71C30A-B8B5-42EA-9A90-44347FCC32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.5:*:*:*:*:*:*:*","matchCriteriaId":"164DC456-433C-4C47-91F9-1B57C2DFBF1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BDA4EE08-D531-4957-BF2A-C5A9ABB0F38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"751BF695-E27A-4D9F-9190-84A7BCD5E268"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CDA1EF24-9710-4C4A-8059-917C02185CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CC257545-44A3-4659-951D-F4DFF3B87CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*","matchCriteriaId":"421E10D4-4B01-4D52-9FFB-208C4745063E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C5502347-56F2-400F-944B-A532A3A8DE0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D800EA34-4826-4689-A3C0-03724290567B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT09866","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21968399","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034943","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT09866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21968399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2201","sourceIdentifier":"cve@mitre.org","published":"2016-02-08T16:59:07.130","lastModified":"2026-06-17T00:43:39.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102."},{"lang":"es","value":"Dispositivos Siemens SIMATIC S7-1500 CPU en versiones anteriores a 1.8.3 permiten a atacantes remotos eludir el mecanismo de protección de repetición a través de paquetes manipulados sobre el puerto 102 TCP."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6AE7D26A-B1CA-4059-820C-E2C13662AAEB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1511-1_pn_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"668B8FDF-4D50-4E54-88CE-D9A2C483D460"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1511c-1_pn_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"223C911C-B69D-41B9-A461-C6153A255324"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1511f-1_pn_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"43828956-FDB0-4DB2-ACAA-6D94F314C070"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1512c-1_pn_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"7966ED38-7F26-44BF-93FF-5D999C510D19"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1513-1_pn_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"6F18327E-6C57-42F0-983C-F88F70C9FB6C"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1513f-1_pn_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"7E943853-055C-45E3-9BD0-E8DE2D9C339B"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1515-2_pn_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"A074A6C0-6D87-40C3-9031-E8582797A299"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1515f-2_pn_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"D13388C5-D329-46E2-8FE6-E45DB604C112"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1516-3_pn\\/dp_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"E3C8B2D4-9BC2-424E-ABE3-2095CE414255"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1516f-3_pn\\/dp_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"84C4C6FB-5D77-4A8B-9ABA-321353F6D1E2"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1517-3_pn\\/dp_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"A6DA5627-663C-48F9-B76D-BD53D43ACDFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1517f-3_pn\\/dp_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"55AE4959-EE30-4FE1-8FCC-3F7710C80C3F"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1518-4_pn\\/dp_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"59EFE215-70A4-4A85-AA84-360FED0B6D89"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1518f-4_pn\\/dp_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"9BE49E75-DC54-4AD5-923C-12F6603B9793"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/83110","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034954","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf","source":"cve@mitre.org"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/83110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-3251","sourceIdentifier":"secalert@redhat.com","published":"2016-02-08T19:59:01.577","lastModified":"2026-06-17T00:25:37.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls."},{"lang":"es","value":"Apache CloudStack en versiones anteriores a 4.5.2 podría permitir a administradores remotos autenticados obtener información de contraseña sensible para cuentas root de máquinas virtuales a través de vectores no especificados relacionado con llamadas API."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cloudstack:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05F6E409-1C75-4119-978A-C5F9B9522302"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cloudstack:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F03D7F22-2906-44E2-8BFA-9F47FC1860F0"}]}]}],"references":[{"url":"http://mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C94DD4CB4-F718-4F79-A934-3D677E497114%40gmail.com%3E","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537458/100/0/threaded","source":"secalert@redhat.com"},{"url":"https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C94DD4CB4-F718-4F79-A934-3D677E497114%40gmail.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537458/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2048","sourceIdentifier":"cve@mitre.org","published":"2016-02-08T19:59:05.470","lastModified":"2026-06-17T00:43:19.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the \"Save as New\" option when editing objects and leveraging the \"change\" permission."},{"lang":"es","value":"Django 1.9.x en versiones anteriores a 1.9.2, cuando ModelAdmin.save_as se establece a verdadero, permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y crear objetos ModelAdmin a través de la opción \"Save as New\" cuando se editan objetos y se aprovecha el permiso \"change\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9:*:*:*:*:*:*:*","matchCriteriaId":"29C40BAC-6DF3-4EA2-A65A-86462DDD8723"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6B754401-8503-4553-853F-4F6BCD2D2FF2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/82329","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034894","source":"cve@mitre.org"},{"url":"https://www.djangoproject.com/weblog/2016/feb/01/releases-192-and-189/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/82329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.djangoproject.com/weblog/2016/feb/01/releases-192-and-189/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2089","sourceIdentifier":"cve@mitre.org","published":"2016-02-08T19:59:06.860","lastModified":"2026-06-17T00:43:25.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image."},{"lang":"es","value":"La función jas_matrix_clip en jas_seq.c en JasPer 1.900.1 permite a atacantes remotos causar una denegación de servicio (lectura inválida y caída de aplicación) a través de una imagen JPEG 2000 manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jasper_project:jasper:1.900.1:*:*:*:*:*:*:*","matchCriteriaId":"79C699BE-8585-4A07-88AE-E17CF17D92CD"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3508","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/28/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/28/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/83108","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1208","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/28/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/28/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2214","sourceIdentifier":"cve@mitre.org","published":"2016-02-08T19:59:08.813","lastModified":"2026-06-17T00:43:41.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus with software before V100R001C00SPC319 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en una página de portal de autenticación no especificada en Huawei Agile Controller-Campus con software en versiones anteriores a V100R001C00SPC319 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:agile_controller-campus:v100r001c00spc315:*:*:*:*:*:*:*","matchCriteriaId":"F5A5D394-F5E6-4980-89DC-44B2DA88C8C2"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-agilecontroller-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-agilecontroller-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2268","sourceIdentifier":"cve@mitre.org","published":"2016-02-08T19:59:09.783","lastModified":"2026-06-17T00:43:43.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."},{"lang":"es","value":"La aplicación Dell SecureWorks en versiones anteriores a 2.1 para iOS no valida certificados SSL, lo que permite a atacantes man-in-the-middle suplantar servidores y obtener información sensible a través de un certificado manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dell:secureworks:2.0.6:*:*:*:*:iphone_os:*:*","matchCriteriaId":"42C18111-1351-4BE8-AEE3-A436B68921A1"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135617/Dell-SecureWorks-iOS-Certificate-Validation-Failure.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Feb/27","source":"cve@mitre.org"},{"url":"http://www.info-sec.ca/advisories/Dell-SecureWorks.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/537445/100/0/threaded","source":"cve@mitre.org"},{"url":"https://itunes.apple.com/us/app/dell-secureworks/id533072046","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://packetstormsecurity.com/files/135617/Dell-SecureWorks-iOS-Certificate-Validation-Failure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Feb/27","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.info-sec.ca/advisories/Dell-SecureWorks.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537445/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://itunes.apple.com/us/app/dell-secureworks/id533072046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-1316","sourceIdentifier":"psirt@cisco.com","published":"2016-02-09T03:59:00.117","lastModified":"2026-06-17T00:41:42.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362."},{"lang":"es","value":"Cisco TelePresence Video Communication Server (VCS) X8.1 hasta la versión X8.7, tal como se utiliza en conjunción con Jabber Guest, permite a atacantes remotos obtener información de estadísticas de llamada sensible a través de una petición directa a una URL no especificada, también conocido como Bug ID CSCux73362."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EF51F825-6446-4EB5-8406-5B2ADB282719"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A9FAD1E4-037C-4877-9DA0-7ADDE2933C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.1_base:*:*:*:*:*:*:*","matchCriteriaId":"B585675C-D7B4-4873-9DBC-068219059F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3031A9F1-C65E-4E34-99CF-EE6CF7811389"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D0563B17-D80D-470C-AA0E-6A40F3F07DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.2_base:*:*:*:*:*:*:*","matchCriteriaId":"99B407C6-41C4-48C5-955B-69727ACE769D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"83373EA3-B4F0-47C3-9C1D-11182A504C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C645F71B-D8E6-4F2E-9F22-DCFC2B14DDD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.2:*:*:*:*:*:*:*","matchCriteriaId":"ABE4C06E-5916-44D1-B991-049C44FA45F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9DCFB790-3DFC-47CD-AECB-4F510C2E64EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.6.0:*:*:*:*:*:*:*","matchCriteriaId":"10EB18CC-C3DD-40D8-A8CC-5410C3176DD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2BC73D75-DE33-4B17-8251-E0D44460B7D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.7_base:*:*:*:*:*:*:*","matchCriteriaId":"022B090E-51FB-4C00-A8FE-AB73ED632CDB"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-vcs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034956","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-vcs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1317","sourceIdentifier":"psirt@cisco.com","published":"2016-02-09T03:59:01.070","lastModified":"2026-06-17T00:41:42.270","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098."},{"lang":"es","value":"Cisco Unified Communications Manager 11.5(0.98000.480) permite a usuarios remotos autenticados obtener información sensible de la base de datos table-name y entity-name a través de una petición directa a una URL no especificada, también conocido como Bug ID CSCuy11098."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.50\\(aazi.0\\)c0","matchCriteriaId":"21D9999F-C55E-4BAB-A401-007FB34B2A5E"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201600208-ucm","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034957","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201600208-ucm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1318","sourceIdentifier":"psirt@cisco.com","published":"2016-02-09T03:59:01.930","lastModified":"2026-06-17T00:41:42.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrario a través de un dato markup manipulado, también conocido como Bug ID CSCux15489."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_policy_infrastructure_controller_enterprise_module:1.1_base:*:*:*:*:*:*:*","matchCriteriaId":"D6BBBC4D-1C89-4B9A-BAF0-C151CEED587A"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-apic","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034955","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-apic","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1319","sourceIdentifier":"psirt@cisco.com","published":"2016-02-09T03:59:03.320","lastModified":"2026-06-17T00:41:42.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958."},{"lang":"es","value":"Cisco Unified Communications Manager (también conocido como CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1) y 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); y Unity Connection 10.5(2) almacena una clave de cifrado en texto plano, que permite a usuarios locales obtener información sensible a través de vectores no especificados, también conocido como Bug ID CSCuv85958."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*","matchCriteriaId":"09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*","matchCriteriaId":"3A5867B4-EC19-45D4-87BE-867E1D41ECD5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*","matchCriteriaId":"09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.50\\(aazi.0\\)c0","matchCriteriaId":"21D9999F-C55E-4BAB-A401-007FB34B2A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:zzinc:keymouse_firmware:3.08:*:*:*:*:windows:*:*","matchCriteriaId":"83223AC7-22F3-4FCA-B11B-B769086DCF04"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zzinc:keymouse_firmware:3.08:*:*:*:*:windows:*:*","matchCriteriaId":"83223AC7-22F3-4FCA-B11B-B769086DCF04"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-ucm","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034958","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1034959","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1034960","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-ucm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0039","sourceIdentifier":"secure@microsoft.com","published":"2016-02-10T11:59:05.360","lastModified":"2026-06-17T00:36:50.213","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka \"Microsoft SharePoint XSS Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de XSS en SharePoint Server en Microsoft SharePoint Foundation 2013 SP1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una petición manipulada, también conocida como \"Microsoft SharePoint XSS Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"F71184B1-7461-4A05-A5D2-03D9EDDC30D5"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034975","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0049","sourceIdentifier":"secure@microsoft.com","published":"2016-02-10T11:59:13.580","lastModified":"2026-06-17T00:36:51.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not properly validate password changes, which allows remote attackers to bypass authentication by deploying a crafted Key Distribution Center (KDC) and then performing a sign-in action, aka \"Windows Kerberos Security Feature Bypass.\""},{"lang":"es","value":"Kerberos en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2 y Windows 10 Gold y 1511 no válida correctamente los cambios de contraseña, lo que permite a atacantes remotos eludir la autenticación desplegando un Key Distribution Center (KDC) manipulado para luego realizar una acción sign-in, también conocida como \"Windows Kerberos Security Feature Bypass\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*","matchCriteriaId":"7519928D-0FF2-4584-8058-4C7764CD5671"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135797/Windows-Kerberos-Security-Feature-Bypass.html","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/82535","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034985","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-014","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/39442/","source":"secure@microsoft.com"},{"url":"http://packetstormsecurity.com/files/135797/Windows-Kerberos-Security-Feature-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39442/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0050","sourceIdentifier":"secure@microsoft.com","published":"2016-02-10T11:59:14.567","lastModified":"2026-06-17T00:36:51.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service (RADIUS authentication outage) via crafted requests, aka \"Network Policy Server RADIUS Implementation Denial of Service Vulnerability.\""},{"lang":"es","value":"Network Policy Server (NPS) en Microsoft Windows Server 2008 SP2 y R2 SP1 y Server 2012 Gold y R2 no analiza correctamente la gramática de las peticiones de nombre de usuario, lo que permite a atacantes remotos causar una denegación de servicio (interrupción de autenticación RADIUS) a través de peticiones manipuladas, también conocida como \"Network Policy Server RADIUS Implementation Denial of Service Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*","matchCriteriaId":"AB506484-7F0C-46BF-8EA6-4FB5AF454CED"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:datacenter:*:*:*","matchCriteriaId":"32BCD530-F6E2-4F9B-AD4C-7DF2BED00296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:essentials:*:*:*","matchCriteriaId":"A1318333-EF3A-4DBA-8DD7-367BF843F70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:standard:*:*:*","matchCriteriaId":"74B5E7C1-6C1D-4605-91CF-AF105EFA678D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034986","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-021","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0059","sourceIdentifier":"secure@microsoft.com","published":"2016-02-10T11:59:22.847","lastModified":"2026-06-17T00:36:52.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a (1) e-mail message or (2) Office document, aka \"Internet Explorer Information Disclosure Vulnerability.\""},{"lang":"es","value":"El Hyperlink Object Library en Microsoft Internet Explorer 9 hasta la versión 11 permite a atacantes remotos obtener información sensible desde la memoria de proceso a través de una URL manipulada en un (1) mensaje e-mail o (2) documento Office, también conocida como \"Internet Explorer Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034971","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0077","sourceIdentifier":"secure@microsoft.com","published":"2016-02-10T11:59:32.317","lastModified":"2026-06-17T00:36:53.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka \"Microsoft Browser Spoofing Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 9 hasta la versión 11 y Microsoft Edge no analiza correctamente la gramática de respuestas HTTP, lo que permite a atacantes remotos suplantar sitios web a través de una URL manipulada, también conocida como \"Microsoft Browser Spoofing Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034971","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034972","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-011","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0080","sourceIdentifier":"secure@microsoft.com","published":"2016-02-10T11:59:33.397","lastModified":"2026-06-17T00:36:53.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Edge mishandles exceptions during window-message dispatch operations, which allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \"Microsoft Edge ASLR Bypass.\""},{"lang":"es","value":"Microsoft Edge no maneja adecuadamente excepciones durante las operaciones de envío de mensajes window, lo que permite a atacantes remotos eludir el mecanismo de protección ASLR a través de un sitio web manipulado, también conocido como \"Microsoft Edge ASLR Bypass\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/82631","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1034972","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-011","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/82631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7675","sourceIdentifier":"cve@mitre.org","published":"2016-02-10T15:59:00.100","lastModified":"2026-06-17T00:32:56.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The \"Send as attachment\" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (2) arg01 parameter to human.aspx."},{"lang":"es","value":"La funcionalidad \"Send as attachment\" en Ipswitch MOVEit DMZ en versiones anteriores a 8.2 y MOVEit Mobile en versiones anteriores a 1.2.2 permite a usuarios remotos autenticados eludir la autorización y leer archivos cargados a través de un FileID válido en el parámetro (1) serverFileIds en mobile/sendMsg o (2) arg01 en human.aspx."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:moveit_dmz:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"C8C09B13-29FD-4A22-A77F-83B9434DBE33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:moveit_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0.962","matchCriteriaId":"B93E8747-D8C0-4FBC-BD74-B3A7FC391CD3"}]}]}],"references":[{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135457/Ipswitch-MOVEit-DMZ-8.1-Authorization-Bypass.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"cve@mitre.org"},{"url":"https://www.profundis-labs.com/advisories/CVE-2015-7675.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135457/Ipswitch-MOVEit-DMZ-8.1-Authorization-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.profundis-labs.com/advisories/CVE-2015-7675.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-7677","sourceIdentifier":"cve@mitre.org","published":"2016-02-10T15:59:01.350","lastModified":"2026-06-17T00:32:57.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the X-siLock-FileID parameter in a download action to MOVEitISAPI/MOVEitISAPI.dll."},{"lang":"es","value":"El servicio MOVEitISAPI en Ipswitch MOVEit DMZ en versiones anteriores a 8.2 proporciona mensajes de error diferentes en función de si existe un FileID, lo que permite a usuarios remotos autenticados enumerar FileIDs a través del parámetro X-siLock-FileID en una acción de descarga a MOVEitISAPI/MOVEitISAPI.dll."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:moveit_dmz:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"C8C09B13-29FD-4A22-A77F-83B9434DBE33"}]}]}],"references":[{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135459/Ipswitch-MOVEit-DMZ-8.1-File-ID-Enumeration.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"cve@mitre.org"},{"url":"https://www.profundis-labs.com/advisories/CVE-2015-7677.txt","source":"cve@mitre.org"},{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135459/Ipswitch-MOVEit-DMZ-8.1-File-ID-Enumeration.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.profundis-labs.com/advisories/CVE-2015-7677.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7679","sourceIdentifier":"cve@mitre.org","published":"2016-02-10T15:59:03.413","lastModified":"2026-06-17T00:32:57.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/."},{"lang":"es","value":"Vulnerabilidad de XSS en Ipswitch MOVEit Mobile en versiones anteriores a 1.2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de la cadena query a mobile/."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:moveit_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0.962","matchCriteriaId":"B93E8747-D8C0-4FBC-BD74-B3A7FC391CD3"}]}]}],"references":[{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135461/Ipswitch-MOVEit-Mobile-1.2.0.962-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"cve@mitre.org"},{"url":"https://profundis-labs.com/advisories/CVE-2015-7679.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135461/Ipswitch-MOVEit-Mobile-1.2.0.962-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://profundis-labs.com/advisories/CVE-2015-7679.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-7680","sourceIdentifier":"cve@mitre.org","published":"2016-02-10T15:59:04.507","lastModified":"2026-06-17T00:32:57.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP requests to machine.aspx."},{"lang":"es","value":"Ipswitch MOVEit DMZ en versiones anteriores a 8.2 provee diferentes mensajes de error de intentos de autenticación en función de si existe la cuenta de usuario, lo que permite a atacantes remotos enumerar nombres de usuario a través de una serie de peticiones SOAP a machine.aspx."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:moveit_dmz:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"C8C09B13-29FD-4A22-A77F-83B9434DBE33"}]}]}],"references":[{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135462/Ipswitch-MOVEit-DMZ-8.1-Information-Disclosure.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"cve@mitre.org"},{"url":"https://profundis-labs.com/advisories/CVE-2015-7680.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135462/Ipswitch-MOVEit-DMZ-8.1-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://profundis-labs.com/advisories/CVE-2015-7680.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2016-0950","sourceIdentifier":"psirt@adobe.com","published":"2016-02-10T20:59:03.187","lastModified":"2026-06-17T00:38:31.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors."},{"lang":"es","value":"Adobe Connect en versiones anteriores a 9.5.2 permite a atacantes remotos suplantar la interfaz de usuario a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*","versionEndIncluding":"9.5.2","matchCriteriaId":"F6372C6A-D656-4EDE-84FE-51A3A308F468"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1034978","source":"psirt@adobe.com"},{"url":"https://helpx.adobe.com/security/products/connect/apsb16-07.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://helpx.adobe.com/security/products/connect/apsb16-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0955","sourceIdentifier":"psirt@adobe.com","published":"2016-02-10T20:59:07.670","lastModified":"2026-06-17T00:38:32.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog."},{"lang":"es","value":"Vulnerabilidad de XSS en Adobe Experience Manager (AEM) 6.1.0 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del campo title de una carpeta que no es manejado correctamente en el dialogo de ventana emergente Deletion."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D8996F27-91F0-42ED-963A-D46C91EC5ECF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://www.csnc.ch/misc/files/advisories/CVE-2016-0955_AEM-XSS.txt","source":"psirt@adobe.com"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.csnc.ch/misc/files/advisories/CVE-2016-0955_AEM-XSS.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0881","sourceIdentifier":"security_alert@emc.com","published":"2016-02-12T01:59:00.113","lastModified":"2026-06-17T00:38:24.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a query to a REST request."},{"lang":"es","value":"EMC Documentum xCP 2.1 en versiones anteriores al patch 23 y 2.2 en versiones anteriores al patch 11 permite a usuarios remotos autenticados llevar a cabo ataques de inyección Documentum Query Language (DQL) y obtener información sensible del repositorio añadiendo una consulta a una petición REST."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-74"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_xcp:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66A06679-442C-484B-9522-ADEEFBB78323"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_xcp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCAC7A92-DDF2-4A90-B3BC-FB3211F8EF67"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Feb/66","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034993","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Feb/66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-0882","sourceIdentifier":"security_alert@emc.com","published":"2016-02-12T01:59:01.100","lastModified":"2026-06-17T00:38:24.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue."},{"lang":"es","value":"EMC Documentum xCP 2.1 en versiones anteriores a patch 23 y 2.2 en versiones anteriores a patch 11 permite a usuarios remotos autenticados leer archivos arbitrarios a través de una petición POST que contiene una declaración de entidad externa XML en conjunción con una referencia a entidad, relacionado con un caso XML External Entity (XXE)."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_xcp:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66A06679-442C-484B-9522-ADEEFBB78323"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_xcp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCAC7A92-DDF2-4A90-B3BC-FB3211F8EF67"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Feb/66","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034993","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Feb/66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/611.html\">CWE-611: Improper Restriction of XML External Entity Reference ('XXE')</a>"}},{"cve":{"id":"CVE-2016-1320","sourceIdentifier":"psirt@cisco.com","published":"2016-02-12T01:59:03.083","lastModified":"2026-06-17T00:41:42.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286."},{"lang":"es","value":"El CLI en Cisco Prime Collaboration 9.0 y 11.0 permite a usuarios locales ejecutar comandos SO arbitrarios como root aprovechando privilegios de administrador, también conocida como Bug ID CSCux69286."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4C4E77BE-4D65-46AE-8866-67D243F158D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration:9.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FF21FDB7-7649-4368-AC99-F9638CE986D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5BF262C6-5D70-4A45-900B-EED1FC1A4A15"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160209-pcp","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2016-38","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160209-pcp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2016-38","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1323","sourceIdentifier":"psirt@cisco.com","published":"2016-02-12T01:59:05.020","lastModified":"2026-06-17T00:41:42.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048."},{"lang":"es","value":"La interfaz REST en Cisco Spark 2015-06 permite a usuarios remotos autenticados obtener información sensible a través de una petición para un archivo no especificado, también conocida como Bug ID CSCuv84048."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:spark:2015-06_base:*:*:*:*:*:*:*","matchCriteriaId":"66C708D2-CF69-4C98-9A62-26710AF2F78B"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp2","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1324","sourceIdentifier":"psirt@cisco.com","published":"2016-02-12T01:59:06.007","lastModified":"2026-06-17T00:41:43.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service (resource outage) by accessing an administrative page, aka Bug ID CSCuv84125."},{"lang":"es","value":"La interfaz REST en Cisco Spark 2015-06 permite a atacantes remotos provocar una denegación de servicio (interrupción del recurso) mediante el acceso a una página administrativa, también conocida como Bug ID CSCuv84125."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:spark:2015-06_base:*:*:*:*:*:*:*","matchCriteriaId":"66C708D2-CF69-4C98-9A62-26710AF2F78B"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp3","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2073","sourceIdentifier":"cve@mitre.org","published":"2016-02-12T15:59:00.127","lastModified":"2026-06-17T00:43:23.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document."},{"lang":"es","value":"La función htmlParseNameComplex en HTMLparser.c en libxml2 permite a atacantes causar una denegación de servicio (lectura fuera de rango) a través de un documento XML manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.4","matchCriteriaId":"AFAD619E-BF3F-4E56-AF88-5880F939333E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/6","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/26/7","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/85267","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035011","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-37","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/26/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/85267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8629","sourceIdentifier":"cve@mitre.org","published":"2016-02-13T02:59:00.133","lastModified":"2026-06-17T00:34:53.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string."},{"lang":"es","value":"La función xdr_nullstring en lib/kadm5/kadm_rpc_xdr.c en kadmind in MIT Kerberos 5 (también conocido como krb5) en versiones anteriores a 1.13.4 y 1.14.x en versiones anteriores a 1.14.1 no verifica si existen caracteres '\\0' según lo esperado, lo que permite a usuarios remotos autenticados obtener información sensible o causar una denegación de servicio (lectura fuera de rango) a través de una cadena manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:N/A:N","baseScore":2.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndExcluding":"1.13.4","matchCriteriaId":"1169B718-3132-4984-9746-320524D141E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionStartIncluding":"1.14","versionEndExcluding":"1.14.1","matchCriteriaId":"FFB93D70-A16F-4716-A5EE-7854D0974AC9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*","matchCriteriaId":"D7B037A8-72A6-4DFF-94B2-D688A5F6F876"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*","matchCriteriaId":"44B8FEDF-6CB0-46E9-9AD7-4445B001C158"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*","matchCriteriaId":"967EC28A-607F-48F4-AD64-5E3041C768F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=8341","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0493.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0532.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/82801","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034914","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/krb5/krb5/commit/df17a1224a3406f57477bcd372c61e04c0e5a5bb","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=8341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0493.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0532.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/82801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/krb5/krb5/commit/df17a1224a3406f57477bcd372c61e04c0e5a5bb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8631","sourceIdentifier":"cve@mitre.org","published":"2016-02-13T02:59:02.023","lastModified":"2026-06-17T00:34:53.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name."},{"lang":"es","value":"Múltiples pérdidas de memoria en kadmin/server/server_stubs.c en kadmind en MIT Kerberos 5 (también conocido como krb5) en versiones anteriores a 1.13.4 y 1.14.x en versiones anteriores a 1.14.1 permiten a usuarios remotos autenticados causar una denegación de servicio (consumo de memoria) a través de una solicitud especificando un nombre principal NULL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-772"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndExcluding":"1.13.4","matchCriteriaId":"1169B718-3132-4984-9746-320524D141E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionStartIncluding":"1.14","versionEndExcluding":"1.14.1","matchCriteriaId":"FFB93D70-A16F-4716-A5EE-7854D0974AC9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*","matchCriteriaId":"967EC28A-607F-48F4-AD64-5E3041C768F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*","matchCriteriaId":"D7B037A8-72A6-4DFF-94B2-D688A5F6F876"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*","matchCriteriaId":"44B8FEDF-6CB0-46E9-9AD7-4445B001C158"}]}]}],"references":[{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=8343","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0493.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0532.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1034916","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/krb5/krb5/commit/83ed75feba32e46f736fcce0d96a0445f29b96c2","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=8343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0493.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0532.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1034916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/krb5/krb5/commit/83ed75feba32e46f736fcce0d96a0445f29b96c2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0864","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-02-13T02:59:03.963","lastModified":"2026-06-17T00:38:22.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors."},{"lang":"es","value":"Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS en versiones anteriores a 5.1 y 4.1.0 Build 16, permite a atacantes remotos obtener información sensible de informe y nombre de usuario a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tollgrade:smartgrid_lighthouse_sensor_management_system:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"0A276DE3-D0E3-4CE1-909D-436186B2DCD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tollgrade:smartgrid_lighthouse_sensor_management_system:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"19B08077-2436-4C32-BEA4-EEF2A3521B46"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-0866","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-02-13T02:59:05.947","lastModified":"2026-06-17T00:38:22.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS en versiones anteriores a 5.1 y 4.1.0 Build 16, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tollgrade:smartgrid_lighthouse_sensor_management_system:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"0A276DE3-D0E3-4CE1-909D-436186B2DCD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tollgrade:smartgrid_lighthouse_sensor_management_system:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"19B08077-2436-4C32-BEA4-EEF2A3521B46"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-1523","sourceIdentifier":"cret@cert.org","published":"2016-02-13T02:59:08.900","lastModified":"2026-06-17T00:42:07.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font."},{"lang":"es","value":"La función SillMap::readFace en FeatureMap.cpp en Libgraphite en Graphite 2 1.2.4, como se utiliza en Mozilla Firefox en versiones anteriores a 43.0 y Firefox ESR 38.x en versiones anteriores a 38.6.1, no maneja correctamente el valor de retorno, lo que permite a atacantes remotos causar una denegación de servicio (falta inicialización, referencia a puntero NULL y caída de aplicación) a través de una fuente inteligente Graphite."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*","matchCriteriaId":"35BF0AFB-26BA-4BEA-B6B8-11CF88E951DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F007CC6-9391-4E1C-A747-F3DE5E572FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*","matchCriteriaId":"45E9641F-430C-4B3A-BD63-EC13DBD3D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5AADD23B-A8AF-4679-990D-C29A1D6EB5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1343A1FD-98CF-4A6C-A697-1253E538FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6D098567-B55E-4EAC-8FAA-31FAFDD4058F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE0389BC-D295-4957-8AE7-EDAC770F596D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E75E69A5-AC94-4F35-9EFB-1BFF8B78210D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2765E663-C9CF-476A-B7A8-6F02D0E2D72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*","matchCriteriaId":"62B4E871-0ACB-4EC5-8392-EAD0DF25E64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*","matchCriteriaId":"435D6EF5-C879-4121-9D47-EF2236E53409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5F99233D-55EE-474D-9D8A-872D5FD9F3DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5963D11-D2F4-40A7-81CE-E034C91FCCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"38.5.1","matchCriteriaId":"F9835F35-2BFD-40D3-976E-953FB7F21330"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sil:graphite2:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C989A1ED-6F9A-4868-9B8F-7770780CC055"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html","source":"cret@cert.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00053.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00055.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00052.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html","source":"cret@cert.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0197.html","source":"cret@cert.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0258.html","source":"cret@cert.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0594.html","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2016/dsa-3477","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2016/dsa-3479","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3491","source":"cret@cert.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-14.html","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/82991","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id/1035017","source":"cret@cert.org"},{"url":"http://www.ubuntu.com/usn/USN-2902-1","source":"cret@cert.org"},{"url":"http://www.ubuntu.com/usn/USN-2904-1","source":"cret@cert.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1246093","source":"cret@cert.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"cret@cert.org"},{"url":"https://security.gentoo.org/glsa/201701-35","source":"cret@cert.org"},{"url":"https://security.gentoo.org/glsa/201701-63","source":"cret@cert.org"},{"url":"http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2902-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2904-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1246093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-35","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-63","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-1625","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-02-14T02:59:03.130","lastModified":"2026-06-17T00:42:17.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc."},{"lang":"es","value":"La funcionalidad Chrome Instant en Google Chrome en versiones anteriores a 48.0.2564.109 no asegura que un destino de navegación New Tab Page (NTP) se encuentre en las listas de más visitados o sugerencias, lo que permite a atacantes remotos eludir las restricciones previstas a través de vectores no especificados, relacionado con instant_service.cc y search_tab_helper.cc."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2564.103","matchCriteriaId":"4D0431D7-1966-45F0-8154-2C7B99E7D2CF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0241.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3486","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/83125","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035183","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=509313","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1669723002","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0241.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=509313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1669723002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1626","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-02-14T02:59:04.287","lastModified":"2026-06-17T00:42:17.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document."},{"lang":"es","value":"La función opj_pi_update_decode_poc en pi.c en OpenJPEG, como se utiliza en PDFium en Google Chrome en versiones anteriores a 48.0.2564.109, no calcula correctamente un determinado valor de índice de capa, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) a través de un documento PDF manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:48.0.2564.103:*:*:*:*:*:*:*","matchCriteriaId":"A24C051E-F0C5-4A66-B131-704C693DED18"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0241.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3486","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/83125","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035183","source":"chrome-cve-admin@google.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-171","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=571480","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1583233008","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201710-26","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0241.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=571480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1583233008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201710-26","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-2005","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T02:59:00.120","lastModified":"2026-06-17T00:23:26.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.5 Patch 6 does not properly expire sessions, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation."},{"lang":"es","value":"IBM Security QRadar SIEM 7.1.x en versiones anteriores a 7.1 MR2 Patch 12 y 7.2.x en versiones anteriores a 7.2.5 Patch 6 no expira adecuadamente las sesiones, lo que permite a atacantes remotos obtener información sensible mediante el aprovechamiento de una estación de trabajo desatendida."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C062C89-5DC2-46EE-A9D3-23E7539A5DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C137959-2279-4459-8A10-43AFE09E2641"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"39D53329-E729-43C1-8C67-EFA4C3F7BFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9FC4EDCA-DF37-4366-B944-F342FA55EEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"76CA942D-70AD-4E0D-A28E-443FB7140A54"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967654","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-2008","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T02:59:01.060","lastModified":"2026-06-17T00:23:26.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH private keys during backup operations, which allows remote authenticated administrators to obtain sensitive information by reading a backup archive."},{"lang":"es","value":"IBM Security QRadar SIEM 7.1.x en versiones anteriores a 7.1 MR2 Patch 12 y 7.2.x en versiones anteriores a 7.2.6 incluye claves privadas SSH durante las operaciones de copia de seguridad, lo que permite a administradores remotos autenticados obtener información sensible mediante la lectura de un archivo de copia de seguridad."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.7,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C062C89-5DC2-46EE-A9D3-23E7539A5DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C137959-2279-4459-8A10-43AFE09E2641"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"39D53329-E729-43C1-8C67-EFA4C3F7BFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9FC4EDCA-DF37-4366-B944-F342FA55EEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"76CA942D-70AD-4E0D-A28E-443FB7140A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967632","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-3197","sourceIdentifier":"secalert@redhat.com","published":"2016-02-15T02:59:01.980","lastModified":"2026-06-17T00:25:31.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions."},{"lang":"es","value":"ssl/s2_srvr.c en OpenSSL 1.0.1 en versiones anteriores a 1.0.1r y 1.0.2 en versiones anteriores a 1.0.2f no impide el uso de cifrados deshabilitados, lo que hace que sea más fácil para atacantes man-in-the-middle vencer los mecanismos de protección criptográfica llevando a cabo cálculos sobre tráfico SSLv2, relacionado con las funciones get_client_master_key y get_client_hello."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:tuxedo:12.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"ED0F7609-6AF0-4EEB-8531-8E66C6D18A64"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:exalogic_infrastructure:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CB059A52-DE6D-47FB-98E8-5A788E1C0FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:exalogic_infrastructure:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D70580AD-2134-49D3-BE15-020023A10E87"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oss_support_tools:8.11.16.3.8:*:*:*:*:*:*:*","matchCriteriaId":"125C0E9C-3052-461E-8903-A60568AC0634"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"EF12AB67-8C57-4BF7-AD3B-58B50A5B2023"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv/20160128.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/82237","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034849","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d81a1600588b726c2bdccda7efad3cc7a87d6245","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:11.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201601-05","source":"secalert@redhat.com"},{"url":"https://www.kb.cert.org/vuls/id/257823","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv/20160128.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d81a1600588b726c2bdccda7efad3cc7a87d6245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:11.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201601-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/257823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-4957","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T02:59:03.793","lastModified":"2026-06-17T00:28:14.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Security QRadar SIEM 7.1.x en versiones anteriores a 7.1 MR2 Patch 12 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C062C89-5DC2-46EE-A9D3-23E7539A5DAF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967631","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21967631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-4991","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T02:59:04.700","lastModified":"2026-06-17T00:28:17.207","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file."},{"lang":"es","value":"IBM SPSS Modeler 14.2 hasta la versión FP3 IF027, 15 hasta la versión FP3 IF015, 16 hasta la versión FP2 IF012, 17 hasta la versión FP1 IF018 y 17.1 hasta la versión IF008 incluye datos en texto plano no especificados en volcados de memoria, lo que permite a usuarios locales obtener información sensible mediante la lectura de un archivo volcado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:14.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"33D6F60D-F679-4C85-B027-4323A981C339"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:14.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"32783B77-DC8F-4B95-A65B-54F2F6E02ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:14.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E272BC66-8533-4503-A227-0FE0FE904631"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:14.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2E1735E4-9732-4D01-B5E0-28A27BEE8415"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:15.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7A99F1ED-82D2-47C4-A898-76290B78561C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:15.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9513A4EE-E322-4BC2-8AF5-81620EB2CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:15.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"814C12D1-E08F-47E5-920C-D03033F77890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:15.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EEF4989D-7D60-4EC5-B98C-E387CB45D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:16.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"51490AA5-F121-48EC-8D30-0EA4585001B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:16.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C80AEAF9-B138-49E0-BE40-3AC940D04748"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:16.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8928F107-61AE-4826-BC2D-32EE6F2C385C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:17.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"22C3E411-8990-4266-A2C0-CF8F14476D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:17.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A80EAA2-21CF-4573-AAB0-3E5852CC2A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_modeler:17.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AD8AA792-DA0E-41D3-A69E-001083BF278F"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI46224","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21975663","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI46224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21975663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7398","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T02:59:09.497","lastModified":"2026-06-17T00:32:22.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Emptoris Contract Management 9.5.0.x en versiones anteriores a 9.5.0.6 iFix15, 10.0.0.x y 10.0.1.x en versiones anteriores a 10.0.1.5 iFix5, 10.0.2.x en versiones anteriores a 10.0.2.7 iFix4 y 10.0.4.x en versiones anteriores a 10.0.4.0 iFix3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:9.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F6F3C251-C3BA-4304-9878-102F3F2FFFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:9.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"82DA8E24-DDBC-48E0-A2A3-57E06CDCF85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:9.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"70478E47-1C52-45E6-92A9-698CA5C25C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:9.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4B85D7E5-9D5B-4B77-A032-3BF92C2EF735"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:9.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A85A9BD0-6E1F-4758-AEF3-E10CC4F9FDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:9.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"479D5852-9127-4AB3-82BB-37A552C14781"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:9.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"991D88E6-740E-4F75-B616-5179B015A9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"88BD708C-D51D-4990-8262-52DB13B7EDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"629E78F5-0CEE-4CC2-8C4B-949D15531905"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"808FE7AE-3D37-4646-AE54-6D430122DBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"892A2283-35E9-4E61-A6D0-B3AF6FE16869"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FCDC9134-E550-495D-92E7-81CF72A2CC65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9B5470C2-DEB2-4DB9-9637-908FD1A0AE70"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6398295F-71CC-41F7-8258-624BC208EF89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D089951B-A834-4B94-9979-F9466AA0A106"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6827F5B1-0114-472F-9991-14F8B49D8B94"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7BAC0A1-FAE0-49F1-AE13-7022122A8E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7CB8BBCB-22B3-4C96-9DF9-66163EFBA40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"68E60709-D987-40D5-A71C-B2EF04D51081"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9D71EC5A-C9EE-4A2B-AA1E-E6987736ECC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"2FE59830-76AB-4458-8DBD-470DA0719B08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"75785255-04E0-4A00-A6CE-FFEECEDEEF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"68916D40-3CF4-4614-BDD1-31681F739598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:emptoris_contract_management:10.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"386B9AB2-B463-4A41-9CA4-1EB6F8572FFD"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973592","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21973592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7444","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T02:59:11.327","lastModified":"2026-06-17T00:32:33.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Update Installer in IBM WebSphere Commerce Enterprise 7.0.0.8 and 7.0.0.9 does not properly replicate the search index, which allows attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El Update Installer en IBM WebSphere Commerce Enterprise 7.0.0.8 y 7.0.0.9 no replica adecuadamente el índice de búsqueda, lo que permite a atacantes obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"05260EDC-BD28-4F89-809A-7852E294A540"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"66F86968-8BD4-42D0-A5C5-9685E3287D01"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54563","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24041614","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24041614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7492","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T02:59:13.247","lastModified":"2026-06-17T00:32:37.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Reference Data Management (RDM) in IBM InfoSphere Master Data Management 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en Reference Data Management (RDM) en IBM InfoSphere Master Data Management 10.1, 11.0 en versiones anteriores a FP5, 11.3, 11.4 y 11.5 en versiones anteriores a FP1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management_reference_data_management:10.1:*:*:*:*:*:*:*","matchCriteriaId":"69E2A4AB-FB7B-4E95-8C3B-3FEE6954CC7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management_reference_data_management:11.0:*:*:*:*:*:*:*","matchCriteriaId":"6E62EF66-F642-4BF8-B773-93C7AEA04F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management_reference_data_management:11.3:*:*:*:*:*:*:*","matchCriteriaId":"74D9262C-E66E-4BB5-B5DB-9BB63BFE1AEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management_reference_data_management:11.4:*:*:*:*:*:*:*","matchCriteriaId":"C94BBDA1-E9AB-4116-A2DF-FAE125E56401"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_master_data_management_reference_data_management:11.5:*:*:*:*:*:*:*","matchCriteriaId":"8DAD3C84-BDCB-47F8-907B-1A9A32B2C98F"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974981","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8531","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T02:59:14.107","lastModified":"2026-06-17T00:34:41.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Security Access Manager for Web 8.0 before 8.0.1.3 IF4 and 9.0 before 9.0.0.1 IF1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Security Access Manager for Web 8.0 en versiones anteriores a 8.0.1.3 IF4 y 9.0 en versiones anteriores a 9.0.0.1 IF1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5B6BD9-C0DF-4359-A6C1-F66E24912800"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4B0D27CF-70BF-4C72-A963-310272D8EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97E19969-DD73-42F2-9E91-504E1663B268"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F9CC2E05-5179-4241-A710-E582510EEB0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BD1366C8-9C78-4B40-8E40-19C4DFEC2B1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D331E67E-25D3-4C34-8118-49E2A8B29D96"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73E4F0CD-26DF-4975-8F40-ECB8E03A08C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FFE6F2A0-BD38-4853-A8FB-299A341FA0B6"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV80692","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974651","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV80692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8795","sourceIdentifier":"cve@mitre.org","published":"2016-02-15T02:59:15.013","lastModified":"2026-06-17T00:35:16.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis page, related to webapp/web/js/scripts/analysis.js or (2) Schema-Browser page, related to webapp/web/js/scripts/schema-browser.js."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en la Admin UI en Apache Solr en versiones anteriores a 5.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de campos manipulados que no se manejan correctamente durante el renderizado de la página (1) Analysis, relacionado con webapp/web/js/scripts/analysis.js o (2) Schema-Browser, relacionado con webapp/web/js/scripts/schema-browser.js."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"E76663CA-B517-417C-8B0D-CF50C55F2901"}]}]}],"references":[{"url":"https://issues.apache.org/jira/browse/SOLR-7346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://issues.apache.org/jira/browse/SOLR-7346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8796","sourceIdentifier":"cve@mitre.org","published":"2016-02-15T02:59:16.140","lastModified":"2026-06-17T00:35:16.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL."},{"lang":"es","value":"Vulnerabilidad de XSS en webapp/web/js/scripts/schema-browser.js en la Admin UI en Apache Solr en versiones anteriores a 5.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL de navegación del esquema manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.1","matchCriteriaId":"56092F5A-F8CA-435F-AE4B-5436E23D6599"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/85205","source":"cve@mitre.org"},{"url":"https://issues.apache.org/jira/browse/SOLR-7920","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/jira/browse/SOLR-7920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8797","sourceIdentifier":"cve@mitre.org","published":"2016-02-15T02:59:17.140","lastModified":"2026-06-17T00:35:16.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI."},{"lang":"es","value":"Vulnerabilidad de XSS en webapp/web/js/scripts/plugins.js en la página de inicio en la Admin UI en Apache Solr en versiones anteriores a 5.3.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un parámetro de entrada a una URI plugins/cache."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3","matchCriteriaId":"19F4AA13-7C94-4C29-B481-9A01F636B1BE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21975544","source":"cve@mitre.org"},{"url":"https://issues.apache.org/jira/browse/SOLR-7949","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21975544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/jira/browse/SOLR-7949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2314","sourceIdentifier":"cve@mitre.org","published":"2016-02-15T02:59:19.873","lastModified":"2026-06-17T00:43:48.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"GlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 devices V200R002B022 Arg, allows remote authenticated users to cause a denial of service (device outage) by using the FTP MKD command to create a directory with a long name, and then using certain other commands."},{"lang":"es","value":"GlobespanVirata ftpd 1.0, como se utiliza en dispositivos Huawei SmartAX MT882 V200R002B022 Arg, permite a usuarios remotos autenticados causar una denegación de servicio (interrupción de dispositivo) mediante el uso del comando FTP MKD para crear un directorio con un nombre largo, y entonces usar otros ciertos comandos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:C","baseScore":6.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:mt882:-:*:*:*:*:*:*:*","matchCriteriaId":"0527EC70-2D03-4BEB-A1CB-F34DC1AB1BE8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mt882_firmware:v200r002b022_arg:*:*:*:*:*:*:*","matchCriteriaId":"5AB16BAB-680D-48A1-9549-EF07E4F05A50"}]}]}],"references":[{"url":"https://debihiga.wordpress.com/sa-ftp/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://debihiga.wordpress.com/sa-ftp/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2016-0747","sourceIdentifier":"secalert@redhat.com","published":"2016-02-15T19:59:02.123","lastModified":"2026-06-17T00:38:08.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to arbitrary name resolution."},{"lang":"es","value":"El traductor de direcciones en nginx en versiones anteriores a 1.8.1 y 1.9.x en versiones anteriores a 1.9.10 no limita correctamente la resolución CNAME, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de recursos por el proceso trabajador) a través de vectores relacionados con la resolución de nombre arbitrario."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionStartIncluding":"0.6.18","versionEndExcluding":"1.8.1","matchCriteriaId":"FB42AA9F-E2F7-471C-AAC1-953469630349"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionStartIncluding":"1.9.0","versionEndExcluding":"1.9.10","matchCriteriaId":"E90F693D-8EEF-4222-B562-67629C7C72DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*","versionEndExcluding":"13.0","matchCriteriaId":"BB279F6B-EE4C-4885-9CD4-657F6BD2548F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Sep/36","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3473","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1034869","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2892-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1425","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa115","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302589","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201606-06","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212818","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Sep/36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1034869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2892-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201606-06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0231","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T23:59:00.113","lastModified":"2026-06-17T00:37:09.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs."},{"lang":"es","value":"IBM Financial Transaction Manager (FTM) para ACH Services, Check Services y Corporate Payment Services (CPS) 3.0.0 en versiones anteriores a FP12 permite a usuarios remotos autenticados obtener información sensible mediante la lectura de detalles de excepción en logs de error."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DD984921-7567-4A54-B23C-40D5250114DC"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56757","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56758","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56759","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56762","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56763","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56764","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21976392","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21976392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0232","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-15T23:59:01.097","lastModified":"2026-06-17T00:37:09.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files."},{"lang":"es","value":"IBM Financial Transaction Manager (FTM) para ACH Services, Check Services y Corporate Payment Services (CPS) 3.0.0 en versiones anteriores a FP12 permite a usuarios remotos autenticados obtener información sensible mediante la lectura de archivos README."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.0:*:*:*:*:ach_services:*:*","matchCriteriaId":"BFE21BBF-0E20-4AFD-906E-540D59085272"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.1:*:*:*:*:ach_services:*:*","matchCriteriaId":"218C7941-5410-4D6E-8993-B84B8F280B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.2:*:*:*:*:ach_services:*:*","matchCriteriaId":"2DC81C13-65ED-461E-8456-E263A6A9932C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.3:*:*:*:*:ach_services:*:*","matchCriteriaId":"D33ADBBE-B37D-4A93-AA34-6F54D4C0D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.4:*:*:*:*:ach_services:*:*","matchCriteriaId":"9EC6EE69-6BDA-40C1-9C06-644280880CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.5:*:*:*:*:ach_services:*:*","matchCriteriaId":"66D61600-0A87-45CC-8058-8200CF1647A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.6:*:*:*:*:ach_services:*:*","matchCriteriaId":"7E558E06-8248-4268-AB97-5E22EF9468C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.7:*:*:*:*:ach_services:*:*","matchCriteriaId":"4C3F3899-485A-4C41-BBFE-3B503D97E5F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.8:*:*:*:*:ach_services:*:*","matchCriteriaId":"CD961902-1422-411B-A7D2-7438B7E5F116"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.9:*:*:*:*:ach_services:*:*","matchCriteriaId":"61F256B7-A3F2-408B-BF91-578828790788"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.10:*:*:*:*:ach_services:*:*","matchCriteriaId":"3B711386-2A5A-4CA4-8A58-C06481C10EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.11:*:*:*:*:ach_services:*:*","matchCriteriaId":"D0C77B57-ED51-4DE3-B343-A7D72FC15EE5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.0:*:*:*:*:check_services:*:*","matchCriteriaId":"24A1AB2E-11A8-4AC0-B564-D5CED110E4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.1:*:*:*:*:check_services:*:*","matchCriteriaId":"E674013B-5615-48DA-9970-66943707DFC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.2:*:*:*:*:check_services:*:*","matchCriteriaId":"99848055-53C5-48DF-9356-2C446702917B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.3:*:*:*:*:check_services:*:*","matchCriteriaId":"5DD5DB60-82C0-429C-9AA7-E29BD406CE82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.4:*:*:*:*:check_services:*:*","matchCriteriaId":"27CF5D42-D567-4969-A314-39CA7008B4B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.5:*:*:*:*:check_services:*:*","matchCriteriaId":"E36B582D-B6F4-474E-88DF-AF661A42C29C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.6:*:*:*:*:check_services:*:*","matchCriteriaId":"8B4B266B-5D90-41D4-8392-E35D890BED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.7:*:*:*:*:check_services:*:*","matchCriteriaId":"D40478F6-AAC5-4E09-AEBE-B5899D847EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.8:*:*:*:*:check_services:*:*","matchCriteriaId":"54ADD20D-5702-46A2-9FF8-37617BEACEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.9:*:*:*:*:check_services:*:*","matchCriteriaId":"0E0738E7-87E8-4161-8BCB-F282DC3640E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.10:*:*:*:*:check_services:*:*","matchCriteriaId":"0C49A3B1-EB10-41FF-9EF5-FCAAC7BC130E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.11:*:*:*:*:check_services:*:*","matchCriteriaId":"C2FB6109-46B3-4E8F-AA8F-4878A9C39D57"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.0:*:*:*:*:cps_services:*:*","matchCriteriaId":"26CDAAB7-BB25-46A4-8461-F1C38D06BEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.1:*:*:*:*:cps_services:*:*","matchCriteriaId":"DB4BBD67-40E3-4C72-AC18-18367B6EBB9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.2:*:*:*:*:cps_services:*:*","matchCriteriaId":"D9879971-7293-48E5-949F-41F6662E4FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.3:*:*:*:*:cps_services:*:*","matchCriteriaId":"732296A1-EC45-4463-A9AA-785C1DBAFB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.4:*:*:*:*:cps_services:*:*","matchCriteriaId":"07FED46E-BDF6-4276-9D0F-D2DC355FFE42"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.5:*:*:*:*:cps_services:*:*","matchCriteriaId":"663CF79F-5BB3-4DED-8FFA-B061C1759E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.6:*:*:*:*:cps_services:*:*","matchCriteriaId":"C995D268-E461-4DFA-ABA7-CF92F5E21B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.7:*:*:*:*:cps_services:*:*","matchCriteriaId":"F9A94033-3A68-434A-BE0B-4C39AFE36815"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.8:*:*:*:*:cps_services:*:*","matchCriteriaId":"A3FDF1FF-4170-4C49-9452-409BD60E27E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.9:*:*:*:*:cps_services:*:*","matchCriteriaId":"DFCD696D-9AA6-4EB0-A063-0EB88911BA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.10:*:*:*:*:cps_services:*:*","matchCriteriaId":"0C219381-6EB4-4185-ACFD-5AFC1EE9C904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:financial_transaction_manager:3.0.0.11:*:*:*:*:cps_services:*:*","matchCriteriaId":"909E2A77-C98F-4A9E-A545-53FB6EEFC2D0"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56757","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56758","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56759","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56762","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56763","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56764","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21976392","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21976392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1321","sourceIdentifier":"psirt@cisco.com","published":"2016-02-15T23:59:02.083","lastModified":"2026-06-17T00:41:42.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco server, aka Bug ID CSCut98082."},{"lang":"es","value":"Dispositivos Cisco Universal Small Cell con firmware R2.12 hasta la versión R3.5 contiene una clave de descifrado de imagen en la memoria flash, lo que permite a atacantes remotos eludir una cierta funcionalidad de validación de certificado y obtener datos sensibles de la imagen del firmware y la dirección IP a través de una petición a un servidor Cisco no especificado, también conocido como Bug ID CSCut98082."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r2.12_base:*:*:*:*:*:*:*","matchCriteriaId":"5FB4F900-ADD6-4BB9-B9E8-1CBBF2FA30B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r2.13_base:*:*:*:*:*:*:*","matchCriteriaId":"7DF7151A-FF5B-48BE-8989-1B489C26B6F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r2.14_base:*:*:*:*:*:*:*","matchCriteriaId":"DE9110A0-6A74-4B7D-9C17-5BC57496218B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r2.15_base:*:*:*:*:*:*:*","matchCriteriaId":"BE1D0D9A-58D9-417B-B43D-DA554B78E355"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r2.16_base:*:*:*:*:*:*:*","matchCriteriaId":"9D0987A2-C09D-43AD-A963-C949673DDDC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r2.17_base:*:*:*:*:*:*:*","matchCriteriaId":"6D8A7623-A7C9-4816-99AE-37436AA407BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r3.2_base:*:*:*:*:*:*:*","matchCriteriaId":"27B82D74-D53A-4F7F-B394-BA50ED87245B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r3.3_base:*:*:*:*:*:*:*","matchCriteriaId":"FF8A9173-C095-4271-BB9B-852B042A308A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_1.1:*:*:*:*:*:*:*","matchCriteriaId":"F7E111F3-1991-4299-8064-2820E44363B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_2.1:*:*:*:*:*:*:*","matchCriteriaId":"6321E696-4E00-4EB4-B458-4FF26C81E052"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_2.17:*:*:*:*:*:*:*","matchCriteriaId":"F788F403-0723-4D27-9C2E-F96DAB1052EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_base:*:*:*:*:*:*:*","matchCriteriaId":"AA8FB794-EE86-4A93-939B-17585D5967A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:universal_small_cell_firmware:r3.5_base:*:*:*:*:*:*:*","matchCriteriaId":"8D348FC4-6B3D-45F1-8C6F-81AC6CE551E4"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160212-usc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035014","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160212-usc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1330","sourceIdentifier":"psirt@cisco.com","published":"2016-02-15T23:59:03.083","lastModified":"2026-06-17T00:41:43.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 15.2(4)E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service (device reload) via crafted Cisco Discovery Protocol (CDP) packets, aka Bug ID CSCuy27746."},{"lang":"es","value":"Cisco IOS 15.2(4)E en dispositivos Industrial Ethernet 2000 permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de paquetes Cisco Discovery Protocol (CDP) manipulados, también conocido como Bug ID CSCuy27746."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zzinc:keymouse_firmware:3.08:*:*:*:*:windows:*:*","matchCriteriaId":"83223AC7-22F3-4FCA-B11B-B769086DCF04"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160215-ie2000","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035013","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160215-ie2000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1331","sourceIdentifier":"psirt@cisco.com","published":"2016-02-15T23:59:04.037","lastModified":"2026-06-17T00:41:43.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy10766."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Cisco Emergency Responder 11.5(0.99833.5) permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros no especificados, también conocido como Bug ID CSCuy10766."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*","matchCriteriaId":"09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160215-er","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035012","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160215-er","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7577","sourceIdentifier":"secalert@redhat.com","published":"2016-02-16T02:59:01.063","lastModified":"2026-06-17T00:32:46.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"activerecord/lib/active_record/nested_attributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option, which allows remote attackers to bypass intended change restrictions by leveraging use of the nested attributes feature."},{"lang":"es","value":"activerecord/lib/active_record/nested_attributes.rb en Active Record en Ruby on Rails 3.1.x y 3.2.x en versiones anteriores a 3.2.22.1, 4.0.x y 4.1.x en versiones anteriores a 4.1.14.1, 4.2.x en versiones anteriores a 4.2.5.1 y 5.x en versiones anteriores a 5.0.0.beta1.1 no implementa adecuadamente una cierta opción de destruir, lo que permite a atacantes remotos eludir restricciones destinadas al cambio mediante el aprovechamiento del uso de la funcionalidad de atributos anidados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"2E950E33-CD03-45F5-83F9-F106060B4A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"547C62C8-4B3E-431B-AA73-5C42ED884671"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"4CDAD329-35F7-4C82-8019-A0CF6D069059"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"56D3858B-0FEE-4E8D-83C2-68AF0431F478"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*","matchCriteriaId":"254884EE-EBA4-45D0-9704-B5CB22569668"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"35FC7015-267C-403B-A23D-EDA6223D2104"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"5C913A56-959D-44F1-BD89-D246C66D1F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*","matchCriteriaId":"5D5BA926-38EE-47BE-9D16-FDCF360A503B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*","matchCriteriaId":"18EA25F1-279A-4F1A-883D-C064369F592E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FD794856-6F30-4ABF-8AE4-720BB75E6F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B4199B8B-A6F9-4BFD-8D27-0E663D8C579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F11E76A3-FA5B-4038-AB52-3D7D5E54D8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"C583ACDE-55D5-4D2F-838F-BEC5BDCDE3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"767C481D-6616-4CA9-9A9B-C994D9121796"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D5496953-0C5E-45F8-A7FB-240CEC2CCEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*","matchCriteriaId":"CA46B621-125E-497F-B2DE-91C989B25936"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*","matchCriteriaId":"B3239443-2E19-4540-BA0C-05A27E44CB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*","matchCriteriaId":"104AC9CF-6611-4469-9852-7FDAF4EC7638"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DC9E1864-B1E5-42C3-B4AF-9A002916B66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"31AC91AA-6A9A-43B4-B3E9-A66A34B6E612"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A462C151-982E-4A83-A376-025015F40645"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"660C2AD2-CEC8-4391-84AF-27515A88B29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*","matchCriteriaId":"578CC013-776B-4868-B448-B7ACAF3AF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*","matchCriteriaId":"C310EA3E-399A-48FD-8DE9-6950E328CF23"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"293B2998-5169-4960-BEC4-21DAC837E32B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FB42A8E7-D273-4CE2-9182-D831D8089BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DB757DFD-BF47-4483-A2C0-DF37F7D10989"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B6C375F2-5027-4B55-9112-C5DD2F787E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EAB8D57F-9849-428C-B8E9-D0A1020728BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B0359DA8-6B41-46C5-AA95-41B1B366DD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"0965BDB6-9644-465C-AA32-9278B2D53197"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"7F6B15CF-37C1-4C9B-8457-4A8C9A480188"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"072EB16D-1325-4869-B156-65E786A834C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"847B3C3D-8656-404D-A954-09C159EDC8E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65CA2D50-B33C-4088-BDDF-EB964C9A092C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"CADB5989-5260-4F60-ACF2-BEB6D7F97654"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9036E3C7-0AD5-489D-BCEE-31DFE13F5ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*","matchCriteriaId":"509597D0-22E1-4BE8-95AD-C54FE4D15FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.6:rc2:*:*:*:*:*:*","matchCriteriaId":"B86E26CB-2376-4EBC-913C-B354E2D6711B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"539C550D-FEDD-415E-95AE-40E1AE2BAF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D5150753-E86D-4859-A046-97B83EAE2C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"59C5B869-74FC-4051-A103-A721332B3CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"7C31EBD2-CD2D-4D38-AA51-A5A56487939A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.9:rc1:*:*:*:*:*:*","matchCriteriaId":"F11E9791-7BCE-43E5-A4BA-6449623FE4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"33FBD4E4-0BCD-49E1-BA84-86621B7C4556"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc1:*:*:*:*:*:*","matchCriteriaId":"CE521626-2876-455C-9D99-DB74726DC724"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc2:*:*:*:*:*:*","matchCriteriaId":"2DFDD32E-F49E-47F7-B033-B6C3C0E07FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc3:*:*:*:*:*:*","matchCriteriaId":"DCBA26F1-FBBA-444D-9C14-F15AB14A4FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc4:*:*:*:*:*:*","matchCriteriaId":"16D3B0EA-49F7-401A-A1D9-437429D33EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"83D1EB17-EE67-48E5-B637-AA9A75D397F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.12:rc1:*:*:*:*:*:*","matchCriteriaId":"17EBD8B4-C4D3-44A6-9DC1-89D948F126A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"A2B1711A-5541-412C-A5A0-274CEAB9E387"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.13:rc1:*:*:*:*:*:*","matchCriteriaId":"FCB08CD7-E9B9-454F-BAF7-96162D177677"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C3AF00C3-93D9-4284-BCB9-40E42CB8386E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.14:rc1:*:*:*:*:*:*","matchCriteriaId":"0D3DA0B4-E374-4ED4-8C3B-F723C968666F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.14:rc2:*:*:*:*:*:*","matchCriteriaId":"B1730A9A-6810-4470-AE6C-A5356D5BFF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9A68D41F-36A9-4B77-814D-996F4E48FA79"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"709A19A5-8FD1-4F9C-A38C-F06242A94D68"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8104482C-E8F5-40A7-8B27-234FEF725FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"2CFF8677-EA00-4F7E-BFF9-272482206DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8D7DF5CD-DA28-492D-B5EE-D252ECCC8D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"85435026-9855-4BF4-A436-832628B005FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"56C2308F-A590-47B0-9791-7865D189196F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9A266882-DABA-4A4C-88E6-60E993EE0947"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"83F1142C-3BFB-4B72-A033-81E20DB19D02"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1FA738A1-227B-4665-B65E-666883FFAE96"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"6F00718C-A9E8-4E85-8DA6-33BF11F2DCCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*","matchCriteriaId":"10789A2D-6401-4119-BFBE-2EE4C16216D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*","matchCriteriaId":"70ABD462-7142-4831-8EB6-801EC1D05573"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"81D717DB-7C80-48AA-A774-E291D2E75D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"06B357FB-0307-4EFA-9C5B-3C2CDEA48584"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"E4BD8840-0F1C-49D3-B843-9CFE64948018"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"79D5B492-43F9-470F-BD21-6EFD93E78453"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"4EC1F602-D48C-458A-A063-4050BE3BB25F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F6A1C015-56AD-489C-B301-68CF1DBF1BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"FD191625-ACE2-46B6-9AAD-12D682C732C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*","matchCriteriaId":"02C7DB56-267B-4057-A9BA-36D1E58C6282"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"AF8F94CF-D504-4165-A69E-3F1198CB162A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.22","matchCriteriaId":"4C068362-0D49-4117-BC96-780AA802CE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.10:rc2:*:*:*:*:*:*","matchCriteriaId":"9C8E749B-2908-442A-99F0-91E2772336ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"9E43D2D7-89AE-4805-9732-F1C601D8D8B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"5F3D8911-060D-435D-ACA2-E29271170CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"EA7A4939-16CF-450D-846A-75B231E32D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C964D4A2-3F39-4CC7-A028-B42C94DDB56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.13:rc1:*:*:*:*:*:*","matchCriteriaId":"3B54D9FE-0A38-4053-9F3C-8831E2DD2BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"23FD6D82-9A14-4BD4-AA00-1875F0962ACE"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178041.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178065.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0296.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3464","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/10","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/81806","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034816","source":"secalert@redhat.com"},{"url":"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/cawsWcQ6c8g/LATIsglZEgAJ","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/cawsWcQ6c8g/LATIsglZEgAJ","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7578","sourceIdentifier":"secalert@redhat.com","published":"2016-02-16T02:59:02.047","lastModified":"2026-06-17T00:32:47.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via crafted tag attributes."},{"lang":"es","value":"Vulnerabilidad de XSS en la gema rails-html-sanitizer en versiones anteriores a 1.0.3 para Ruby on Rails 4.2.x y 5.x permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de atributos de etiqueta manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:html_sanitizer:*:*:*:*:*:ruby:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"4CBB3D93-016A-43CA-9325-3F5D58DD4FD4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9A68D41F-36A9-4B77-814D-996F4E48FA79"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"709A19A5-8FD1-4F9C-A38C-F06242A94D68"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8104482C-E8F5-40A7-8B27-234FEF725FD0"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"2CFF8677-EA00-4F7E-BFF9-272482206DB5"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8D7DF5CD-DA28-492D-B5EE-D252ECCC8D96"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"85435026-9855-4BF4-A436-832628B005FD"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"56C2308F-A590-47B0-9791-7865D189196F"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9A266882-DABA-4A4C-88E6-60E993EE0947"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"83F1142C-3BFB-4B72-A033-81E20DB19D02"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1FA738A1-227B-4665-B65E-666883FFAE96"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"6F00718C-A9E8-4E85-8DA6-33BF11F2DCCE"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*","matchCriteriaId":"10789A2D-6401-4119-BFBE-2EE4C16216D3"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*","matchCriteriaId":"70ABD462-7142-4831-8EB6-801EC1D05573"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"81D717DB-7C80-48AA-A774-E291D2E75D6E"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"06B357FB-0307-4EFA-9C5B-3C2CDEA48584"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"E4BD8840-0F1C-49D3-B843-9CFE64948018"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"79D5B492-43F9-470F-BD21-6EFD93E78453"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"4EC1F602-D48C-458A-A063-4050BE3BB25F"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F6A1C015-56AD-489C-B301-68CF1DBF1BEF"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"FD191625-ACE2-46B6-9AAD-12D682C732C2"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*","matchCriteriaId":"02C7DB56-267B-4057-A9BA-36D1E58C6282"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EC163D49-691B-4125-A983-6CF6F6D86DEE"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68B537D1-1584-4D15-9C75-08ED4D45DC3A"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"1E3B4233-E117-4E77-A60D-3DFD5073154D"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"AF8F94CF-D504-4165-A69E-3F1198CB162A"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1.1:*:*:*:*:*:*","matchCriteriaId":"C8C25977-AB6C-45E1-8956-871EB31B36BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"5F0AB6B0-3506-4332-A183-309FAC4882CE"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"6D7B4EBC-B634-4AD7-9F7A-54D14821D5AE"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178046.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178064.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/11","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034816","source":"secalert@redhat.com"},{"url":"https://github.com/rails/rails-html-sanitizer/commit/297161e29a3e11186ce4c02bf7defc088bf544d4","source":"secalert@redhat.com"},{"url":"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/uh--W4TDwmI/ygHE7hlZEgAJ","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/rails/rails-html-sanitizer/commit/297161e29a3e11186ce4c02bf7defc088bf544d4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/uh--W4TDwmI/ygHE7hlZEgAJ","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7579","sourceIdentifier":"secalert@redhat.com","published":"2016-02-16T02:59:03.000","lastModified":"2026-06-17T00:32:47.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via an HTML entity that is mishandled by the Rails::Html::FullSanitizer class."},{"lang":"es","value":"Vulnerabilidad de XSS in la gema rails-html-sanitizer 1.0.2 para Ruby on Rails 4.2.x y 5.x permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una entidad HTML que no es manejada adecuadamente por la clase Rails::Html::FullSanitizer."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:html_sanitizer:*:*:*:*:*:ruby:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"4CBB3D93-016A-43CA-9325-3F5D58DD4FD4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9A68D41F-36A9-4B77-814D-996F4E48FA79"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"709A19A5-8FD1-4F9C-A38C-F06242A94D68"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8104482C-E8F5-40A7-8B27-234FEF725FD0"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"2CFF8677-EA00-4F7E-BFF9-272482206DB5"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8D7DF5CD-DA28-492D-B5EE-D252ECCC8D96"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"85435026-9855-4BF4-A436-832628B005FD"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"56C2308F-A590-47B0-9791-7865D189196F"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9A266882-DABA-4A4C-88E6-60E993EE0947"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"83F1142C-3BFB-4B72-A033-81E20DB19D02"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1FA738A1-227B-4665-B65E-666883FFAE96"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"6F00718C-A9E8-4E85-8DA6-33BF11F2DCCE"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*","matchCriteriaId":"10789A2D-6401-4119-BFBE-2EE4C16216D3"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*","matchCriteriaId":"70ABD462-7142-4831-8EB6-801EC1D05573"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"81D717DB-7C80-48AA-A774-E291D2E75D6E"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"06B357FB-0307-4EFA-9C5B-3C2CDEA48584"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"E4BD8840-0F1C-49D3-B843-9CFE64948018"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"79D5B492-43F9-470F-BD21-6EFD93E78453"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"4EC1F602-D48C-458A-A063-4050BE3BB25F"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F6A1C015-56AD-489C-B301-68CF1DBF1BEF"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"FD191625-ACE2-46B6-9AAD-12D682C732C2"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*","matchCriteriaId":"02C7DB56-267B-4057-A9BA-36D1E58C6282"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EC163D49-691B-4125-A983-6CF6F6D86DEE"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68B537D1-1584-4D15-9C75-08ED4D45DC3A"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"1E3B4233-E117-4E77-A60D-3DFD5073154D"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"AF8F94CF-D504-4165-A69E-3F1198CB162A"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1.1:*:*:*:*:*:*","matchCriteriaId":"C8C25977-AB6C-45E1-8956-871EB31B36BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"5F0AB6B0-3506-4332-A183-309FAC4882CE"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"6D7B4EBC-B634-4AD7-9F7A-54D14821D5AE"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178046.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178064.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/12","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034816","source":"secalert@redhat.com"},{"url":"https://github.com/rails/rails-html-sanitizer/commit/49dfc1584c5b8e35a4ffabf8356ba3df025e8d3f","source":"secalert@redhat.com"},{"url":"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/OU9ugTZcbjc/uksRkSxZEgAJ","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/rails/rails-html-sanitizer/commit/49dfc1584c5b8e35a4ffabf8356ba3df025e8d3f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/OU9ugTZcbjc/uksRkSxZEgAJ","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7580","sourceIdentifier":"secalert@redhat.com","published":"2016-02-16T02:59:03.970","lastModified":"2026-06-17T00:32:47.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via a crafted CDATA node."},{"lang":"es","value":"Vulnerabilidad de XSS en lib/rails/html/scrubbers.rb en la gema rails-html-sanitizer en versiones anteriores a 1.0.3 para Ruby on Rails 4.2.x y 5.x permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un nodo CDATA manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:html_sanitizer:*:*:*:*:*:ruby:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"4CBB3D93-016A-43CA-9325-3F5D58DD4FD4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9A68D41F-36A9-4B77-814D-996F4E48FA79"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"709A19A5-8FD1-4F9C-A38C-F06242A94D68"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8104482C-E8F5-40A7-8B27-234FEF725FD0"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"2CFF8677-EA00-4F7E-BFF9-272482206DB5"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8D7DF5CD-DA28-492D-B5EE-D252ECCC8D96"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"85435026-9855-4BF4-A436-832628B005FD"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"56C2308F-A590-47B0-9791-7865D189196F"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9A266882-DABA-4A4C-88E6-60E993EE0947"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"83F1142C-3BFB-4B72-A033-81E20DB19D02"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1FA738A1-227B-4665-B65E-666883FFAE96"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"6F00718C-A9E8-4E85-8DA6-33BF11F2DCCE"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*","matchCriteriaId":"10789A2D-6401-4119-BFBE-2EE4C16216D3"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*","matchCriteriaId":"70ABD462-7142-4831-8EB6-801EC1D05573"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"81D717DB-7C80-48AA-A774-E291D2E75D6E"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"06B357FB-0307-4EFA-9C5B-3C2CDEA48584"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"E4BD8840-0F1C-49D3-B843-9CFE64948018"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"79D5B492-43F9-470F-BD21-6EFD93E78453"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"4EC1F602-D48C-458A-A063-4050BE3BB25F"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F6A1C015-56AD-489C-B301-68CF1DBF1BEF"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"FD191625-ACE2-46B6-9AAD-12D682C732C2"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*","matchCriteriaId":"02C7DB56-267B-4057-A9BA-36D1E58C6282"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EC163D49-691B-4125-A983-6CF6F6D86DEE"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68B537D1-1584-4D15-9C75-08ED4D45DC3A"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"1E3B4233-E117-4E77-A60D-3DFD5073154D"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"AF8F94CF-D504-4165-A69E-3F1198CB162A"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1.1:*:*:*:*:*:*","matchCriteriaId":"C8C25977-AB6C-45E1-8956-871EB31B36BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"5F0AB6B0-3506-4332-A183-309FAC4882CE"},{"vulnerable":false,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"6D7B4EBC-B634-4AD7-9F7A-54D14821D5AE"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/15","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034816","source":"secalert@redhat.com"},{"url":"https://github.com/rails/rails-html-sanitizer/commit/63903b0eaa6d2a4e1c91bc86008256c4c8335e78","source":"secalert@redhat.com"},{"url":"https://groups.google.com/forum/message/raw?msg=rubyonrails-security/uh--W4TDwmI/m_CVZtdbFQAJ","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/rails/rails-html-sanitizer/commit/63903b0eaa6d2a4e1c91bc86008256c4c8335e78","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://groups.google.com/forum/message/raw?msg=rubyonrails-security/uh--W4TDwmI/m_CVZtdbFQAJ","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0753","sourceIdentifier":"secalert@redhat.com","published":"2016-02-16T02:59:07.690","lastModified":"2026-06-17T00:38:09.293","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters."},{"lang":"es","value":"Active Model en Ruby on Rails 4.1.x en versiones anteriores a 4.1.14.1, 4.2.x en versiones anteriores a 4.2.5.1 y 5.x en versiones anteriores a 5.0.0.beta1.1 soporta el uso de los escritores a nivel de instancia para descriptores de acceso de clase, lo que permite a atacantes remotos eludir los pasos destinados a la validación a través de parámetros manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndExcluding":"4.1.14.1","matchCriteriaId":"368EF708-1502-4DC8-9374-724A6BF565DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.5.1","matchCriteriaId":"B405A97A-7C41-4005-8E72-56F632D72B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"AF8F94CF-D504-4165-A69E-3F1198CB162A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178041.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178047.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178065.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178066.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0296.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3464","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/14","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/82247","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034816","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/6jQVC1geukQ/3Iy0GU1ZEgAJ","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/82247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/6jQVC1geukQ/3Iy0GU1ZEgAJ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2016-2387","sourceIdentifier":"cve@mitre.org","published":"2016-02-16T15:59:01.117","lastModified":"2026-06-17T00:43:57.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) ns or (2) interface parameter to ProxyServer/register, aka SAP Security Note 2220571."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en el Java Proxy Runtime ProxyServer servlet en SAP NetWeaver 7.5 permite a atacantes remotos inyectar secuencias de comandos de web o HTML arbitrarios a través de (1) ns o (2) parámetro de interfaz para ProxyServer/register, también conocido como SAP Security Note 2220571."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*","matchCriteriaId":"F019F7F5-7740-4BD4-850F-D7A1923C6200"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137045/SAP-NetWeaver-AS-JAVA-7.4-Cross-Site-Scripting.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/May/39","source":"cve@mitre.org"},{"url":"https://erpscan.io/advisories/erpscan-16-008-sap-netweaver-7-4-proxyserver-servlet-xss-vulnerability/","source":"cve@mitre.org"},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-february-2016-review/","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137045/SAP-NetWeaver-AS-JAVA-7.4-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/May/39","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://erpscan.io/advisories/erpscan-16-008-sap-netweaver-7-4-proxyserver-servlet-xss-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-february-2016-review/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2388","sourceIdentifier":"cve@mitre.org","published":"2016-02-16T15:59:02.103","lastModified":"2026-06-17T00:43:57.187","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846."},{"lang":"es","value":"El Universal Worklist Configuration en SAP NetWeaver AS JAVA 7.4 permite a los atacantes remotos obtener información sensible de los usuarios a través de una solicitud HTTP manipulada, también conocida como SAP Security Note 2256846"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-04T20:59:47.982679Z","id":"CVE-2016-2388","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-06-09","cisaActionDue":"2022-06-30","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"SAP NetWeaver Information Disclosure Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_java:*:*:*:*:*:*:*:*","versionStartIncluding":"7.10","versionEndIncluding":"7.50","matchCriteriaId":"70F75AAE-5A52-4B9A-B8E8-8E1BE573B21D"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137128/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/145860/SAP-NetWeaver-J2EE-Engine-7.40-SQL-Injection.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/May/55","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://erpscan.io/advisories/erpscan-16-010-sap-netweaver-7-4-information-disclosure/","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-february-2016-review/","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39841/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/43495/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/137128/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/145860/SAP-NetWeaver-J2EE-Engine-7.40-SQL-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/May/55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://erpscan.io/advisories/erpscan-16-010-sap-netweaver-7-4-information-disclosure/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-february-2016-review/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39841/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/43495/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-2388","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2015-7795","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:00.123","lastModified":"2026-06-17T00:33:09.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150."},{"lang":"es","value":"Vulnerabilidad de XSS en Cybozu Office 9.0.0 hasta la versión 10.3.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149 y CVE-2016-1150."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B029709C-5ED7-4F29-8DA9-AFF9D678429F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D9AE0F63-8DD1-4F61-B772-E4F64197A73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"27E1F1BC-4FF8-4438-92C2-5094F18BAB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C71A2292-BEEF-4449-992C-B8535E0EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E4B07F75-4F29-4241-9C5A-F723EAFCFC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7ADEDCD4-8794-42A3-961A-9CE562BF64CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3CF1B981-0417-430F-9BB3-7292D297557E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7796","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:01.123","lastModified":"2026-06-17T00:33:09.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150."},{"lang":"es","value":"Vulnerabilidad de XSS en Cybozu Office 9.0.0 hasta la versión 10.3.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7795, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149 y CVE-2016-1150."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B029709C-5ED7-4F29-8DA9-AFF9D678429F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D9AE0F63-8DD1-4F61-B772-E4F64197A73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"27E1F1BC-4FF8-4438-92C2-5094F18BAB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C71A2292-BEEF-4449-992C-B8535E0EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E4B07F75-4F29-4241-9C5A-F723EAFCFC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7ADEDCD4-8794-42A3-961A-9CE562BF64CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3CF1B981-0417-430F-9BB3-7292D297557E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7797","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:02.090","lastModified":"2026-06-17T00:33:09.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150."},{"lang":"es","value":"Vulnerabilidad de XSS en Cybozu Office 9.0.0 hasta la versión 10.3.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7795, CVE-2015-7796, CVE-2015-7798, CVE-2016-1149 y CVE-2016-1150."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B029709C-5ED7-4F29-8DA9-AFF9D678429F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D9AE0F63-8DD1-4F61-B772-E4F64197A73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"27E1F1BC-4FF8-4438-92C2-5094F18BAB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C71A2292-BEEF-4449-992C-B8535E0EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E4B07F75-4F29-4241-9C5A-F723EAFCFC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7ADEDCD4-8794-42A3-961A-9CE562BF64CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3CF1B981-0417-430F-9BB3-7292D297557E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7798","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:03.107","lastModified":"2026-06-17T00:33:09.360","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2016-1149, and CVE-2016-1150."},{"lang":"es","value":"Vulnerabilidad de XSS en Cybozu Office 9.0.0 hasta la versión 10.3.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2016-1149 y CVE-2016-1150."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B029709C-5ED7-4F29-8DA9-AFF9D678429F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D9AE0F63-8DD1-4F61-B772-E4F64197A73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"27E1F1BC-4FF8-4438-92C2-5094F18BAB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C71A2292-BEEF-4449-992C-B8535E0EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E4B07F75-4F29-4241-9C5A-F723EAFCFC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7ADEDCD4-8794-42A3-961A-9CE562BF64CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3CF1B981-0417-430F-9BB3-7292D297557E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8484","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:05.247","lastModified":"2026-06-17T00:34:38.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vectors, a different vulnerability than CVE-2015-8485, CVE-2015-8486, and CVE-2016-1152."},{"lang":"es","value":"Cybozu Office 9.9.0 hasta la versión 10.3.0 permite a usuarios remotos autenticados eludir las restricciones destinadas a la visualización del calendario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-8485, CVE-2015-8486 y CVE-2016-1152."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN48720230/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006110.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48720230/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8485","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:06.247","lastModified":"2026-06-17T00:34:39.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8486, and CVE-2016-1152."},{"lang":"es","value":"Cybozu Office 9.9.0 hasta la versión 10.3.0 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y leer la publicación de títulos arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-8484, CVE-2015-8486 y CVE-2016-1152."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN48720230/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006077.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48720230/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006077.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8486","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:07.107","lastModified":"2026-06-17T00:34:39.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2016-1152."},{"lang":"es","value":"Cybozu Office 9.9.0 hasta la versión 10.3.0 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y leer títulos de reportes arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-8484, CVE-2015-8485 y CVE-2016-1152."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN48720230/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006074.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48720230/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8487","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:08.013","lastModified":"2026-06-17T00:34:39.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified vectors, a different vulnerability than CVE-2015-8488."},{"lang":"es","value":"Cybozu Office 9.0.0 hasta la versión 10.3 permite a atacantes remotos descubrir tokens CSRF a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-8488."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B029709C-5ED7-4F29-8DA9-AFF9D678429F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D9AE0F63-8DD1-4F61-B772-E4F64197A73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"27E1F1BC-4FF8-4438-92C2-5094F18BAB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C71A2292-BEEF-4449-992C-B8535E0EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E4B07F75-4F29-4241-9C5A-F723EAFCFC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7ADEDCD4-8794-42A3-961A-9CE562BF64CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3CF1B981-0417-430F-9BB3-7292D297557E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN47296923/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000022","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006071.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN47296923/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8488","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:08.920","lastModified":"2026-06-17T00:34:39.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a different vulnerability than CVE-2015-8487."},{"lang":"es","value":"Cybozu Office 10.3.0 permite a atacantes remotos leer archivos de imagen a través de un mensaje de correo electrónico manipulado, una vulnerabilidad diferente a CVE-2015-8487."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN28042424/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000021","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006075.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN28042424/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8489","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:09.873","lastModified":"2026-06-17T00:34:39.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file, a different vulnerability than CVE-2016-1153."},{"lang":"es","value":"customapp en Cybozu Office 9.9.0 hasta la versión 10.3.0 permite a usuarios remotos autenticados causar una denegación de servicio (bloqueo de base de datos excesiva) a través de un archivo CSV manipulado, una vulnerabilidad diferente a CVE-2016-1153."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN20246313/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000020","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006073.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN20246313/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1149","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:10.810","lastModified":"2026-06-17T00:41:22.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1150."},{"lang":"es","value":"Vulnerabilidad de XSS en Cybozu Office 9.0.0 hasta la versión 10.3.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798 y CVE-2016-1150."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B029709C-5ED7-4F29-8DA9-AFF9D678429F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D9AE0F63-8DD1-4F61-B772-E4F64197A73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"27E1F1BC-4FF8-4438-92C2-5094F18BAB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C71A2292-BEEF-4449-992C-B8535E0EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E4B07F75-4F29-4241-9C5A-F723EAFCFC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7ADEDCD4-8794-42A3-961A-9CE562BF64CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3CF1B981-0417-430F-9BB3-7292D297557E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1150","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:11.827","lastModified":"2026-06-17T00:41:22.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1149."},{"lang":"es","value":"Vulnerabilidad de XSS en Cybozu Office 9.0.0 hasta la versión 10.3.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798 y CVE-2016-1149."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B029709C-5ED7-4F29-8DA9-AFF9D678429F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D9AE0F63-8DD1-4F61-B772-E4F64197A73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"27E1F1BC-4FF8-4438-92C2-5094F18BAB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C71A2292-BEEF-4449-992C-B8535E0EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E4B07F75-4F29-4241-9C5A-F723EAFCFC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7ADEDCD4-8794-42A3-961A-9CE562BF64CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3CF1B981-0417-430F-9BB3-7292D297557E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN69278491/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1152","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:13.827","lastModified":"2026-06-17T00:41:23.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2015-8486."},{"lang":"es","value":"Cybozu Office 9.9.0 hasta la versión 10.3.0 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso, y leer o escribir la planificación de datos, a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-8484, CVE-2015-8485 y CVE-2015-8486."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F02CF334-548D-4B9B-8732-A85D97E003C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A968E493-5C74-45FB-BA4E-C21D66613480"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89D06E58-28D5-43E9-87CD-9534DF3CA6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A86DD19B-9DD2-412D-B259-9D2677C9CC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE0A58F-3DAF-4E88-A7CC-E1FE749EB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BF85C6A-952B-4327-98EF-BB72CA6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN48720230/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006076.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48720230/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2015/006076.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1153","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-17T02:59:14.810","lastModified":"2026-06-17T00:41:23.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different vulnerability than CVE-2015-8489."},{"lang":"es","value":"customapp en Cybozu Office 9.9.0 hasta la versión 10.3.0 permite a usuarios remotos autenticados causar una denegación de servicio a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-8489."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"59BDE89C-C891-4517-877D-26B5E4D87E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"664B383F-3C96-406C-B0B9-041F26F1F5A9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN20246313/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000020","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006108.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN20246313/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cs.cybozu.co.jp/2016/006108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-7447","sourceIdentifier":"cve@mitre.org","published":"2016-02-17T15:59:00.127","lastModified":"2026-06-17T00:01:58.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation."},{"lang":"es","value":"Desbordamiento de entero en la función gdk_cairo_set_source_pixbuf en gdk/gdkcairo.c en GTK+ en versiones anteriores a 3.9.8, tal como se utiliza en eom, gnome-photos, eog, gambas3, thunar, pinpoint y posiblemente otras aplicaciones, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo de imagen grande, lo que desencadena una gran asignación de memoria."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*","matchCriteriaId":"3A5867B4-EC19-45D4-87BE-867E1D41ECD5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00010.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/10/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/10/6","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/83239","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2898-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2898-2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/gtk+2.0/+bug/1540811","source":"cve@mitre.org"},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=703220","source":"cve@mitre.org"},{"url":"https://git.gnome.org/browse/gtk+/commit?id=894b1ae76a32720f4bb3d39cf460402e3ce331d6","source":"cve@mitre.org"},{"url":"https://git.gnome.org/browse/gtk+/tree/NEWS","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/mate-desktop/eom/issues/93","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/10/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/10/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2898-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2898-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/gtk+2.0/+bug/1540811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=703220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.gnome.org/browse/gtk+/commit?id=894b1ae76a32720f4bb3d39cf460402e3ce331d6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.gnome.org/browse/gtk+/tree/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/mate-desktop/eom/issues/93","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/190.html\">CWE-190: Integer Overflow or Wraparound</a>"}},{"cve":{"id":"CVE-2016-2046","sourceIdentifier":"cve@mitre.org","published":"2016-02-17T15:59:03.783","lastModified":"2026-06-17T00:43:19.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter."},{"lang":"es","value":"Vulnerabilidad de XSS en la página UserPortal en SOPHOS UTM en versiones anteriores a 9.353 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro lang."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:unified_threat_management_software:*:*:*:*:*:*:*:*","versionEndIncluding":"9.351","matchCriteriaId":"4FDD35E6-5CCD-4DCE-91F2-44995A5953DC"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135709/Sophos-UTM-9-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/60","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.halock.com/blog/cve-2016-2046-cross-site-scripting-sophos-utm-9/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035048","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/135709/Sophos-UTM-9-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/60","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.halock.com/blog/cve-2016-2046-cross-site-scripting-sophos-utm-9/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-2072","sourceIdentifier":"cve@mitre.org","published":"2016-02-17T15:59:05.750","lastModified":"2026-06-17T00:43:23.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors."},{"lang":"es","value":"La Administrative Web Interface en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway 11.x en versiones anteriores a 11.0 Build 64.34, 10.5 en versiones anteriores a 10.5 Build 59.13, 10.5.e en versiones anteriores a Build 59.1305.e y 10.1 permite a atacantes remotos llevar a cabo ataques de secuestro de clic a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"81FD5100-3ADB-4C21-BCE5-CDA7C4C1D8B9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.1:*:*:*:*:*:*:*","matchCriteriaId":"ADF49FFA-B7D2-4BA0-A633-5CD58083F351"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"93F54B1F-BD90-4152-94AA-C3EBC013F30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:11.0:*:*:*:*:*:*:*","matchCriteriaId":"005FE189-80FF-406C-88E5-B9D9B0723779"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB9B6A-1CAD-4D82-9B1E-939921986053"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.1:*:*:*:*:*:*:*","matchCriteriaId":"ADF49FFA-B7D2-4BA0-A633-5CD58083F351"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*","matchCriteriaId":"375EE327-CD32-4735-B896-08A50C1931D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:10.5e:*:*:*:*:*:*:*","matchCriteriaId":"93F54B1F-BD90-4152-94AA-C3EBC013F30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler:11.0:*:*:*:*:*:*:*","matchCriteriaId":"005FE189-80FF-406C-88E5-B9D9B0723779"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX206001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035098","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX206001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1333","sourceIdentifier":"psirt@cisco.com","published":"2016-02-17T16:59:00.173","lastModified":"2026-06-17T00:41:43.907","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service (device reload) via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878."},{"lang":"es","value":"Cisco IOS 15.5(3)M y 15.6(1)T0a en routers Cisco 1000 Connected Grid permiten a usuarios remotos autenticados provocar una denegación de servicio (recarga de dispositivo) a través de una petición SNMP para OIDs BRIDGE MIB no especificados, también conocida como Bug ID CSCux89878."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.5\\(3\\)m:*:*:*:*:*:*:*","matchCriteriaId":"716EC9AA-0569-4FA7-A244-1A14FA15C5AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*","matchCriteriaId":"679DCA8C-F64B-4716-BCC9-9C461A89CB29"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-grid","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035035","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-grid","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1334","sourceIdentifier":"psirt@cisco.com","published":"2016-02-17T16:59:01.517","lastModified":"2026-06-17T00:41:44.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457."},{"lang":"es","value":"Dispositivos Cisco Small Business 500 Wireless Access Point con firmware 1.0.4.4 permite a atacantes remotos establecer la hora del sistema a través de una petición POST manipulada, también conocida como Bug ID CSCuy01457."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:small_business_wireless_access_points_firmware:1.0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A0FB5DBE-4ABD-4740-A561-3713CB588E47"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-wap","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035036","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-wap","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2398","sourceIdentifier":"cve@mitre.org","published":"2016-02-17T16:59:02.457","lastModified":"2026-06-17T00:43:58.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions."},{"lang":"es","value":"Comcast XFINITY Home Security System no mantiene correctamente la comunicación con la estación base, lo que permite a atacantes físicamente próximos vencer la funcionalidad del sensor interfiriendo con las transmisiones ZigBee 2.4 GHz."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:P","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:comcast:xfinity_home_security_system:*:*:*:*:*:*:*:*","matchCriteriaId":"1176F362-9C2E-40D2-BC63-AA808B8CADF7"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/418072","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.wired.com/2016/01/xfinitys-security-system-flaws-open-homes-to-thieves/","source":"cve@mitre.org"},{"url":"https://community.rapid7.com/community/infosec/blog/2016/01/05/r7-2015-23-comcast-xfinity-home-security-system-insecure-fail-open","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/418072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.wired.com/2016/01/xfinitys-security-system-flaws-open-homes-to-thieves/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://community.rapid7.com/community/infosec/blog/2016/01/05/r7-2015-23-comcast-xfinity-home-security-system-insecure-fail-open","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8287","sourceIdentifier":"cret@cert.org","published":"2016-02-18T05:59:01.233","lastModified":"2026-06-17T00:34:16.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch live video by visiting an unspecified URL."},{"lang":"es","value":"Dispositivos Swann SRNVW-470LCD con firmware hasta la versión 0114 y dispositivos SWNVW-470CAM con firmware hasta la versión 1022 permiten a atacantes remotos ver vídeo en vivo visitando una URL no especificada."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:swann:swnvw-470cam:-:*:*:*:*:*:*:*","matchCriteriaId":"673FC870-54EF-4FE7-A9C9-26E8339CC757"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:swann:swnvw-470cam_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1022","matchCriteriaId":"C56687B4-8C89-4084-A784-A042DA80F176"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:swann:srnvw-470lcd:-:*:*:*:*:*:*:*","matchCriteriaId":"F9278A50-22C2-4AB0-8B03-96DDAC10DCF8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:swann:srnvw-470lcd_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"0114","matchCriteriaId":"DFEC86F7-5019-4CB1-892F-2DF493668196"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/923388","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/923388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/288.html\">CWE-288: Authentication Bypass Using an Alternate Path or Channel</a>"}},{"cve":{"id":"CVE-2015-5970","sourceIdentifier":"security@opentext.com","published":"2016-02-18T22:59:00.107","lastModified":"2026-06-17T00:30:12.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference."},{"lang":"es","value":"El método ChangePassword RPC en Novell ZENworks Configuration Management (ZCM) 11.3 y 11.4 permite a atacantes remotos llevar a cabo ataques de inyección XPath, y leer archivos de texto arbitrarios, a través de una consulta mal formada que implica una referencia a una entidad del sistema."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_configuration_management:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3A7788E5-93B9-4149-8823-2ACBA5CF17E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_configuration_management:11.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5043F87D-E773-4998-836B-ED4863643C32"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_configuration_management:11.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C6841C94-55E0-497A-9E8C-E819947A4E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_configuration_management:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"CBE0D973-C4D7-4626-BC9C-7833A6EE0D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_configuration_management:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5D86763D-9B42-49DE-96FC-D3267B26F006"}]}]}],"references":[{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-167","source":"security@opentext.com"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017240","source":"security@opentext.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1987","sourceIdentifier":"cve@mitre.org","published":"2016-02-18T22:59:06.900","lastModified":"2026-06-17T00:43:02.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets."},{"lang":"es","value":"HPE IPFilter A.11.31.18.21 en HP-UX, cuando cierta configuración de estado guardado se encuentra habilitada, permite a atacantes remotos causar una denegación de servicio a través de paquetes UDP no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hp-ux_ipfilter:a.11.31.18.21:*:*:*:*:*:*:*","matchCriteriaId":"50AF495F-5076-4726-9896-4B1D164E4417"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035026","source":"cve@mitre.org"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04974114","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04974114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2509","sourceIdentifier":"cret@cert.org","published":"2016-02-18T22:59:07.853","lastModified":"2026-06-17T00:44:11.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network."},{"lang":"es","value":"La funcionalidad password-sync en switches Belden Hirschmann Classic Platform L2B en versiones anteriores a 05.3.07 y L2E, L2P, L3E y L3P en versiones anteriores a 09.0.06 establece una comunidad SNMP a la misma cadena que la contraseña de administrador, lo que permite a atacantes remotos obtener información sensible husmeando la red."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:N/A:N","baseScore":2.9,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":5.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:belden:hirschmann_firmware:05.3.06:*:*:*:*:*:*:*","matchCriteriaId":"7966E283-1915-4BAA-8C02-4922744199F5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:belden:hirschmann_l2b:-:*:*:*:*:*:*:*","matchCriteriaId":"787763C7-9B78-4383-B8DB-AF2278173D0D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:belden:hirschmann_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"09.0.05","matchCriteriaId":"BD97A02D-0BF8-48D6-92C7-9320702662E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:belden:hirschmann_l2e:-:*:*:*:*:*:*:*","matchCriteriaId":"92097AD7-2775-4881-9011-B2807519C884"},{"vulnerable":false,"criteria":"cpe:2.3:h:belden:hirschmann_l2p:-:*:*:*:*:*:*:*","matchCriteriaId":"AD20C330-7C99-4D5F-AFAA-D67249EA8EFD"},{"vulnerable":false,"criteria":"cpe:2.3:h:belden:hirschmann_l3e:-:*:*:*:*:*:*:*","matchCriteriaId":"25EE2094-9EFB-485B-B672-397BB868EFB5"},{"vulnerable":false,"criteria":"cpe:2.3:h:belden:hirschmann_l3p:-:*:*:*:*:*:*:*","matchCriteriaId":"36F994B5-3AE3-449C-BCD2-35EF362B5E16"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/507216","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.belden.com/resourcecenter/security/upload/Belden_Security_Advisory_BSECV-2016-2_1v0.pdf","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/507216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.belden.com/resourcecenter/security/upload/Belden_Security_Advisory_BSECV-2016-2_1v0.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2270","sourceIdentifier":"cve@mitre.org","published":"2016-02-19T16:59:00.193","lastModified":"2026-06-17T00:43:43.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings."},{"lang":"es","value":"Xen 4.6.x y versiones anteriores permite a administradores invitados locales provocar una denegación de servicio (reinicio de host) a través de vectores relacionados con múltiples mapeos de páginas MMIO con diferentes ajustes de cacheado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:C","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.1","matchCriteriaId":"AF989165-3B7E-4743-8E97-6558BD164A8F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"4BA58099-26F7-4B01-B9FC-275F012FE9C6"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3519","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035042","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-154.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-03","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2271","sourceIdentifier":"cve@mitre.org","published":"2016-02-19T16:59:01.177","lastModified":"2026-06-17T00:43:44.097","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP."},{"lang":"es","value":"VMX en Xen 4.6.x y versiones anteriores, cuando utiliza una CPU Intel o Cyrix, permite a usuarios invitados HVM locales provocar una denegación de servicio (caída de invitado) a través de vectores relacionados con una RIP no canónica."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B6F7CE9-C409-4D88-9A99-B21420633F45"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B814C381-4991-495A-B530-7543F977B346"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.html","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX209443","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3519","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035043","source":"cve@mitre.org"},{"url":"http://xenbits.xen.org/xsa/advisory-170.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-03","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX209443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xen.org/xsa/advisory-170.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-03","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-7769","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-19T19:59:00.140","lastModified":"2026-06-17T00:33:06.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors."},{"lang":"es","value":"baserCMS 3.0.2 hasta la versión 3.0.8 permite a usuarios remotos autenticados ejecutar comandos del SO arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basercms:basercms:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"12C326A0-482E-4FF9-B13F-C9BCA1C28FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:basercms:basercms:3.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BA705F40-C621-413D-BC5B-7F2A84A96C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:basercms:basercms:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3C906E4F-1B42-437B-BCF4-8F5F087E7078"},{"vulnerable":true,"criteria":"cpe:2.3:a:basercms:basercms:3.0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E1806353-2252-485E-AC42-35544B8BF0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:basercms:basercms:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"AE66AE85-DB8B-437F-ADDF-39D534A1AD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:basercms:basercms:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"80BD2B56-BB93-4C6C-9343-BC9960A4262E"}]}]}],"references":[{"url":"http://basercms.net/security/JVN69854312","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN69854312/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000030","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://basercms.net/security/JVN69854312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN69854312/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1156","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-19T19:59:02.127","lastModified":"2026-06-17T00:41:23.553","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"LINE 4.3.0.724 and earlier on Windows and 4.3.1 and earlier on OS X allows remote authenticated users to cause a denial of service (application crash) via a crafted post that is mishandled when displaying a Timeline."},{"lang":"es","value":"LINE 4.3.0.724 y versiones anteriores en Windows y 4.3.1 y versiones anteriores en OS X permite a usuarios remotos autenticados provocar una denegación de servicio (caída de aplicación) a través de un post manipulado que no es manejado correctamente cuando se muestra un Timeline."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linecorp:line:*:*:*:*:*:macos:*:*","versionEndIncluding":"4.3.1","matchCriteriaId":"708DD36F-4B8A-40B0-B2F1-E0FBE1B18545"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linecorp:line:*:*:*:*:*:windows:*:*","versionEndIncluding":"4.3.0.724","matchCriteriaId":"794404FB-2D60-4EC0-A12B-84A63CA7CA90"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN46044093/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000029","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://linecorp.com/ja/security/article/53","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN46044093/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://linecorp.com/ja/security/article/53","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2038","sourceIdentifier":"cve@mitre.org","published":"2016-02-20T01:59:01.157","lastModified":"2026-06-17T00:43:18.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message."},{"lang":"es","value":"phpMyAdmin 4.0.x en versiones anteriores a 4.0.10.13, 4.4.x en versiones anteriores a 4.4.15.3 y 4.5.x en versiones anteriores a 4.5.4 permite a atacantes remotos obtener información sensible a través de una petición manipulada, lo cual revela la ruta completa en un mensaje de error."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F06DC95-76B1-4E24-A55F-1358A25ED0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B406A721-0075-46C8-A920-3C9602AD667B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"C8AE4653-1911-4A58-85DD-51E0578E788E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA76CB4-6167-446A-8D4F-6D5B38046334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6325E2AE-BB86-4953-AA9E-0433C00B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3C54B828-8B23-4C62-907E-8EE7E757B721"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"02DD18C8-172B-41CD-87DD-58BDEC0D9418"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"10666E30-D98A-47A9-881A-B281066F0EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3993826B-CA66-4BC2-8E1B-06CF9230B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"14928F51-761E-4FCA-B13C-A11530C7FC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"DB761644-20F5-4E0D-B301-7809EAECA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"896439D0-6C98-44A6-8C9D-0D57D57782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"978B828C-1FCB-4386-B685-5BEE5A8A500C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"51A3261B-23BE-42D7-8A52-AE2E8C274A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"F0B7EA51-27EC-4884-8D60-FB9477D2B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-1.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/447c88f4884fe30a25d38c331c31d820a19f8c93","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/5aee5035646c4fc617564cb0d3d58c0435d64d81","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/76b10187c38634a29d6780f99f6dcd796191073b","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/85ccdbb5b9c6c7a9830e5cb468662837a59a7aa3","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/d4b9c22c1f8465bda5b6a83dc7e2cf59c3fe44e1","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/f83b52737e321005959497d8e8f59f8aaedc9048","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-1.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/447c88f4884fe30a25d38c331c31d820a19f8c93","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/5aee5035646c4fc617564cb0d3d58c0435d64d81","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/76b10187c38634a29d6780f99f6dcd796191073b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/85ccdbb5b9c6c7a9830e5cb468662837a59a7aa3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/d4b9c22c1f8465bda5b6a83dc7e2cf59c3fe44e1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/f83b52737e321005959497d8e8f59f8aaedc9048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-2039","sourceIdentifier":"cve@mitre.org","published":"2016-02-20T01:59:02.140","lastModified":"2026-06-17T00:43:18.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass intended access restrictions by predicting a value."},{"lang":"es","value":"libraries/session.inc.php en phpMyAdmin 4.0.x en versiones anteriores a 4.0.10.13, 4.4.x en versiones anteriores a 4.4.15.3 y 4.5.x en versiones anteriores a 4.5.4 no genera adecuadamente valores de token CSRF, lo que permite a atacantes remotos eludir las restricciones destinadas al acceso mediante la predicción de un valor."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F06DC95-76B1-4E24-A55F-1358A25ED0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B406A721-0075-46C8-A920-3C9602AD667B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"C8AE4653-1911-4A58-85DD-51E0578E788E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA76CB4-6167-446A-8D4F-6D5B38046334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6325E2AE-BB86-4953-AA9E-0433C00B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3C54B828-8B23-4C62-907E-8EE7E757B721"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"02DD18C8-172B-41CD-87DD-58BDEC0D9418"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"10666E30-D98A-47A9-881A-B281066F0EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3993826B-CA66-4BC2-8E1B-06CF9230B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"14928F51-761E-4FCA-B13C-A11530C7FC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"DB761644-20F5-4E0D-B301-7809EAECA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"896439D0-6C98-44A6-8C9D-0D57D57782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"978B828C-1FCB-4386-B685-5BEE5A8A500C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"51A3261B-23BE-42D7-8A52-AE2E8C274A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"F0B7EA51-27EC-4884-8D60-FB9477D2B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*","matchCriteriaId":"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-2.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/cb7748ac9cffcd1cd0f3081499cd4aafa9d1065e","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/f20970d32c3dfdf82aef7b6c244da1f769043813","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-2.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/cb7748ac9cffcd1cd0f3081499cd4aafa9d1065e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/f20970d32c3dfdf82aef7b6c244da1f769043813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-2040","sourceIdentifier":"cve@mitre.org","published":"2016-02-20T01:59:03.297","lastModified":"2026-06-17T00:43:18.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) table name, (2) SET value, (3) search query, or (4) hostname in a Location header."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en phpMyAdmin 4.0.x en versiones anteriores a 4.0.10.13, 4.4.x en versiones anteriores a 4.4.15.3 y 4.5.x en versiones anteriores a 4.5.4 permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de (1) un nombre de tabla, (2) un valor SET, (3) una consulta de búsqueda o (4) un nombre de host en una cabecera Location."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F06DC95-76B1-4E24-A55F-1358A25ED0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B406A721-0075-46C8-A920-3C9602AD667B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"C8AE4653-1911-4A58-85DD-51E0578E788E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA76CB4-6167-446A-8D4F-6D5B38046334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6325E2AE-BB86-4953-AA9E-0433C00B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3C54B828-8B23-4C62-907E-8EE7E757B721"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"02DD18C8-172B-41CD-87DD-58BDEC0D9418"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"10666E30-D98A-47A9-881A-B281066F0EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3993826B-CA66-4BC2-8E1B-06CF9230B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"14928F51-761E-4FCA-B13C-A11530C7FC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"DB761644-20F5-4E0D-B301-7809EAECA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"896439D0-6C98-44A6-8C9D-0D57D57782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"978B828C-1FCB-4386-B685-5BEE5A8A500C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"51A3261B-23BE-42D7-8A52-AE2E8C274A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"F0B7EA51-27EC-4884-8D60-FB9477D2B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-3.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/75a55824012406a08c4debf5ddb7ae41c32a7dbc","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/aca42efa01917cc0fe8cfdb2927a6399ca1742f2","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/edffb52884b09562490081c3b8666ef46c296418","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-3.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/75a55824012406a08c4debf5ddb7ae41c32a7dbc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/aca42efa01917cc0fe8cfdb2927a6399ca1742f2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/edffb52884b09562490081c3b8666ef46c296418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-2042","sourceIdentifier":"cve@mitre.org","published":"2016-02-20T01:59:05.470","lastModified":"2026-06-17T00:43:18.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to (1) libraries/phpseclib/Crypt/AES.php or (2) libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message."},{"lang":"es","value":"phpMyAdmin 4.4.x en versiones anteriores a 4.4.15.3 y 4.5.x en versiones anteriores a 4.5.4 permite a atacantes remotos obtener información sensible a través de una petición manipulada a (1) libraries/phpseclib/Crypt/AES.php o (2) libraries/phpseclib/Crypt/Rijndael.php, lo cual revela la ruta completa en un mensaje de error."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-6.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/5a3de108f26e4b0dddadddbe8ccdb1dd5526771f","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-6.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/5a3de108f26e4b0dddadddbe8ccdb1dd5526771f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-2043","sourceIdentifier":"cve@mitre.org","published":"2016-02-20T01:59:06.453","lastModified":"2026-06-17T00:43:19.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the goToFinish1NF function in js/normalization.js in phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a table name to the normalization page."},{"lang":"es","value":"Vulnerabilidad de XSS en la función goToFinish1NF en js/normalization.js en phpMyAdmin 4.4.x en versiones anteriores a 4.4.15.3 y 4.5.x en versiones anteriores a 4.5.4 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un nombre de tabla en la página de normalización."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-7.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/019c4f25d500ec5db9ba3b84cc961a7e4e850738","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-7.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/019c4f25d500ec5db9ba3b84cc961a7e4e850738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-2044","sourceIdentifier":"cve@mitre.org","published":"2016-02-20T01:59:07.563","lastModified":"2026-06-17T00:43:19.207","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message."},{"lang":"es","value":"libraries/sql-parser/autoload.php en analizador SQL en phpMyAdmin 4.5.x en versiones anteriores a 4.5.4 permite a atacantes remotos obtener información sensible a través de una petición manipulada, lo cual revela la ruta completa en un mensaje de error."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-8.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/c57d3cc7b97b5f32801032f7bb222297aa97dfea","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-8.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/c57d3cc7b97b5f32801032f7bb222297aa97dfea","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-2045","sourceIdentifier":"cve@mitre.org","published":"2016-02-20T01:59:08.500","lastModified":"2026-06-17T00:43:19.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON data in a response."},{"lang":"es","value":"Vulnerabilidad de XSS en el editor SQL en phpMyAdmin 4.5.x en versiones anteriores a 4.5.4 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una consulta SQL que desencadena datos JSON en una respuesta."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-9.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/0a24f92d081033576bfdd9d4bdec1a54501734c1","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/11496890d7e21786cbfd9fd17ab968f498116b3f","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2016-9.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/0a24f92d081033576bfdd9d4bdec1a54501734c1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/11496890d7e21786cbfd9fd17ab968f498116b3f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-1628","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-02-21T05:59:00.123","lastModified":"2026-06-17T00:42:17.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted JPEG 2000 image in a PDF document, related to the opj_pi_next_rpcl, opj_pi_next_pcrl, and opj_pi_next_cprl functions."},{"lang":"es","value":"pi.c en OpenJPEG, como se utiliza en PDFium en Google Chrome en versiones anteriores a 48.0.2564.109, no valida cierto valor precision, lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (lectura fuera de rango) a través de una imagen JPEG 2000 manipulada en un documento PDF, relacionado con las funciones opj_pi_next_rpcl, opj_pi_next_pcrl y opj_pi_next_cprl."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2564.103","matchCriteriaId":"4D0431D7-1966-45F0-8154-2C7B99E7D2CF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0241.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3486","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2017/dsa-4013","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/83125","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035183","source":"chrome-cve-admin@google.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-172/","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=571479","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1590593002","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201710-26","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0241.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2017/dsa-4013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-172/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=571479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1590593002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201710-26","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-3273","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:01.117","lastModified":"2026-06-17T00:25:39.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing \"Post a copy to all groups\" actions, which allows remote authenticated users to bypass intended access restrictions by leveraging per-group authorization."},{"lang":"es","value":"mod/forum/post.php en Moodle 2.9.x en versiones anteriores a 2.9.1 no considera la capacidad mod/forum:canposttomygroups antes de autorizar una acción \"Enviar una copia a todos los grupos\", lo que permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso aprovechando autorizaciones por grupo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50220","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2015/07/13/2","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032877","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=316663","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2015/07/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=316663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-3274","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:02.100","lastModified":"2026-06-17T00:25:39.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the user_get_user_details function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to inject arbitrary web script or HTML by leveraging absence of an external_format_text call in a web service."},{"lang":"es","value":"Vulnerabilidad de XSS en la función user_get_user_details en user/lib.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.9, 2.8.x en versiones anteriores a 2.8.7 y 2.9.x en versiones anteriores a 2.9.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios aprovechando la ausencia de una llamada external_format_text en un servicio web."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"05112EC5-3AAA-499B-8763-345187529C09"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"71407960-077B-4407-B249-789436687D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"72728F94-D408-4CAD-A214-800B1D1C7971"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"33C1E9B5-6B2B-4230-92F2-EC0FB307ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"6925A366-37EB-41ED-85C8-B56D6A93D4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"A6400F9D-9654-444F-9EBB-0F73025AD744"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"66ED87A3-8237-4182-BEF5-052346067737"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"57441C51-2ADB-48B9-A655-82D6B1071C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"0E8D7276-415B-4394-8CBE-53EB40B8C5BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"65CA6C47-3E85-4639-9E04-E9E63D0CED06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"105490A4-7F97-467C-9015-069CE25980EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50130","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2015/07/13/2","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032877","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=316664","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2015/07/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=316664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-3275","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:03.113","lastModified":"2026-06-17T00:25:39.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en el módulo SCORM en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.9, 2.8.x en versiones anteriores a 2.8.7 y 2.9.x en versiones anteriores a 2.9.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un nombre de organización manipulado en (1) mod/scorm/player.php o (2) mod/scorm/prereqs.php."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50614","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2015/07/13/2","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032877","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=316665","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2015/07/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=316665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5264","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:04.083","lastModified":"2026-06-17T00:28:47.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access restrictions and enter additional answer attempts by leveraging the student role."},{"lang":"es","value":"El módulo lesson en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.10, 2.8.x en versiones anteriores a 2.8.8 y 2.9.x en versiones anteriores a 2.9.2 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso e introducir intentos de respuesta adicionales al aprovechar el rol de estudiante."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50516","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033619","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320287","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5265","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:05.317","lastModified":"2026-06-17T00:28:47.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles capability before authorizing file management, which allows remote authenticated users to delete arbitrary files by using a manage-files button in a text editor."},{"lang":"es","value":"El componente wiki en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.10, 2.8.x en versiones anteriores a 2.8.8 y 2.9.x en versiones anteriores a 2.9.2 no considera la capacidad mod/wiki:managefiles antes de autorizar la administración de archivos, lo que permite a usuarios remotos autenticados eliminar archivos arbitrarios mediante el uso de un botón manage-files en un editor de texto."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48371","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033619","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320289","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5266","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:06.300","lastModified":"2026-06-17T00:28:47.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-running sync script."},{"lang":"es","value":"La función enrol_meta_sync en enrol/meta/locallib.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.10, 2.8.x en versiones anteriores a 2.8.8 y 2.9.x en versiones anteriores a 2.9.2 permite a usuarios remotos autenticados obtener privilegios de administrador en circunstancias oportunistas aprovechando el procesado incorrecto del rol durante una secuencia de comandos de sincronización de larga duración."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50744","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033619","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320290","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5268","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:08.300","lastModified":"2026-06-17T00:28:47.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allows remote authenticated users to obtain sensitive information by reading a rating value."},{"lang":"es","value":"El componente rating en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.10, 2.8.x en versiones anteriores a 2.8.8 y 2.9.x en versiones anteriores a 2.9.2 no maneja correctamente las comprobaciones de autorización basadas en grupos, lo que permite a usuarios remotos autenticados obtener información sensible mediante la lectura de un valor rating."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50173","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033619","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320292","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5269","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:09.360","lastModified":"2026-06-17T00:28:47.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to inject arbitrary web script or HTML via a modified grouping description."},{"lang":"es","value":"Vulnerabilidad de XSS en group/overview.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.10, 2.8.x en versiones anteriores a 2.8.8 y 2.9.x en versiones anteriores a 2.9.2 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una descripción de agrupamiento modificada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50709","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033619","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320293","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5272","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:10.440","lastModified":"2026-06-17T00:28:47.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to \"all participants.\""},{"lang":"es","value":"El módulo Forum en Moodle 2.7.x en versiones anteriores a 2.7.10 permite a usuarios remotos autenticados publicar en grupos arbitrarios aprovechando el rol de profesor, según lo demostrado por una publicación directa a \"todos los participantes\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50576","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033619","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320288","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=320288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5331","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:11.393","lastModified":"2026-06-17T00:28:56.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API."},{"lang":"es","value":"Moodle 2.9.x en versiones anteriores a 2.9.3 no comprueba adecuadamente la lista de contactos antes de autorizar la transmisión del mensaje, lo que permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y llevar a cabo ataques de spam a través de la API messaging."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50426","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323228","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5332","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:12.470","lastModified":"2026-06-17T00:28:56.727","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service (disk consumption) by leveraging the guest role and entering drafts with the editor-autosave feature."},{"lang":"es","value":"Atto en Moodle 2.8.x en versiones anteriores a 2.8.9 y 2.9.x en versiones anteriores a 2.9.3 permite a atacantes remotos causar una denegación de servicio (consumo de disco) aprovechando el rol invitado e introduciendo borradores con la funcionalidad editor-autosave."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51000","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323229","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5335","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:13.437","lastModified":"2026-06-17T00:28:57.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub URL."},{"lang":"es","value":"Vulnerabilidad de CSRF en admin/registration/register.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.11, 2.8.x en versiones anteriores a 2.8.9 y 2.9.x en versiones anteriores a 2.9.3 permite a atacantes remotos secuestrar la autenticación de administradores en peticiones que envían estadísticas a una URL de hub arbitraria."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51091","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323230","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5336","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:14.530","lastModified":"2026-06-17T00:28:57.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the survey module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the student role and entering a crafted survey answer."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en el módulo survey en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.11, 2.8.x en versiones anteriores a 2.8.9 y 2.9.x en versiones anteriores a 2.9.3 permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios aprovechando el rol estudiante e introduciendo una respuesta de encuesta manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49940","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323231","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5337","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:15.517","lastModified":"2026-06-17T00:28:57.253","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted .swf file."},{"lang":"es","value":"Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.11, 2.8.x en versiones anteriores a 2.8.9 y 2.9.x en versiones anteriores a 2.9.3 no restringe adecuadamente la disponibilidad de Flowplayer, lo que permite a atacantes remotos llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) a través de un archivo .swf manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48085","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323232","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5339","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:17.513","lastModified":"2026-06-17T00:28:57.483","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The core_enrol_get_enrolled_users web service in enrol/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly implement group-based access restrictions, which allows remote authenticated users to obtain sensitive course-participant information via a web-service request."},{"lang":"es","value":"El servicio web core_enrol_get_enrolled_users en enrol/externallib.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.11, 2.8.x en versiones anteriores a 2.8.9 y 2.9.x en versiones anteriores a 2.9.3 no implementa adecuadamente las restricciones de acceso basadas en grupo, lo que permite a usuarios remotos autenticados obtener información sensible de participante de curso a través de una petición a servicio web."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51861","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323234","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5340","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:18.577","lastModified":"2026-06-17T00:28:57.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not consider the moodle/badges:viewbadges capability, which allows remote authenticated users to obtain sensitive badge information via a request involving (1) badges/overview.php or (2) badges/view.php."},{"lang":"es","value":"Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.11, 2.8.x en versiones anteriores a 2.8.9 y 2.9.x en versiones anteriores a 2.9.3 no considera la capacidad moodle/badges:viewbadges, lo que permite a usuarios remotos autenticados obtener información sensible de distintivo a través de una petición que involucra (1) badges/overview.php o (2) badges/view.php."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51684","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323235","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5341","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:19.577","lastModified":"2026-06-17T00:28:57.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors."},{"lang":"es","value":"mod_scorm en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.11, 2.8.x en versiones anteriores a 2.8.9 y 2.9.x en versiones anteriores a 2.9.3 no maneja adecuadamente la disponibilidad de fechas, lo que permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y leer contenidos SCORM a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50837","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323236","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5342","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:20.577","lastModified":"2026-06-17T00:28:57.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state."},{"lang":"es","value":"El módulo choice en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.11, 2.8.x en versiones anteriores a 2.8.9 y 2.9.x en versiones anteriores a 2.9.3 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso visitando una URL para añadir o eliminar respuestas en el estado cerrado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51569","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323237","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=323237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0724","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:21.543","lastModified":"2026-06-17T00:38:05.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get_instance_info web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to obtain sensitive information via a web-service request."},{"lang":"es","value":"Los servicios web (1) core_enrol_get_course_enrolment_methods y (2) enrol_self_get_instance_info en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.12, 2.8.x en versiones anteriores a 2.8.10, 2.9.x en versiones anteriores a 2.9.4 y 3.0.x en versiones anteriores a 3.0.2 no consideran la capacidad moodle/course:viewhiddencourses, lo que permite a usuarios remotos autenticados obtener información sensible a través de una petición a servicio web."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034694","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=326205","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=326205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0725","sourceIdentifier":"secalert@redhat.com","published":"2016-02-22T05:59:22.527","lastModified":"2026-06-17T00:38:05.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string."},{"lang":"es","value":"Vulnerabilidad de XSS en la función search_pagination en course/classes/management_renderer.php en Moodle 2.8.x en versiones anteriores a 2.8.10, 2.9.x en versiones anteriores a 2.9.4 y 3.0.x en versiones anteriores a 3.0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una cadena de búsqueda manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034694","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=326206","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/18/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=326206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2037","sourceIdentifier":"cve@mitre.org","published":"2016-02-22T15:59:00.127","lastModified":"2026-06-17T00:43:18.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file."},{"lang":"es","value":"La función cpio_safer_name_suffix en util.c en cpio 2.11 permite a atacantes remotos causar una denegación de servicio (escritura fuera de rango) através de un archivo cpio manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cpio:2.11:*:*:*:*:*:*:*","matchCriteriaId":"D68C6D55-2BC4-4F00-B5EF-203DE849AD60"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3483","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/22/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/82293","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035067","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2906-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/22/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2906-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2232","sourceIdentifier":"cve@mitre.org","published":"2016-02-22T15:59:01.190","lastModified":"2026-06-17T00:43:42.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3 allow remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a zero length error correcting redundancy packet for a UDPTL FAX packet that is lost."},{"lang":"es","value":"Asterisk Open Source 1.8.x, 11.x en versiones anteriores a 11.21.1, 12.x y 13.x en versiones anteriores a 13.7.1 y Certified Asterisk 1.8.28, 11.6 en versiones anteriores a 11.6-cert12 y 13.1 en versiones anteriores a 13.1-cert3 permiten a usuarios remotos autenticados causar una denegación de servicio (referencia a puntero no inicializado y caída) a través de un error de longitud cero corrigiendo la redundancia de paquetes para un paquete UDPTL FAX que se ha perdido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"F6344E43-E8AA-4340-B3A7-72F5D6A5D184"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"4C170C1C-909D-4439-91B5-DB1A9CD150C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EE821BE5-B1D3-4854-A700-3A83E5F15724"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"149C57CA-0B4B-4220-87FC-432418D1C393"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta4:*:*:*:*:*:*","matchCriteriaId":"035595D5-BBEC-4D85-AD7A-A2C932D2BA70"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta5:*:*:*:*:*:*","matchCriteriaId":"6DAF5655-F09F-47F8-AFA6-4B95F77A57F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F8E001D8-0A7B-4FDD-88E3-E124ED32B81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9D5CFFBD-785F-4417-A54A-F3565FD6E736"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:rc4:*:*:*:*:*:*","matchCriteriaId":"D30EF999-92D1-4B19-8E32-1E4B35DE4EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:rc5:*:*:*:*:*:*","matchCriteriaId":"A67D156B-9C43-444F-ADEC-B21D99D1433C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"893EB152-6444-43DB-8714-9735354C873A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.1:rc1:*:*:*:*:*:*","matchCriteriaId":"F8447EE7-A834-41D7-9204-07BD3752870C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3C04F2C9-5672-42F2-B664-A3EE4C954C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"33465668-4C91-4619-960A-D26D77853E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"CAD08674-0B44-44EA-940B-6812E2D5077D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EEE87710-A129-43AA-BA08-8001848975FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8F582C6E-5DA0-4D72-A40E-66BDBC5CF2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2E7CEBB8-01B3-4A05-AFE8-37A143C9833E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"522733A7-E89E-4BFD-AC93-D6882636E880"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"2FAC47DD-B613-43E4-B9BF-6120B81D9789"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3:rc1:*:*:*:*:*:*","matchCriteriaId":"86D20CB5-60E8-405E-B387-CF80C7DA5E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3:rc2:*:*:*:*:*:*","matchCriteriaId":"71AB5A01-5961-4053-9111-CF32C6473A00"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3:rc3:*:*:*:*:*:*","matchCriteriaId":"77D8E1DC-041F-4B87-AF9A-E0EC4D6A4BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7CCCB892-30CE-4BEF-904E-5D957F94D0EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F156798F-F2EF-4366-B17E-03165AB437D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9EFBB9A6-DD1D-436E-919F-74A3E4F40396"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"054E34C8-B6A5-48C7-938E-D3C268E0E8BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4:rc1:*:*:*:*:*:*","matchCriteriaId":"1DCECA72-533A-4A95-AB19-20C5F09A1B01"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4:rc2:*:*:*:*:*:*","matchCriteriaId":"0E2309F8-AFEE-4150-99D1-BA606432ED73"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4:rc3:*:*:*:*:*:*","matchCriteriaId":"7785F282-BFA0-400A-8398-872ACCA4BF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1278D3FB-78C6-4F7D-A845-0A93D4F6E2B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C00A6EFB-A848-46D3-AAD7-FD8140007E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CB6E3972-5C53-4B6D-BFE1-67E1122EA013"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4.4:*:*:*:*:*:*:*","matchCriteriaId":"048617A0-A783-4519-A947-35220D4CD786"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"DD493A41-E686-444C-A34E-412804510F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.5:rc1:*:*:*:*:*:*","matchCriteriaId":"87D25FD6-CC3A-4AB0-B7B1-67D07386F99D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3C402E9E-09CC-4EFA-AC27-156437B05B22"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C8A41F9C-D2F4-47A9-80CD-2B1BF6B0CB63"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"627FF5B9-E5A8-4DBC-A891-B175011E72A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6146EB2E-BA32-4408-B10B-A711EC39C580"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1C863324-05AE-4FCA-BD2E-39040A468DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A85F51E7-0AAE-4F3B-9F90-BD2E31255822"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"315FB0D4-D4A4-4369-BFB8-F2CAEB429015"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DC74D6C5-F410-4B68-AF92-056B727193A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"B70911F8-A526-4600-8198-03FF4CCB28DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:*:*:*:*:*:*:*","matchCriteriaId":"BA60A9C9-C2EF-4971-BEFB-FF687DAEF2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:-:*:*:*:*:*:*","matchCriteriaId":"984CD6D9-4A54-4065-8401-DC555AB95425"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:patch:*:*:*:*:*:*","matchCriteriaId":"CDE13439-4124-4BDE-A068-460BCF96419B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BAFB22FA-CC24-4AFE-AC83-2D044563F7CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"00F3EB0D-7C63-46B5-BA95-8486B9716C78"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc3:*:*:*:*:*:*","matchCriteriaId":"00C1BF3B-7593-478D-9AAA-153901C70286"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc4:*:*:*:*:*:*","matchCriteriaId":"82423EC2-FA29-4AF6-86C3-6AC6DFDC4DC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc5:*:*:*:*:*:*","matchCriteriaId":"5F86406A-0936-4A06-88FB-4137A64498EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"672CE4C0-EBD6-470B-937E-810FF1C4CDBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"88DB1105-74D8-4312-9D02-D1E21F2E785C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:*:*:*:*:*:*:*","matchCriteriaId":"404C0557-6229-4D90-BFDD-54AFFCCE6A19"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:-:*:*:*:*:*:*","matchCriteriaId":"3F4DC562-649E-4105-8B3E-43F02BD593FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6D1D26CC-891F-4396-B7D7-30D712829E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F25B61EA-F4D1-452A-9D96-B8DFDD719B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9324AB96-EC99-4F04-A0A9-00F936C86EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1B8B5E76-4A74-4E88-8A6F-C23538B7642A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.2:*:*:*:*:*:*:*","matchCriteriaId":"BDB6BBCA-47CE-49B8-9706-AFDE4BE46550"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"8BFF65E2-692B-4C39-88FC-6DED8D9A7258"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:*:*:*:*:*:*:*","matchCriteriaId":"5260E309-9320-4DB8-A918-7D215BF95D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:-:*:*:*:*:*:*","matchCriteriaId":"58F4BFC9-E02A-4121-8D34-99022AB8B45A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"60AFF340-A866-4CFE-9334-53B95FD4AA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:rc2:*:*:*:*:*:*","matchCriteriaId":"74E50309-CD7D-41F7-97DA-A7E451D0796A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:rc3:*:*:*:*:*:*","matchCriteriaId":"6FD3F8F8-820E-4C29-9F8F-023D1DB999CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:rc4:*:*:*:*:*:*","matchCriteriaId":"C33A6419-0D00-49D6-9A48-2B633610AAED"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.1:*:*:*:*:*:*:*","matchCriteriaId":"447E07C9-4A25-418D-B53F-609B78EE4C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:*:*:*:*:*:*:*","matchCriteriaId":"8E8AE686-B618-4B0D-BD27-1F96295E964D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:-:*:*:*:*:*:*","matchCriteriaId":"9C806F87-C897-48E4-8533-A4EBC6B77078"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:patch:*:*:*:*:*:*","matchCriteriaId":"08B8C143-93FF-44DD-8F61-6F4FEE977371"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E9751C0A-84F5-4A43-8282-12A9DE559569"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F67E2694-F6F1-482C-91F2-D9FD856EA31B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.1:*:*:*:*:*:*:*","matchCriteriaId":"5E2D53AA-8D50-445F-9500-2F580F260DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.1:-:*:*:*:*:*:*","matchCriteriaId":"8859F234-5066-40DD-862C-0F3CCA98AFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.1:patch:*:*:*:*:*:*","matchCriteriaId":"75962F03-EC19-4920-9FA7-2D422E6E83F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12:*:*:*:*:*:*:*","matchCriteriaId":"8D9D7D88-D64F-4F54-8C84-6AC45FBD36F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:*:*:*:*:*:*:*","matchCriteriaId":"F67AB282-591C-4ED7-9750-C593A38D5D7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:-:*:*:*:*:*:*","matchCriteriaId":"B5D0BB0E-1BB0-4F31-9C5D-DC1A069E52DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9F8F881-2BF7-44AB-8756-54A06801EB11"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:rc2:*:*:*:*:*:*","matchCriteriaId":"36EFF3C4-4D00-4BC5-94B9-403BB00C6AB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:rc3:*:*:*:*:*:*","matchCriteriaId":"5E434F10-395E-426E-A988-4CDA504577D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.1:*:*:*:*:*:*:*","matchCriteriaId":"33FE3DCE-74B5-49A4-BC18-34B22CA83947"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.2:*:*:*:*:*:*:*","matchCriteriaId":"FF2E25F3-053D-4F7D-A35D-706A401CCAA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.13.0:*:*:*:*:*:*:*","matchCriteriaId":"8880AE7C-3E44-4B76-B500-E93868D4CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.13.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7C94269D-A271-42AC-A44C-102C814E564B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.13.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E7E5B826-D3D5-4D2D-BB4D-2C1BEDE92456"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.13.1:*:*:*:*:*:*:*","matchCriteriaId":"5BA564F7-7A69-4805-8C8C-C2EB5E12A6E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.0:-:*:*:*:*:*:*","matchCriteriaId":"2A153336-10C4-4C42-AC66-AC1351887EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.0:patch:*:*:*:*:*:*","matchCriteriaId":"0C2FF4E9-2513-4022-AF80-6F44A2287D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DF6FA464-F9D3-4674-844B-A2B2E2C42A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.0:rc2:*:*:*:*:*:*","matchCriteriaId":"44722C8B-BB37-4444-A58A-F01D0B3B4DDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.1:*:*:*:*:*:*:*","matchCriteriaId":"C4FABFDB-D99A-4F83-8FEE-3BFA36BA4061"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.1:-:*:*:*:*:*:*","matchCriteriaId":"43E00618-19F6-4828-818A-95C9106097B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.1:patch:*:*:*:*:*:*","matchCriteriaId":"CEC4F4AE-7BD8-437F-8838-FE564BCB7FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.15.0:*:*:*:*:*:*:*","matchCriteriaId":"A842E112-8974-4E74-AD56-1DEF5B5DD9F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.15.0:-:*:*:*:*:*:*","matchCriteriaId":"2BC3B463-6B2C-42AF-BE13-50B7D63E7F05"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.15.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9ACBC01-8A9D-43A5-A825-1CC9670417A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.15.1:*:*:*:*:*:*:*","matchCriteriaId":"61E7199F-EACE-431A-8ADD-B96A6FCDBC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.16.0:*:*:*:*:*:*:*","matchCriteriaId":"BA7CD0E5-8E69-43B5-A5FF-8B122475CC00"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.16.0:-:*:*:*:*:*:*","matchCriteriaId":"2799111C-06DB-4979-8F81-A8C09D53E5F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.16.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F4BEA1B2-2103-4E25-92A9-DB107D6D4AD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.16.0:rc2:*:*:*:*:*:*","matchCriteriaId":"2AD9AFFB-F903-43DD-9C1D-4D8E83EA25C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:*:*:*:*:*:*:*","matchCriteriaId":"6F368897-A481-42DD-A8B0-8AD43A5FD68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:-:*:*:*:*:*:*","matchCriteriaId":"4F3C35F1-CBF2-4F77-AC19-574DEF2652A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:patch:*:*:*:*:*:*","matchCriteriaId":"75EA94FD-D16A-49BC-A418-36EFC187EC7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6BA8F4AF-26C0-4A69-B489-16E7A56E5123"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:rc2:*:*:*:*:*:*","matchCriteriaId":"FE82D53D-092D-4B36-A979-23E9A5E07A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:rc3:*:*:*:*:*:*","matchCriteriaId":"27365383-72DB-4683-9A67-CF553FF2620A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.18.0:*:*:*:*:*:*:*","matchCriteriaId":"46EE63D4-CA9C-4DF4-AF85-B8AC2E3F844A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.18.0:-:*:*:*:*:*:*","matchCriteriaId":"A14FC2A1-29D5-49FE-92A9-D61833BF1C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.18.0:rc1:*:*:*:*:*:*","matchCriteriaId":"91407E03-4E98-4DD9-B584-E5BB74F09B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.18.1:*:*:*:*:*:*:*","matchCriteriaId":"669CC22C-45E5-40AB-9A95-D7DFD694B688"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.0:*:*:*:*:*:*:*","matchCriteriaId":"80A38E0C-45D9-4353-8426-87A4CFA371DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.0:-:*:*:*:*:*:*","matchCriteriaId":"5E3C5C1E-67E9-401A-BA52-FCB32CA4473C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.0:rc1:*:*:*:*:*:*","matchCriteriaId":"54A934AE-AB7C-4D10-8BA2-9C54410C648F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.0:rc3:*:*:*:*:*:*","matchCriteriaId":"7A7C5A8E-35E6-4B86-8502-1970031AB987"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.1:*:*:*:*:*:*:*","matchCriteriaId":"1FA4C14B-A01C-4CFE-8985-317ACCDAD209"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.0:-:*:*:*:*:*:*","matchCriteriaId":"501F5764-BBC2-426A-AF01-7FB477850073"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.0:patch:*:*:*:*:*:*","matchCriteriaId":"FDB35CE5-4EDB-4949-A5E4-1BD721CCA469"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.0:rc1:*:*:*:*:*:*","matchCriteriaId":"619704FF-2F0C-47E8-A340-58135CEE6B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E412E336-871A-4CAC-97E5-FB203BB9349D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.1:-:*:*:*:*:*:*","matchCriteriaId":"82ED9CD2-504E-4D7B-B242-2511A7730776"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.1:patch:*:*:*:*:*:*","matchCriteriaId":"EF6E50F5-605A-4D2B-B55D-8AB251532E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.2:-:*:*:*:*:*:*","matchCriteriaId":"F6C796AE-95EE-4EAB-959C-1C1353C565A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.2:patch:*:*:*:*:*:*","matchCriteriaId":"EEAF3B2E-E520-4F43-ACC5-0F01A6247199"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.21.0:-:*:*:*:*:*:*","matchCriteriaId":"085D4102-E2E8-496C-85B7-714FD3639BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.21.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FC1A0E66-63F4-4BD0-8C9A-3D23A116EE08"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.21.0:rc2:*:*:*:*:*:*","matchCriteriaId":"79963FF0-5ED6-41B6-8E60-146BD7879518"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.22.0:-:*:*:*:*:*:*","matchCriteriaId":"E0ABBB2C-19EC-4D6C-A1EA-AEF0ABA4123D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.22.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0787BC7B-9464-4AAA-896B-C028ECF8E397"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.22.0:rc2:*:*:*:*:*:*","matchCriteriaId":"84C0FBC8-9CD1-4135-94C7-BE90A7C94625"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.0:-:*:*:*:*:*:*","matchCriteriaId":"981F3994-392D-47DB-97DA-AC15BA070A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.0:patch:*:*:*:*:*:*","matchCriteriaId":"94691EE6-266F-46CE-B388-0289EB39D91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FD3948A1-B5A6-4702-9187-A7720E81B7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.0:rc2:*:*:*:*:*:*","matchCriteriaId":"BC097BB6-02E9-4F48-98CB-B5F31B41009C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.1:*:*:*:*:*:*:*","matchCriteriaId":"3C2FD962-B1D5-41E5-884E-0C3F7F9DACE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.24.0:-:*:*:*:*:*:*","matchCriteriaId":"096E966A-878B-426F-AB40-BB476B17B969"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.24.0:rc1:*:*:*:*:*:*","matchCriteriaId":"852DAF2A-86F3-4D05-91DC-6A2FBC214736"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.24.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7D721486-3043-4380-A73C-44B4DD0E34C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.24.1:*:*:*:*:*:*:*","matchCriteriaId":"1F29E2EE-B6E8-4E55-84A8-3BD0658387EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.25.0:-:*:*:*:*:*:*","matchCriteriaId":"837BF2BD-814F-4503-91DF-EE16B5A4921D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.25.0:rc1:*:*:*:*:*:*","matchCriteriaId":"15FCDDB3-62D8-446C-B57C-F3BBFBD13491"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.25.0:rc2:*:*:*:*:*:*","matchCriteriaId":"03512BDE-E441-46F6-88B7-16A2468CA199"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.26.0:-:*:*:*:*:*:*","matchCriteriaId":"902CAF9D-9D02-47FA-AE2E-EC1268A32BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.26.0:rc1:*:*:*:*:*:*","matchCriteriaId":"80AD87B5-B796-4C44-8A6D-0B22AA2903CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.26.1:*:*:*:*:*:*:*","matchCriteriaId":"6D87B2B3-E40B-4BF7-91E6-3B3F9CA28719"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.27.0:*:*:*:*:*:*:*","matchCriteriaId":"2575F7A4-E1F1-4836-A467-076EDD8484B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.27.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CBDFAFA3-A52F-4FC8-BA51-FE52D5F57DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.27.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6085E437-87B8-4355-BDC0-A14EA4F52695"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.28.0:*:*:*:*:*:*:*","matchCriteriaId":"5C44D1ED-2435-4042-BF15-3D752BE0C661"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.28.0:rc1:*:*:*:*:*:*","matchCriteriaId":"23E4CE5C-375C-4ECB-A4D9-A5A6805E5FE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.28.1:*:*:*:*:*:*:*","matchCriteriaId":"236D459B-ED50-4A2F-B463-D2F9DD1C7E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.28.2:*:*:*:*:*:*:*","matchCriteriaId":"E9EEB00A-68B0-4CDE-B625-AB83B1D6D2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.32.0:*:*:*:lts:*:*:*","matchCriteriaId":"72195459-404F-423E-A78C-DE2A728AFDA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F53B8453-F35A-49BE-8129-774BADF71BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"CCB0C07E-DA2F-4169-848D-C3315CDC1CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"410C43E6-5912-4C22-A592-7CF94402EEB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D50A355E-1B55-4DD2-8100-EB81AA6FC40E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9ADF4230-EFEB-45EC-9C96-0262B4A3E459"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5234531C-F69A-4B94-A480-147734206C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.2:*:*:*:*:*:*:*","matchCriteriaId":"321C1066-6800-4488-A7C4-BE91FF738453"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A9B51588-50A2-40B2-A007-06F57D38C7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CDE2B00C-6AC0-4166-8A25-EFC42CE7F737"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9FD404B4-2B0A-4D7A-8CF6-E2C6B4BACBB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"617FC4AF-D152-4EE1-828D-C2A6AD0DFD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3A3FE6DC-17FD-4CEE-BDFB-9D4685640381"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8CEEB6C2-0A6D-4434-8446-CB8605CD3B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1548C574-CD51-49F6-91B1-B06C504000E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.4.0:rc4:*:*:*:*:*:*","matchCriteriaId":"1453BB31-D674-4A05-AB2A-2502D127C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"868865A1-E074-4DB0-A119-D24C5C53FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1794440C-7068-4673-9142-6221B8A39E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C5CF286B-3377-4AE9-A7B9-8535641D639A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.7.0:*:*:*:*:*:*:*","matchCriteriaId":"50EC8D9D-3483-4080-8000-496343BC8BFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6695F632-6AC4-400F-B513-280304ABC1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A3423C40-240A-4237-8B0F-A4B4ED421C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.0:-:*:*:*:*:*:*","matchCriteriaId":"03298D9F-CFB8-48F9-BD0C-8A0BEB0760C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"87FCBE6A-C1CD-48EF-A435-4CEADD46C917"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"42E0E639-70A2-41EE-9B34-A9223D1958AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.0:rc3:*:*:*:*:*:*","matchCriteriaId":"32E84D64-0CB8-46BF-BD3F-8CA2E0CE4C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A70420A8-8571-4528-98E1-72BE00270C6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A276363F-F897-4E6D-9D55-5F5AA73DEE26"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"38230656-6242-4D24-AA67-F42A6FA2FC7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.9.0:rc2:*:*:*:*:*:*","matchCriteriaId":"20ED9FC3-5E56-4AE7-903F-267CAE7F2CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.9.0:rc3:*:*:*:*:*:*","matchCriteriaId":"84F88075-9935-45BF-88B7-21ACE8AAB314"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB16D9D6-A2F6-4C4B-B364-1B63B1FFB5F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"283793E4-0AE8-48D9-ABCF-70E44FE55C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A0F79D5F-EB28-417A-86DF-053D6EDBA161"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.10.1:rc1:*:*:*:*:*:*","matchCriteriaId":"4A036F91-70E0-4E97-9896-EEE97BE3C20E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.11.0:*:*:*:*:*:*:*","matchCriteriaId":"C4EABFC3-24FA-4441-9F2B-650D90AE5CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.11.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3DA61A22-3DD0-46A3-8C13-F25F4F03FD35"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.12.0:*:*:*:*:*:*:*","matchCriteriaId":"2026FD07-103C-4691-AFA4-88C490382F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.12.0:rc1:*:*:*:*:*:*","matchCriteriaId":"791700CD-E007-489E-9BC6-37025CAA8144"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.13.0:*:*:*:*:*:*:*","matchCriteriaId":"4061B4C7-8315-450C-866A-C4F3A6BCB1A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.13.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C6EA7154-7F08-4E43-9270-E617632230AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.14.0:*:*:*:lts:*:*:*","matchCriteriaId":"4149F36C-D455-415F-93D7-F92EEE41419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.14.0:rc1:*:*:*:*:*:*","matchCriteriaId":"2DC51129-8F38-4505-90FB-4FFDED45BABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.14.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4CA571E0-B513-47AA-95BE-EB4DD2AA91E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.15.0:*:*:*:*:*:*:*","matchCriteriaId":"4A62DFFE-637B-4911-B3B4-6DA4053CBDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.15.0:rc1:*:*:*:*:*:*","matchCriteriaId":"96C7950F-41D1-46B5-BA62-E8450CB81244"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.15.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C9A32ECC-E208-4834-8EF7-FEF7A3495041"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.16.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7C5D35-A6AE-4A2E-98C5-CB58FF22AF08"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.16.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AA3E0D41-2E6E-4294-8E56-1A738A7F9AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.17.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D16109B8-4CDF-46FC-9AD9-A158E532791B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.18.0:*:*:*:*:*:*:*","matchCriteriaId":"FD4D1A5A-99A3-4D23-B40C-BBE11EA5B325"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.18.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F5EE428-98FF-42BC-9F61-311327B8F610"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.19.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CBA2FD08-D761-410F-9804-A76F0DD77349"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.20.0:rc1:*:*:*:*:*:*","matchCriteriaId":"74B34C21-D90B-4E32-BBA6-7773DB663F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.21.0:*:*:*:*:*:*:*","matchCriteriaId":"1D3AF185-7AC6-491E-9BE0-8ECD163A3E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.21.0:rc1:*:*:*:*:*:*","matchCriteriaId":"90996D49-5731-4F7D-9DBE-D0599A5D85A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.21.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D3C91C8D-707D-443D-985F-FA3EDB181208"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.21.0:rc3:*:*:*:*:*:*","matchCriteriaId":"25E7F7F5-E85A-4720-B5C9-2B776B04D904"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B446105E-6C8E-495A-BF83-A33CB33485A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.0:-:*:*:*:*:*:*","matchCriteriaId":"F3DE062D-4E87-4691-A664-D9E7C02036EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B4D6D24-A718-4962-AD4E-F19AFB03BFF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"BE2F0D0D-761C-4338-93F0-506E94E57000"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"3D38DFCA-E357-4A28-8F03-FDADF40A5185"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3CD4A85-26FB-4AE5-9CB7-4DF38DF32482"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F42C9442-9EBC-4CA5-AB1C-BA0662C27BDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"71762B58-A08B-405B-9596-6D15CF4A95D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"EA48C05A-E898-42EE-A699-94BBD66E5E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"EDCB78F8-AAC8-44B1-BDF4-C73BC8951EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5D92FFF6-E7B2-4210-A652-79AC6B74002C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DB5E92FB-9CF8-461E-A665-3407D265DF17"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"536F6C10-3165-40F7-931A-23765AB87555"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8DD16DF-C47C-41CF-8CDE-C365103262A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.2:*:*:*:*:*:*:*","matchCriteriaId":"43C06F98-62F4-4008-A463-2791BEDF6DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"133288EC-8A78-4C9D-BF94-9900CD3D2260"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B2E54998-B257-478E-9E52-2BB4F4CD6429"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5FD4498A-72BD-40EB-A332-DE10C87C1015"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"71961599-009C-42F4-AA26-9B16C39F3CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B98A2EA6-DCC6-4F8B-B132-6692AED16CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"672EDC0E-D70A-4BB0-B7FE-5D422C737862"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.0:*:*:*:lts:*:*:*","matchCriteriaId":"C779E0D4-0375-4BE8-9667-A32C68B66D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.0:*:*:*:standard:*:*:*","matchCriteriaId":"6DEF3D58-73E0-402A-A15F-05CA72B5B288"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8E9E50F8-0123-4C9E-88E1-5DCE08770B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F7C605A3-8517-4215-9AD3-980D587B22DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.1:*:*:*:*:*:*:*","matchCriteriaId":"866815AE-D1FE-460C-A3BC-70C251655C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.0:*:*:*:*:*:*:*","matchCriteriaId":"44746060-BC6F-4E6D-BA81-61623B2D27FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"47548ADE-255A-4355-BD06-1FEF134C1620"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ABCFC4D9-8054-4F42-BE7E-5092F6648F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.1:*:*:*:*:*:*:*","matchCriteriaId":"84A7DBB5-999C-4AE8-BC5D-F0C5F77957DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.2:*:*:*:*:*:*:*","matchCriteriaId":"EB1EA7C5-CE37-4A7E-AF81-636228F3BA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:*","matchCriteriaId":"E7D1238A-A8D2-485E-81FD-46038A883EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FB2C4E1E-6B90-4DCC-BC09-7D19FBA65C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*","matchCriteriaId":"58C0FF1B-6188-4181-A139-1806328762BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"890EBB8C-989B-4344-AC03-62B399076008"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"BD4AAECB-A2BC-45BA-BC63-E51C1FE6C334"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*","matchCriteriaId":"136D6508-660E-410D-829A-7DD452BF8819"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AEC2B3AA-EB24-4259-BED1-5DBC102FE9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CEA9DA4A-A3E6-4C46-9471-CCBFA71083AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:*","matchCriteriaId":"599833A2-CBE9-479B-8A6E-AF79C5EED1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B55719B3-7325-47E1-8D16-3F34B1F44385"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B870B3B7-E8DC-45A2-8FA4-657D005D00E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C91E9A3B-54EB-4819-94DD-30F7D0C90047"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"47189DF9-8E57-4BA6-9F52-B7A8229AE02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.7.0:*:*:*:*:*:*:*","matchCriteriaId":"905722CB-4B6C-4849-88CD-22E972432E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"84AAFA3C-3CCD-4615-9725-169C303CF18F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C92E0801-9E8F-4CF2-A4A0-48BCF550F2D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.7.0:rc3:*:*:*:*:*:*","matchCriteriaId":"10823FD4-D618-4050-91D7-CBDE69BC570D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:1.8.28:*:*:*:*:*:*:*","matchCriteriaId":"9365B811-5620-42F0-9400-5EA49361D2B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:*","matchCriteriaId":"322694EF-B086-4BE7-A9F0-41D3A9C245FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:lts:*:*:*","matchCriteriaId":"6AD7C9B3-D029-4E05-8E80-3ADA904FAC1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc2:*:*:*:*:*:*","matchCriteriaId":"770CCEEA-B121-454B-BD36-3FC1B262998A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert10:*:*:lts:*:*:*","matchCriteriaId":"BB47EA31-CF9D-4752-804B-7804151EC87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert11:*:*:lts:*:*:*","matchCriteriaId":"A1C9B744-1745-4E9D-A2DE-4659295508D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:*","matchCriteriaId":"013B1940-C45D-4FE2-8B49-D92B8F1A9048"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:lts:*:*:*","matchCriteriaId":"CE71221B-4D55-4643-B6D1-307B2CF41F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:*","matchCriteriaId":"A98B11B5-B8E2-4903-B4F7-3AC23751AE8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:lts:*:*:*","matchCriteriaId":"88124275-9BEB-4D53-9E4D-1AC8C52F2D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:lts:*:*:*","matchCriteriaId":"4F3CEFEF-72B6-4B58-81FE-01BCEEFB3013"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:lts:*:*:*","matchCriteriaId":"AA637187-0EAE-4756-AD72-A0B2FABCA070"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:lts:*:*:*","matchCriteriaId":"6DAF6784-0B31-4104-9D85-473D5AFAB785"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:lts:*:*:*","matchCriteriaId":"77B06B83-D62C-4A0E-BE94-83C9A02CE55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert8:*:*:lts:*:*:*","matchCriteriaId":"CAD17809-CBB1-4E41-99C9-20FE56853563"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert9:*:*:lts:*:*:*","matchCriteriaId":"066453F2-A77F-4E82-8C91-AC17FAA21A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6.0:*:*:*:lts:*:*:*","matchCriteriaId":"D6EE9895-FB94-451D-8701-8C0DD8F5BED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6.0:-:*:*:*:*:*:*","matchCriteriaId":"CCDDF5C2-9B45-4811-90F6-984EF4B220CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"56849E34-B192-46A8-A517-C7C184A901B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4610D544-156F-4E9A-BC46-9E0FF8D5D641"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1:*:*:*:*:*:*:*","matchCriteriaId":"CA74CB86-72C3-4913-8EB6-3BBA1D3BC65D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1:cert1:*:*:*:*:*:*","matchCriteriaId":"0C6CF412-290C-4524-9AFE-D58A85183864"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1:cert2:*:*:*:*:*:*","matchCriteriaId":"BA3211EE-E305-4247-AA2E-910E48CBCDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9F68ED1E-8D2B-4AEE-B5DE-FD50338BA82D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"EA9F296A-4932-4EA4-8B38-80856A9D6374"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B40673A6-2980-440A-B78E-D5C7095E3FA6"}]}]}],"references":[{"url":"http://downloads.asterisk.org/pub/security/AST-2016-003.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3700","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034931","source":"cve@mitre.org"},{"url":"http://downloads.asterisk.org/pub/security/AST-2016-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034931","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-2316","sourceIdentifier":"cve@mitre.org","published":"2016-02-22T15:59:02.160","lastModified":"2026-06-17T00:43:48.790","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a value greater than 1245, allows remote attackers to cause a denial of service (file descriptor consumption) via vectors related to large retransmit timeout values."},{"lang":"es","value":"chan_sip en Asterisk Open Source 1.8.x, 11.x en versiones anteriores a 11.21.1, 12.x y 13.x en versiones anteriores a 13.7.1 y Certified Asterisk 1.8.28, 11.6 en versiones anteriores a 11.6-cert12 y 13.1 en versiones anteriores a 13.1-cert3, cuando la configuración de timert1 en sip.conf se establece en un valor mayor que 1245, permite a atacantes remotos causar una denegación de servicio (consumo de descriptor de archivo) a través de vectores relacionados con valores de caducidad de retransmisión grandes."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-191"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"F6344E43-E8AA-4340-B3A7-72F5D6A5D184"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"4C170C1C-909D-4439-91B5-DB1A9CD150C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EE821BE5-B1D3-4854-A700-3A83E5F15724"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"149C57CA-0B4B-4220-87FC-432418D1C393"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta4:*:*:*:*:*:*","matchCriteriaId":"035595D5-BBEC-4D85-AD7A-A2C932D2BA70"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:beta5:*:*:*:*:*:*","matchCriteriaId":"6DAF5655-F09F-47F8-AFA6-4B95F77A57F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F8E001D8-0A7B-4FDD-88E3-E124ED32B81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9D5CFFBD-785F-4417-A54A-F3565FD6E736"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:rc4:*:*:*:*:*:*","matchCriteriaId":"D30EF999-92D1-4B19-8E32-1E4B35DE4EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.0:rc5:*:*:*:*:*:*","matchCriteriaId":"A67D156B-9C43-444F-ADEC-B21D99D1433C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"893EB152-6444-43DB-8714-9735354C873A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.1:rc1:*:*:*:*:*:*","matchCriteriaId":"F8447EE7-A834-41D7-9204-07BD3752870C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3C04F2C9-5672-42F2-B664-A3EE4C954C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"33465668-4C91-4619-960A-D26D77853E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"CAD08674-0B44-44EA-940B-6812E2D5077D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EEE87710-A129-43AA-BA08-8001848975FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8F582C6E-5DA0-4D72-A40E-66BDBC5CF2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2E7CEBB8-01B3-4A05-AFE8-37A143C9833E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"522733A7-E89E-4BFD-AC93-D6882636E880"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"2FAC47DD-B613-43E4-B9BF-6120B81D9789"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3:rc1:*:*:*:*:*:*","matchCriteriaId":"86D20CB5-60E8-405E-B387-CF80C7DA5E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3:rc2:*:*:*:*:*:*","matchCriteriaId":"71AB5A01-5961-4053-9111-CF32C6473A00"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3:rc3:*:*:*:*:*:*","matchCriteriaId":"77D8E1DC-041F-4B87-AF9A-E0EC4D6A4BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7CCCB892-30CE-4BEF-904E-5D957F94D0EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F156798F-F2EF-4366-B17E-03165AB437D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9EFBB9A6-DD1D-436E-919F-74A3E4F40396"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"054E34C8-B6A5-48C7-938E-D3C268E0E8BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4:rc1:*:*:*:*:*:*","matchCriteriaId":"1DCECA72-533A-4A95-AB19-20C5F09A1B01"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4:rc2:*:*:*:*:*:*","matchCriteriaId":"0E2309F8-AFEE-4150-99D1-BA606432ED73"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4:rc3:*:*:*:*:*:*","matchCriteriaId":"7785F282-BFA0-400A-8398-872ACCA4BF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1278D3FB-78C6-4F7D-A845-0A93D4F6E2B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C00A6EFB-A848-46D3-AAD7-FD8140007E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CB6E3972-5C53-4B6D-BFE1-67E1122EA013"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.4.4:*:*:*:*:*:*:*","matchCriteriaId":"048617A0-A783-4519-A947-35220D4CD786"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"DD493A41-E686-444C-A34E-412804510F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.5:rc1:*:*:*:*:*:*","matchCriteriaId":"87D25FD6-CC3A-4AB0-B7B1-67D07386F99D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3C402E9E-09CC-4EFA-AC27-156437B05B22"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C8A41F9C-D2F4-47A9-80CD-2B1BF6B0CB63"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"627FF5B9-E5A8-4DBC-A891-B175011E72A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6146EB2E-BA32-4408-B10B-A711EC39C580"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1C863324-05AE-4FCA-BD2E-39040A468DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A85F51E7-0AAE-4F3B-9F90-BD2E31255822"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"315FB0D4-D4A4-4369-BFB8-F2CAEB429015"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DC74D6C5-F410-4B68-AF92-056B727193A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"B70911F8-A526-4600-8198-03FF4CCB28DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:*:*:*:*:*:*:*","matchCriteriaId":"BA60A9C9-C2EF-4971-BEFB-FF687DAEF2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:-:*:*:*:*:*:*","matchCriteriaId":"984CD6D9-4A54-4065-8401-DC555AB95425"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:patch:*:*:*:*:*:*","matchCriteriaId":"CDE13439-4124-4BDE-A068-460BCF96419B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BAFB22FA-CC24-4AFE-AC83-2D044563F7CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"00F3EB0D-7C63-46B5-BA95-8486B9716C78"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc3:*:*:*:*:*:*","matchCriteriaId":"00C1BF3B-7593-478D-9AAA-153901C70286"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc4:*:*:*:*:*:*","matchCriteriaId":"82423EC2-FA29-4AF6-86C3-6AC6DFDC4DC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.0:rc5:*:*:*:*:*:*","matchCriteriaId":"5F86406A-0936-4A06-88FB-4137A64498EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"672CE4C0-EBD6-470B-937E-810FF1C4CDBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"88DB1105-74D8-4312-9D02-D1E21F2E785C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:*:*:*:*:*:*:*","matchCriteriaId":"404C0557-6229-4D90-BFDD-54AFFCCE6A19"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:-:*:*:*:*:*:*","matchCriteriaId":"3F4DC562-649E-4105-8B3E-43F02BD593FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6D1D26CC-891F-4396-B7D7-30D712829E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F25B61EA-F4D1-452A-9D96-B8DFDD719B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9324AB96-EC99-4F04-A0A9-00F936C86EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1B8B5E76-4A74-4E88-8A6F-C23538B7642A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.2:*:*:*:*:*:*:*","matchCriteriaId":"BDB6BBCA-47CE-49B8-9706-AFDE4BE46550"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"8BFF65E2-692B-4C39-88FC-6DED8D9A7258"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:*:*:*:*:*:*:*","matchCriteriaId":"5260E309-9320-4DB8-A918-7D215BF95D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:-:*:*:*:*:*:*","matchCriteriaId":"58F4BFC9-E02A-4121-8D34-99022AB8B45A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"60AFF340-A866-4CFE-9334-53B95FD4AA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:rc2:*:*:*:*:*:*","matchCriteriaId":"74E50309-CD7D-41F7-97DA-A7E451D0796A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:rc3:*:*:*:*:*:*","matchCriteriaId":"6FD3F8F8-820E-4C29-9F8F-023D1DB999CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.0:rc4:*:*:*:*:*:*","matchCriteriaId":"C33A6419-0D00-49D6-9A48-2B633610AAED"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.10.1:*:*:*:*:*:*:*","matchCriteriaId":"447E07C9-4A25-418D-B53F-609B78EE4C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:*:*:*:*:*:*:*","matchCriteriaId":"8E8AE686-B618-4B0D-BD27-1F96295E964D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:-:*:*:*:*:*:*","matchCriteriaId":"9C806F87-C897-48E4-8533-A4EBC6B77078"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:patch:*:*:*:*:*:*","matchCriteriaId":"08B8C143-93FF-44DD-8F61-6F4FEE977371"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E9751C0A-84F5-4A43-8282-12A9DE559569"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F67E2694-F6F1-482C-91F2-D9FD856EA31B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.1:*:*:*:*:*:*:*","matchCriteriaId":"5E2D53AA-8D50-445F-9500-2F580F260DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.1:-:*:*:*:*:*:*","matchCriteriaId":"8859F234-5066-40DD-862C-0F3CCA98AFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.11.1:patch:*:*:*:*:*:*","matchCriteriaId":"75962F03-EC19-4920-9FA7-2D422E6E83F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12:*:*:*:*:*:*:*","matchCriteriaId":"8D9D7D88-D64F-4F54-8C84-6AC45FBD36F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:*:*:*:*:*:*:*","matchCriteriaId":"F67AB282-591C-4ED7-9750-C593A38D5D7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:-:*:*:*:*:*:*","matchCriteriaId":"B5D0BB0E-1BB0-4F31-9C5D-DC1A069E52DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9F8F881-2BF7-44AB-8756-54A06801EB11"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:rc2:*:*:*:*:*:*","matchCriteriaId":"36EFF3C4-4D00-4BC5-94B9-403BB00C6AB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.0:rc3:*:*:*:*:*:*","matchCriteriaId":"5E434F10-395E-426E-A988-4CDA504577D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.1:*:*:*:*:*:*:*","matchCriteriaId":"33FE3DCE-74B5-49A4-BC18-34B22CA83947"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.12.2:*:*:*:*:*:*:*","matchCriteriaId":"FF2E25F3-053D-4F7D-A35D-706A401CCAA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.13.0:*:*:*:*:*:*:*","matchCriteriaId":"8880AE7C-3E44-4B76-B500-E93868D4CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.13.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7C94269D-A271-42AC-A44C-102C814E564B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.13.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E7E5B826-D3D5-4D2D-BB4D-2C1BEDE92456"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.13.1:*:*:*:*:*:*:*","matchCriteriaId":"5BA564F7-7A69-4805-8C8C-C2EB5E12A6E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.0:-:*:*:*:*:*:*","matchCriteriaId":"2A153336-10C4-4C42-AC66-AC1351887EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.0:patch:*:*:*:*:*:*","matchCriteriaId":"0C2FF4E9-2513-4022-AF80-6F44A2287D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DF6FA464-F9D3-4674-844B-A2B2E2C42A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.0:rc2:*:*:*:*:*:*","matchCriteriaId":"44722C8B-BB37-4444-A58A-F01D0B3B4DDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.1:*:*:*:*:*:*:*","matchCriteriaId":"C4FABFDB-D99A-4F83-8FEE-3BFA36BA4061"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.1:-:*:*:*:*:*:*","matchCriteriaId":"43E00618-19F6-4828-818A-95C9106097B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.14.1:patch:*:*:*:*:*:*","matchCriteriaId":"CEC4F4AE-7BD8-437F-8838-FE564BCB7FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.15.0:*:*:*:*:*:*:*","matchCriteriaId":"A842E112-8974-4E74-AD56-1DEF5B5DD9F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.15.0:-:*:*:*:*:*:*","matchCriteriaId":"2BC3B463-6B2C-42AF-BE13-50B7D63E7F05"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.15.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9ACBC01-8A9D-43A5-A825-1CC9670417A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.15.1:*:*:*:*:*:*:*","matchCriteriaId":"61E7199F-EACE-431A-8ADD-B96A6FCDBC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.16.0:*:*:*:*:*:*:*","matchCriteriaId":"BA7CD0E5-8E69-43B5-A5FF-8B122475CC00"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.16.0:-:*:*:*:*:*:*","matchCriteriaId":"2799111C-06DB-4979-8F81-A8C09D53E5F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.16.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F4BEA1B2-2103-4E25-92A9-DB107D6D4AD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.16.0:rc2:*:*:*:*:*:*","matchCriteriaId":"2AD9AFFB-F903-43DD-9C1D-4D8E83EA25C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:*:*:*:*:*:*:*","matchCriteriaId":"6F368897-A481-42DD-A8B0-8AD43A5FD68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:-:*:*:*:*:*:*","matchCriteriaId":"4F3C35F1-CBF2-4F77-AC19-574DEF2652A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:patch:*:*:*:*:*:*","matchCriteriaId":"75EA94FD-D16A-49BC-A418-36EFC187EC7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6BA8F4AF-26C0-4A69-B489-16E7A56E5123"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:rc2:*:*:*:*:*:*","matchCriteriaId":"FE82D53D-092D-4B36-A979-23E9A5E07A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.17.0:rc3:*:*:*:*:*:*","matchCriteriaId":"27365383-72DB-4683-9A67-CF553FF2620A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.18.0:*:*:*:*:*:*:*","matchCriteriaId":"46EE63D4-CA9C-4DF4-AF85-B8AC2E3F844A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.18.0:-:*:*:*:*:*:*","matchCriteriaId":"A14FC2A1-29D5-49FE-92A9-D61833BF1C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.18.0:rc1:*:*:*:*:*:*","matchCriteriaId":"91407E03-4E98-4DD9-B584-E5BB74F09B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.18.1:*:*:*:*:*:*:*","matchCriteriaId":"669CC22C-45E5-40AB-9A95-D7DFD694B688"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.0:*:*:*:*:*:*:*","matchCriteriaId":"80A38E0C-45D9-4353-8426-87A4CFA371DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.0:-:*:*:*:*:*:*","matchCriteriaId":"5E3C5C1E-67E9-401A-BA52-FCB32CA4473C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.0:rc1:*:*:*:*:*:*","matchCriteriaId":"54A934AE-AB7C-4D10-8BA2-9C54410C648F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.0:rc3:*:*:*:*:*:*","matchCriteriaId":"7A7C5A8E-35E6-4B86-8502-1970031AB987"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.19.1:*:*:*:*:*:*:*","matchCriteriaId":"1FA4C14B-A01C-4CFE-8985-317ACCDAD209"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.0:-:*:*:*:*:*:*","matchCriteriaId":"501F5764-BBC2-426A-AF01-7FB477850073"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.0:patch:*:*:*:*:*:*","matchCriteriaId":"FDB35CE5-4EDB-4949-A5E4-1BD721CCA469"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.0:rc1:*:*:*:*:*:*","matchCriteriaId":"619704FF-2F0C-47E8-A340-58135CEE6B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E412E336-871A-4CAC-97E5-FB203BB9349D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.1:-:*:*:*:*:*:*","matchCriteriaId":"82ED9CD2-504E-4D7B-B242-2511A7730776"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.1:patch:*:*:*:*:*:*","matchCriteriaId":"EF6E50F5-605A-4D2B-B55D-8AB251532E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.2:-:*:*:*:*:*:*","matchCriteriaId":"F6C796AE-95EE-4EAB-959C-1C1353C565A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.20.2:patch:*:*:*:*:*:*","matchCriteriaId":"EEAF3B2E-E520-4F43-ACC5-0F01A6247199"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.21.0:-:*:*:*:*:*:*","matchCriteriaId":"085D4102-E2E8-496C-85B7-714FD3639BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.21.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FC1A0E66-63F4-4BD0-8C9A-3D23A116EE08"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.21.0:rc2:*:*:*:*:*:*","matchCriteriaId":"79963FF0-5ED6-41B6-8E60-146BD7879518"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.22.0:-:*:*:*:*:*:*","matchCriteriaId":"E0ABBB2C-19EC-4D6C-A1EA-AEF0ABA4123D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.22.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0787BC7B-9464-4AAA-896B-C028ECF8E397"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.22.0:rc2:*:*:*:*:*:*","matchCriteriaId":"84C0FBC8-9CD1-4135-94C7-BE90A7C94625"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.0:-:*:*:*:*:*:*","matchCriteriaId":"981F3994-392D-47DB-97DA-AC15BA070A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.0:patch:*:*:*:*:*:*","matchCriteriaId":"94691EE6-266F-46CE-B388-0289EB39D91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FD3948A1-B5A6-4702-9187-A7720E81B7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.0:rc2:*:*:*:*:*:*","matchCriteriaId":"BC097BB6-02E9-4F48-98CB-B5F31B41009C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.23.1:*:*:*:*:*:*:*","matchCriteriaId":"3C2FD962-B1D5-41E5-884E-0C3F7F9DACE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.24.0:-:*:*:*:*:*:*","matchCriteriaId":"096E966A-878B-426F-AB40-BB476B17B969"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.24.0:rc1:*:*:*:*:*:*","matchCriteriaId":"852DAF2A-86F3-4D05-91DC-6A2FBC214736"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.24.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7D721486-3043-4380-A73C-44B4DD0E34C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.24.1:*:*:*:*:*:*:*","matchCriteriaId":"1F29E2EE-B6E8-4E55-84A8-3BD0658387EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.25.0:-:*:*:*:*:*:*","matchCriteriaId":"837BF2BD-814F-4503-91DF-EE16B5A4921D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.25.0:rc1:*:*:*:*:*:*","matchCriteriaId":"15FCDDB3-62D8-446C-B57C-F3BBFBD13491"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.25.0:rc2:*:*:*:*:*:*","matchCriteriaId":"03512BDE-E441-46F6-88B7-16A2468CA199"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.26.0:-:*:*:*:*:*:*","matchCriteriaId":"902CAF9D-9D02-47FA-AE2E-EC1268A32BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.26.0:rc1:*:*:*:*:*:*","matchCriteriaId":"80AD87B5-B796-4C44-8A6D-0B22AA2903CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.26.1:*:*:*:*:*:*:*","matchCriteriaId":"6D87B2B3-E40B-4BF7-91E6-3B3F9CA28719"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.27.0:*:*:*:*:*:*:*","matchCriteriaId":"2575F7A4-E1F1-4836-A467-076EDD8484B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.27.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CBDFAFA3-A52F-4FC8-BA51-FE52D5F57DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.27.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6085E437-87B8-4355-BDC0-A14EA4F52695"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.28.0:*:*:*:*:*:*:*","matchCriteriaId":"5C44D1ED-2435-4042-BF15-3D752BE0C661"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.28.0:rc1:*:*:*:*:*:*","matchCriteriaId":"23E4CE5C-375C-4ECB-A4D9-A5A6805E5FE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.28.1:*:*:*:*:*:*:*","matchCriteriaId":"236D459B-ED50-4A2F-B463-D2F9DD1C7E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.28.2:*:*:*:*:*:*:*","matchCriteriaId":"E9EEB00A-68B0-4CDE-B625-AB83B1D6D2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.8.32.0:*:*:*:lts:*:*:*","matchCriteriaId":"72195459-404F-423E-A78C-DE2A728AFDA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F53B8453-F35A-49BE-8129-774BADF71BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"CCB0C07E-DA2F-4169-848D-C3315CDC1CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"410C43E6-5912-4C22-A592-7CF94402EEB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D50A355E-1B55-4DD2-8100-EB81AA6FC40E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9ADF4230-EFEB-45EC-9C96-0262B4A3E459"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5234531C-F69A-4B94-A480-147734206C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.0.2:*:*:*:*:*:*:*","matchCriteriaId":"321C1066-6800-4488-A7C4-BE91FF738453"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A9B51588-50A2-40B2-A007-06F57D38C7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CDE2B00C-6AC0-4166-8A25-EFC42CE7F737"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9FD404B4-2B0A-4D7A-8CF6-E2C6B4BACBB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"617FC4AF-D152-4EE1-828D-C2A6AD0DFD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3A3FE6DC-17FD-4CEE-BDFB-9D4685640381"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8CEEB6C2-0A6D-4434-8446-CB8605CD3B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1548C574-CD51-49F6-91B1-B06C504000E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.4.0:rc4:*:*:*:*:*:*","matchCriteriaId":"1453BB31-D674-4A05-AB2A-2502D127C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"868865A1-E074-4DB0-A119-D24C5C53FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1794440C-7068-4673-9142-6221B8A39E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C5CF286B-3377-4AE9-A7B9-8535641D639A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.7.0:*:*:*:*:*:*:*","matchCriteriaId":"50EC8D9D-3483-4080-8000-496343BC8BFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6695F632-6AC4-400F-B513-280304ABC1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A3423C40-240A-4237-8B0F-A4B4ED421C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.0:-:*:*:*:*:*:*","matchCriteriaId":"03298D9F-CFB8-48F9-BD0C-8A0BEB0760C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"87FCBE6A-C1CD-48EF-A435-4CEADD46C917"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"42E0E639-70A2-41EE-9B34-A9223D1958AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.0:rc3:*:*:*:*:*:*","matchCriteriaId":"32E84D64-0CB8-46BF-BD3F-8CA2E0CE4C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A70420A8-8571-4528-98E1-72BE00270C6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A276363F-F897-4E6D-9D55-5F5AA73DEE26"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"38230656-6242-4D24-AA67-F42A6FA2FC7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.9.0:rc2:*:*:*:*:*:*","matchCriteriaId":"20ED9FC3-5E56-4AE7-903F-267CAE7F2CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.9.0:rc3:*:*:*:*:*:*","matchCriteriaId":"84F88075-9935-45BF-88B7-21ACE8AAB314"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB16D9D6-A2F6-4C4B-B364-1B63B1FFB5F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"283793E4-0AE8-48D9-ABCF-70E44FE55C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A0F79D5F-EB28-417A-86DF-053D6EDBA161"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.10.1:rc1:*:*:*:*:*:*","matchCriteriaId":"4A036F91-70E0-4E97-9896-EEE97BE3C20E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.11.0:*:*:*:*:*:*:*","matchCriteriaId":"C4EABFC3-24FA-4441-9F2B-650D90AE5CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.11.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3DA61A22-3DD0-46A3-8C13-F25F4F03FD35"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.12.0:*:*:*:*:*:*:*","matchCriteriaId":"2026FD07-103C-4691-AFA4-88C490382F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.12.0:rc1:*:*:*:*:*:*","matchCriteriaId":"791700CD-E007-489E-9BC6-37025CAA8144"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.13.0:*:*:*:*:*:*:*","matchCriteriaId":"4061B4C7-8315-450C-866A-C4F3A6BCB1A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.13.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C6EA7154-7F08-4E43-9270-E617632230AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.14.0:*:*:*:lts:*:*:*","matchCriteriaId":"4149F36C-D455-415F-93D7-F92EEE41419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.14.0:rc1:*:*:*:*:*:*","matchCriteriaId":"2DC51129-8F38-4505-90FB-4FFDED45BABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.14.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4CA571E0-B513-47AA-95BE-EB4DD2AA91E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.15.0:*:*:*:*:*:*:*","matchCriteriaId":"4A62DFFE-637B-4911-B3B4-6DA4053CBDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.15.0:rc1:*:*:*:*:*:*","matchCriteriaId":"96C7950F-41D1-46B5-BA62-E8450CB81244"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.15.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C9A32ECC-E208-4834-8EF7-FEF7A3495041"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.16.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7C5D35-A6AE-4A2E-98C5-CB58FF22AF08"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.16.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AA3E0D41-2E6E-4294-8E56-1A738A7F9AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.17.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D16109B8-4CDF-46FC-9AD9-A158E532791B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.18.0:*:*:*:*:*:*:*","matchCriteriaId":"FD4D1A5A-99A3-4D23-B40C-BBE11EA5B325"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.18.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F5EE428-98FF-42BC-9F61-311327B8F610"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.19.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CBA2FD08-D761-410F-9804-A76F0DD77349"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.20.0:rc1:*:*:*:*:*:*","matchCriteriaId":"74B34C21-D90B-4E32-BBA6-7773DB663F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.21.0:*:*:*:*:*:*:*","matchCriteriaId":"1D3AF185-7AC6-491E-9BE0-8ECD163A3E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.21.0:rc1:*:*:*:*:*:*","matchCriteriaId":"90996D49-5731-4F7D-9DBE-D0599A5D85A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.21.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D3C91C8D-707D-443D-985F-FA3EDB181208"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:11.21.0:rc3:*:*:*:*:*:*","matchCriteriaId":"25E7F7F5-E85A-4720-B5C9-2B776B04D904"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B446105E-6C8E-495A-BF83-A33CB33485A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.0:-:*:*:*:*:*:*","matchCriteriaId":"F3DE062D-4E87-4691-A664-D9E7C02036EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B4D6D24-A718-4962-AD4E-F19AFB03BFF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"BE2F0D0D-761C-4338-93F0-506E94E57000"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"3D38DFCA-E357-4A28-8F03-FDADF40A5185"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3CD4A85-26FB-4AE5-9CB7-4DF38DF32482"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F42C9442-9EBC-4CA5-AB1C-BA0662C27BDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"71762B58-A08B-405B-9596-6D15CF4A95D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"EA48C05A-E898-42EE-A699-94BBD66E5E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"EDCB78F8-AAC8-44B1-BDF4-C73BC8951EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5D92FFF6-E7B2-4210-A652-79AC6B74002C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DB5E92FB-9CF8-461E-A665-3407D265DF17"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"536F6C10-3165-40F7-931A-23765AB87555"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8DD16DF-C47C-41CF-8CDE-C365103262A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.3.2:*:*:*:*:*:*:*","matchCriteriaId":"43C06F98-62F4-4008-A463-2791BEDF6DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"133288EC-8A78-4C9D-BF94-9900CD3D2260"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B2E54998-B257-478E-9E52-2BB4F4CD6429"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5FD4498A-72BD-40EB-A332-DE10C87C1015"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"71961599-009C-42F4-AA26-9B16C39F3CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B98A2EA6-DCC6-4F8B-B132-6692AED16CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"672EDC0E-D70A-4BB0-B7FE-5D422C737862"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.0:*:*:*:lts:*:*:*","matchCriteriaId":"C779E0D4-0375-4BE8-9667-A32C68B66D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.0:*:*:*:standard:*:*:*","matchCriteriaId":"6DEF3D58-73E0-402A-A15F-05CA72B5B288"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8E9E50F8-0123-4C9E-88E1-5DCE08770B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F7C605A3-8517-4215-9AD3-980D587B22DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.7.1:*:*:*:*:*:*:*","matchCriteriaId":"866815AE-D1FE-460C-A3BC-70C251655C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.0:*:*:*:*:*:*:*","matchCriteriaId":"44746060-BC6F-4E6D-BA81-61623B2D27FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"47548ADE-255A-4355-BD06-1FEF134C1620"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ABCFC4D9-8054-4F42-BE7E-5092F6648F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.1:*:*:*:*:*:*:*","matchCriteriaId":"84A7DBB5-999C-4AE8-BC5D-F0C5F77957DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:12.8.2:*:*:*:*:*:*:*","matchCriteriaId":"EB1EA7C5-CE37-4A7E-AF81-636228F3BA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:*","matchCriteriaId":"E7D1238A-A8D2-485E-81FD-46038A883EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FB2C4E1E-6B90-4DCC-BC09-7D19FBA65C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*","matchCriteriaId":"58C0FF1B-6188-4181-A139-1806328762BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"890EBB8C-989B-4344-AC03-62B399076008"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"BD4AAECB-A2BC-45BA-BC63-E51C1FE6C334"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*","matchCriteriaId":"136D6508-660E-410D-829A-7DD452BF8819"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AEC2B3AA-EB24-4259-BED1-5DBC102FE9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CEA9DA4A-A3E6-4C46-9471-CCBFA71083AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:*","matchCriteriaId":"599833A2-CBE9-479B-8A6E-AF79C5EED1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B55719B3-7325-47E1-8D16-3F34B1F44385"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B870B3B7-E8DC-45A2-8FA4-657D005D00E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C91E9A3B-54EB-4819-94DD-30F7D0C90047"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"47189DF9-8E57-4BA6-9F52-B7A8229AE02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.7.0:*:*:*:*:*:*:*","matchCriteriaId":"905722CB-4B6C-4849-88CD-22E972432E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"84AAFA3C-3CCD-4615-9725-169C303CF18F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C92E0801-9E8F-4CF2-A4A0-48BCF550F2D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:13.7.0:rc3:*:*:*:*:*:*","matchCriteriaId":"10823FD4-D618-4050-91D7-CBDE69BC570D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:1.8.28:-:*:*:*:*:*:*","matchCriteriaId":"96463965-1F99-42DB-9745-5B4E49A48F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:*","matchCriteriaId":"322694EF-B086-4BE7-A9F0-41D3A9C245FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:lts:*:*:*","matchCriteriaId":"6AD7C9B3-D029-4E05-8E80-3ADA904FAC1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc2:*:*:*:*:*:*","matchCriteriaId":"770CCEEA-B121-454B-BD36-3FC1B262998A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert10:*:*:lts:*:*:*","matchCriteriaId":"BB47EA31-CF9D-4752-804B-7804151EC87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert11:*:*:lts:*:*:*","matchCriteriaId":"A1C9B744-1745-4E9D-A2DE-4659295508D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:*","matchCriteriaId":"013B1940-C45D-4FE2-8B49-D92B8F1A9048"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:lts:*:*:*","matchCriteriaId":"CE71221B-4D55-4643-B6D1-307B2CF41F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:*","matchCriteriaId":"A98B11B5-B8E2-4903-B4F7-3AC23751AE8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:lts:*:*:*","matchCriteriaId":"88124275-9BEB-4D53-9E4D-1AC8C52F2D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:lts:*:*:*","matchCriteriaId":"4F3CEFEF-72B6-4B58-81FE-01BCEEFB3013"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:lts:*:*:*","matchCriteriaId":"AA637187-0EAE-4756-AD72-A0B2FABCA070"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:lts:*:*:*","matchCriteriaId":"6DAF6784-0B31-4104-9D85-473D5AFAB785"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:lts:*:*:*","matchCriteriaId":"77B06B83-D62C-4A0E-BE94-83C9A02CE55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert8:*:*:lts:*:*:*","matchCriteriaId":"CAD17809-CBB1-4E41-99C9-20FE56853563"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6:cert9:*:*:lts:*:*:*","matchCriteriaId":"066453F2-A77F-4E82-8C91-AC17FAA21A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6.0:*:*:*:lts:*:*:*","matchCriteriaId":"D6EE9895-FB94-451D-8701-8C0DD8F5BED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6.0:-:*:*:*:*:*:*","matchCriteriaId":"CCDDF5C2-9B45-4811-90F6-984EF4B220CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"56849E34-B192-46A8-A517-C7C184A901B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:11.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4610D544-156F-4E9A-BC46-9E0FF8D5D641"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1:*:*:*:*:*:*:*","matchCriteriaId":"CA74CB86-72C3-4913-8EB6-3BBA1D3BC65D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1:cert1:*:*:*:*:*:*","matchCriteriaId":"0C6CF412-290C-4524-9AFE-D58A85183864"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1:cert2:*:*:*:*:*:*","matchCriteriaId":"BA3211EE-E305-4247-AA2E-910E48CBCDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9F68ED1E-8D2B-4AEE-B5DE-FD50338BA82D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"EA9F296A-4932-4EA4-8B38-80856A9D6374"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:certified_asterisk:13.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B40673A6-2980-440A-B78E-D5C7095E3FA6"}]}]}],"references":[{"url":"http://downloads.asterisk.org/pub/security/AST-2016-002.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177409.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177422.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3700","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/82651","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034930","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://downloads.asterisk.org/pub/security/AST-2016-002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177409.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177422.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1157","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-02-23T05:59:00.247","lastModified":"2026-06-17T00:41:23.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in log_chat.cgi in Script* Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en log_chat.cgi en Script* Log-Chat en versiones anteriores a 2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:log-chat_project:log-chat:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9587C9DD-C7E3-4D06-A981-D575BC870EDB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN93535632/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000031","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://r.o0o0.jp/sc/log-chat/","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN93535632/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://r.o0o0.jp/sc/log-chat/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5174","sourceIdentifier":"secalert@redhat.com","published":"2016-02-25T01:59:00.120","lastModified":"2026-06-17T00:28:36.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call, as demonstrated by the $CATALINA_BASE/webapps directory."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en RequestUtil.java en Apache Tomcat 6.x en versiones anteriores a 6.0.45, 7.x en versiones anteriores a 7.0.65 y 8.x en versiones anteriores a 8.0.27 permite a usuarios remotos autenticados eludir las restricciones de SecurityManager destinadas y listar un directorio padre a través de un /.. (barra punto punto) en un nombre de ruta utilizado por una aplicación web en una llamada getResource, getResourceAsStream o getResourcePaths, según lo demostrado por el directorio $CATALINA_BASE/webapps."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:alpha:*:*:*:*:*:*","matchCriteriaId":"0A354C34-A3FE-4B8A-9985-8874A0634BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"CFE300CC-FD4A-444E-8506-E5E269D0A0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"F50A3EC9-516E-48A7-839B-A73F491B5B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"8C28F09D-5CAA-4CA7-A2B5-3B2820F5F409"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"FAC2FC75-97D2-4EA1-A1A0-F592A6D7C1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*","matchCriteriaId":"BD8802B2-57E0-4AA6-BC8E-00DE60468569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.20:*:*:*:*:*:*:*","matchCriteriaId":"1F4C9BCF-9C73-4991-B02F-E08C5DA06EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.24:*:*:*:*:*:*:*","matchCriteriaId":"2823789C-2CB6-4300-94DB-BDBE83ABA8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.26:*:*:*:*:*:*:*","matchCriteriaId":"C5416C76-46ED-4CB1-A7F8-F24EA16DE7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.28:*:*:*:*:*:*:*","matchCriteriaId":"31B3593F-CEDF-423C-90F8-F88EED87DC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.29:*:*:*:*:*:*:*","matchCriteriaId":"AE7862B2-E1FA-4E16-92CD-8918AB461D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.30:*:*:*:*:*:*:*","matchCriteriaId":"A9E03BE3-60CC-4415-B993-D0BB00F87A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.32:*:*:*:*:*:*:*","matchCriteriaId":"BFD64FE7-ABAF-49F3-B8D0-91C37C822F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.33:*:*:*:*:*:*:*","matchCriteriaId":"48E5E8C3-21AD-4230-B945-AB7DE66307B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.35:*:*:*:*:*:*:*","matchCriteriaId":"4945C8C1-C71B-448B-9075-07C6C92599CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.36:*:*:*:*:*:*:*","matchCriteriaId":"ED4730B0-2E09-408B-AFD4-FE00F73700FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B8DE8A8A-7643-4292-BCC1-758AE0940207"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.39:*:*:*:*:*:*:*","matchCriteriaId":"E9B54FCD-CF7C-47E2-8513-40419E47AF49"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.41:*:*:*:*:*:*:*","matchCriteriaId":"D87EFB6D-B626-469F-907C-40C771A55833"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.43:*:*:*:*:*:*:*","matchCriteriaId":"6330B97B-8FC5-4D7E-A960-5D94EDD0C378"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.44:*:*:*:*:*:*:*","matchCriteriaId":"2A0B2FA4-772E-4B23-8B3F-CC86515E4226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"33E9607B-4D28-460D-896B-E4B7FA22441E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"81A31CA0-A209-4C49-AA06-C38E165E5B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"0AA563BF-A67A-477D-956A-167ABEF885C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"6F1B937B-57E0-4E88-9E39-39012A924525"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8980E61E-27BE-4858-82B3-C0E8128AF521"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A9731BAA-4C6C-4259-B786-F577D8A90FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1F74A421-D019-4248-84B8-C70D4D9A8A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*","matchCriteriaId":"2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*","matchCriteriaId":"305688F2-50A6-41FB-8614-BC589DB9A789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*","matchCriteriaId":"25966344-15D5-4101-9346-B06BFD2DFFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*","matchCriteriaId":"0D4F710E-06EA-48F4-AC6A-6F143950F015"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2C4936C2-0B2D-4C44-98C3-443090965F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*","matchCriteriaId":"48453405-2319-4327-9F4C-6F70B49452C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*","matchCriteriaId":"49DD9544-6424-41A6-AEC0-EC19B8A10E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E4670E65-2E11-49A4-B661-57C2F60D411F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"31002A23-4788-4BC7-AE11-A3C2AA31716D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*","matchCriteriaId":"7144EDDF-8265-4642-8EEB-ED52527E0A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*","matchCriteriaId":"DF06B5C1-B9DD-4673-A101-56E1E593ACDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*","matchCriteriaId":"7D731065-626B-4425-8E49-F708DD457824"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*","matchCriteriaId":"B3D850EA-E537-42C8-93B9-96E15CB26747"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*","matchCriteriaId":"E037DA05-2BEF-4F64-B8BB-307247B6A05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D395D95B-1F4A-420E-A0F6-609360AF7B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*","matchCriteriaId":"9BD221BA-0AB6-4972-8AD9-5D37AC07762F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*","matchCriteriaId":"E55B6565-96CB-4F6A-9A80-C3FB82F30546"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*","matchCriteriaId":"D3300AFE-49A4-4904-B9A0-5679F09FA01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*","matchCriteriaId":"7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*","matchCriteriaId":"B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*","matchCriteriaId":"2C6109D1-BC36-40C5-A02A-7AEBC949BAC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*","matchCriteriaId":"DA8A7333-B4C3-4876-AE01-62F2FD315504"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*","matchCriteriaId":"92993E23-D805-407B-8B87-11CEEE8B212F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*","matchCriteriaId":"6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*","matchCriteriaId":"C947E549-2459-4AFB-84A7-36BDA30B5F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*","matchCriteriaId":"5D55DF79-F9BE-4907-A4D8-96C4B11189ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*","matchCriteriaId":"14AB5787-82D7-4F78-BE93-4556AB7A7D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*","matchCriteriaId":"F8E9453E-BC9B-4F77-85FA-BA15AC55C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*","matchCriteriaId":"A7EF0518-73F9-47DB-8946-A8334936BEFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*","matchCriteriaId":"95AA8778-7833-4572-A71B-5FD89938CE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*","matchCriteriaId":"242E47CE-EF69-4F8F-AB40-5AF2811674CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*","matchCriteriaId":"CDA1555C-E55A-4E14-B786-BFEE3F09220B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*","matchCriteriaId":"F8075E9A-DA7F-4A0B-8B4D-0CD951369111"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*","matchCriteriaId":"335A5320-6086-4B45-9903-82F6F92A584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"46B33408-C2E2-4E7C-9334-6AB98F13468C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*","matchCriteriaId":"9F036676-9EFB-4A92-828E-A38905D594E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"4752862B-7D26-4285-B8A0-CF082C758353"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*","matchCriteriaId":"58EA7199-3373-4F97-9907-3A479A02155E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F963D737-2E95-4D7C-92C7-DACF3F36D1E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"2BBBC5EA-012C-4C5D-A61B-BAF134B300DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A358FDF-C249-4D7A-9445-8B9E7D9D40AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"701424A2-BB06-44B5-B468-7164E4F95529"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1BA6388C-5B6E-4651-8AE3-EBCCF61C27E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8F9A5B7E-33A9-4651-9BE1-371A0064B661"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*","matchCriteriaId":"F99252E8-A59C-48E1-B251-718D7FB3E399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*","matchCriteriaId":"4E0DDEF6-A8EE-46C4-A046-A1F26E7C4E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*","matchCriteriaId":"14B38892-9C00-4510-B7BA-F2A8F2CACCAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*","matchCriteriaId":"7409B064-D43E-489E-AEC6-0A767FB21737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*","matchCriteriaId":"F019268F-80C4-48FE-8164-E9DA0A3BAFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*","matchCriteriaId":"1EFBD214-FCFE-4F04-A903-66EFDA764B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*","matchCriteriaId":"425D86B3-6BB9-410D-8125-F7CF87290AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*","matchCriteriaId":"3EE3BB0D-1002-41E4-9BE8-875D97330057"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*","matchCriteriaId":"6622472B-8644-4D45-A54B-A215C3D64B83"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=145974991225029&w=2","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/135883/Apache-Tomcat-Limited-Directory-Traversal.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1435.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2045.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2599.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/bugtraq/2016/Feb/149","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1696281","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1696284","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1700897","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1700898","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1700900","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-7.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-8.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3530","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3552","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3609","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83329","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035070","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3024-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1432","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1433","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1434","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa118","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r0b24f2c7507f702348e2c2d64e8a5de72bad6173658e8d8e45322ac2%40%3Cusers.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r15695e6203b026c9e9070ca9fa95fb17dd4cd88e5342a7dc5e1e7b85%40%3Cusers.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r1c62634b7426bee5f553307063457b99c84af73b078ede4f2592b34e%40%3Cusers.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r409efdf706c2077ae5c37018a87da725a3ca89570a9530342cdc53e4%40%3Cusers.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rd4863c79bf729aabb95571fd845a9ea4ee3ae3fcee48f35aba007350%40%3Cusers.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201705-09","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20180531-0001/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=145974991225029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/135883/Apache-Tomcat-Limited-Directory-Traversal.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1435.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2599.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/Feb/149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1696281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1696284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1700897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1700898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1700900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-7.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-8.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3024-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0b24f2c7507f702348e2c2d64e8a5de72bad6173658e8d8e45322ac2%40%3Cusers.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r15695e6203b026c9e9070ca9fa95fb17dd4cd88e5342a7dc5e1e7b85%40%3Cusers.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r1c62634b7426bee5f553307063457b99c84af73b078ede4f2592b34e%40%3Cusers.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r409efdf706c2077ae5c37018a87da725a3ca89570a9530342cdc53e4%40%3Cusers.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd4863c79bf729aabb95571fd845a9ea4ee3ae3fcee48f35aba007350%40%3Cusers.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201705-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180531-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5345","sourceIdentifier":"secalert@redhat.com","published":"2016-02-25T01:59:01.137","lastModified":"2026-06-17T00:28:58.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character."},{"lang":"es","value":"El componente Mapper en Apache Tomcat 6.x en versiones anteriores a 6.0.45, 7.x en versiones anteriores a 7.0.68, 8.x en versiones anteriores a 8.0.30, y 9.x en versiones anteriores a 9.0.0.M2 procesa redirecciones antes de considerar las restricciones y Filtros de seguridad, lo que permite a atacantes remotos determinar la existencia de un directorio a través de una URL que carece de un carácter / (barra) final."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:alpha:*:*:*:*:*:*","matchCriteriaId":"0A354C34-A3FE-4B8A-9985-8874A0634BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"CFE300CC-FD4A-444E-8506-E5E269D0A0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"F50A3EC9-516E-48A7-839B-A73F491B5B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"8C28F09D-5CAA-4CA7-A2B5-3B2820F5F409"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"FAC2FC75-97D2-4EA1-A1A0-F592A6D7C1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*","matchCriteriaId":"BD8802B2-57E0-4AA6-BC8E-00DE60468569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.20:*:*:*:*:*:*:*","matchCriteriaId":"1F4C9BCF-9C73-4991-B02F-E08C5DA06EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.24:*:*:*:*:*:*:*","matchCriteriaId":"2823789C-2CB6-4300-94DB-BDBE83ABA8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.26:*:*:*:*:*:*:*","matchCriteriaId":"C5416C76-46ED-4CB1-A7F8-F24EA16DE7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.28:*:*:*:*:*:*:*","matchCriteriaId":"31B3593F-CEDF-423C-90F8-F88EED87DC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.29:*:*:*:*:*:*:*","matchCriteriaId":"AE7862B2-E1FA-4E16-92CD-8918AB461D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.30:*:*:*:*:*:*:*","matchCriteriaId":"A9E03BE3-60CC-4415-B993-D0BB00F87A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.32:*:*:*:*:*:*:*","matchCriteriaId":"BFD64FE7-ABAF-49F3-B8D0-91C37C822F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.33:*:*:*:*:*:*:*","matchCriteriaId":"48E5E8C3-21AD-4230-B945-AB7DE66307B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.35:*:*:*:*:*:*:*","matchCriteriaId":"4945C8C1-C71B-448B-9075-07C6C92599CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.36:*:*:*:*:*:*:*","matchCriteriaId":"ED4730B0-2E09-408B-AFD4-FE00F73700FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B8DE8A8A-7643-4292-BCC1-758AE0940207"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.39:*:*:*:*:*:*:*","matchCriteriaId":"E9B54FCD-CF7C-47E2-8513-40419E47AF49"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.41:*:*:*:*:*:*:*","matchCriteriaId":"D87EFB6D-B626-469F-907C-40C771A55833"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.43:*:*:*:*:*:*:*","matchCriteriaId":"6330B97B-8FC5-4D7E-A960-5D94EDD0C378"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.44:*:*:*:*:*:*:*","matchCriteriaId":"2A0B2FA4-772E-4B23-8B3F-CC86515E4226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"33E9607B-4D28-460D-896B-E4B7FA22441E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"81A31CA0-A209-4C49-AA06-C38E165E5B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"0AA563BF-A67A-477D-956A-167ABEF885C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"6F1B937B-57E0-4E88-9E39-39012A924525"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8980E61E-27BE-4858-82B3-C0E8128AF521"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A9731BAA-4C6C-4259-B786-F577D8A90FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1F74A421-D019-4248-84B8-C70D4D9A8A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*","matchCriteriaId":"2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*","matchCriteriaId":"305688F2-50A6-41FB-8614-BC589DB9A789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*","matchCriteriaId":"25966344-15D5-4101-9346-B06BFD2DFFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*","matchCriteriaId":"0D4F710E-06EA-48F4-AC6A-6F143950F015"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2C4936C2-0B2D-4C44-98C3-443090965F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*","matchCriteriaId":"48453405-2319-4327-9F4C-6F70B49452C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*","matchCriteriaId":"49DD9544-6424-41A6-AEC0-EC19B8A10E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E4670E65-2E11-49A4-B661-57C2F60D411F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"31002A23-4788-4BC7-AE11-A3C2AA31716D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*","matchCriteriaId":"7144EDDF-8265-4642-8EEB-ED52527E0A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*","matchCriteriaId":"DF06B5C1-B9DD-4673-A101-56E1E593ACDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*","matchCriteriaId":"7D731065-626B-4425-8E49-F708DD457824"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*","matchCriteriaId":"B3D850EA-E537-42C8-93B9-96E15CB26747"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*","matchCriteriaId":"E037DA05-2BEF-4F64-B8BB-307247B6A05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D395D95B-1F4A-420E-A0F6-609360AF7B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*","matchCriteriaId":"9BD221BA-0AB6-4972-8AD9-5D37AC07762F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*","matchCriteriaId":"E55B6565-96CB-4F6A-9A80-C3FB82F30546"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*","matchCriteriaId":"D3300AFE-49A4-4904-B9A0-5679F09FA01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*","matchCriteriaId":"7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*","matchCriteriaId":"B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*","matchCriteriaId":"2C6109D1-BC36-40C5-A02A-7AEBC949BAC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*","matchCriteriaId":"DA8A7333-B4C3-4876-AE01-62F2FD315504"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*","matchCriteriaId":"92993E23-D805-407B-8B87-11CEEE8B212F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*","matchCriteriaId":"6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*","matchCriteriaId":"C947E549-2459-4AFB-84A7-36BDA30B5F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*","matchCriteriaId":"5D55DF79-F9BE-4907-A4D8-96C4B11189ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*","matchCriteriaId":"14AB5787-82D7-4F78-BE93-4556AB7A7D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*","matchCriteriaId":"F8E9453E-BC9B-4F77-85FA-BA15AC55C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*","matchCriteriaId":"A7EF0518-73F9-47DB-8946-A8334936BEFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*","matchCriteriaId":"95AA8778-7833-4572-A71B-5FD89938CE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*","matchCriteriaId":"242E47CE-EF69-4F8F-AB40-5AF2811674CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*","matchCriteriaId":"CDA1555C-E55A-4E14-B786-BFEE3F09220B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*","matchCriteriaId":"F8075E9A-DA7F-4A0B-8B4D-0CD951369111"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*","matchCriteriaId":"335A5320-6086-4B45-9903-82F6F92A584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"46B33408-C2E2-4E7C-9334-6AB98F13468C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*","matchCriteriaId":"9F036676-9EFB-4A92-828E-A38905D594E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*","matchCriteriaId":"E9728EE8-6029-4DF3-942E-E4ACC09111A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"4752862B-7D26-4285-B8A0-CF082C758353"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*","matchCriteriaId":"58EA7199-3373-4F97-9907-3A479A02155E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F963D737-2E95-4D7C-92C7-DACF3F36D1E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"2BBBC5EA-012C-4C5D-A61B-BAF134B300DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A358FDF-C249-4D7A-9445-8B9E7D9D40AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AFF96F96-34DB-4EB3-BF59-11220673FA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"701424A2-BB06-44B5-B468-7164E4F95529"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1BA6388C-5B6E-4651-8AE3-EBCCF61C27E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8F9A5B7E-33A9-4651-9BE1-371A0064B661"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*","matchCriteriaId":"F99252E8-A59C-48E1-B251-718D7FB3E399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*","matchCriteriaId":"4E0DDEF6-A8EE-46C4-A046-A1F26E7C4E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*","matchCriteriaId":"14B38892-9C00-4510-B7BA-F2A8F2CACCAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*","matchCriteriaId":"7409B064-D43E-489E-AEC6-0A767FB21737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*","matchCriteriaId":"F019268F-80C4-48FE-8164-E9DA0A3BAFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*","matchCriteriaId":"1EFBD214-FCFE-4F04-A903-66EFDA764B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*","matchCriteriaId":"425D86B3-6BB9-410D-8125-F7CF87290AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*","matchCriteriaId":"3EE3BB0D-1002-41E4-9BE8-875D97330057"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*","matchCriteriaId":"6622472B-8644-4D45-A54B-A215C3D64B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.27:*:*:*:*:*:*:*","matchCriteriaId":"B338F95B-2924-435B-827F-E64420A93244"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.28:*:*:*:*:*:*:*","matchCriteriaId":"209D1349-7740-4DBE-80A5-E6343C62BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.29:*:*:*:*:*:*:*","matchCriteriaId":"09E77C24-C265-403D-A193-B3739713F6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*","matchCriteriaId":"9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=145974991225029&w=2","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/135892/Apache-Tomcat-Directory-Disclosure.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2045.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2599.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/bugtraq/2016/Feb/146","source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2016/Feb/122","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1715206","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1715207","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1715213","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1715216","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1716882","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1716894","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1717209","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1717212","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1717216","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-7.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-8.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-9.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3530","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3552","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3609","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com"},{"url":"http://www.qcsec.com/blog/CVE-2015-5345-apache-tomcat-vulnerability.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83328","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035071","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3024-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1087","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1088","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa118","source":"secalert@redhat.com"},{"url":"https://bz.apache.org/bugzilla/show_bug.cgi?id=58765","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10156","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201705-09","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20180531-0001/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=145974991225029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/135892/Apache-Tomcat-Directory-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2599.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/Feb/146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Feb/122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1715206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1715207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1715213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1715216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1716882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1716894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1717209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1717212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1717216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-7.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-8.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-9.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.qcsec.com/blog/CVE-2015-5345-apache-tomcat-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3024-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bz.apache.org/bugzilla/show_bug.cgi?id=58765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201705-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180531-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0706","sourceIdentifier":"secalert@redhat.com","published":"2016-02-25T01:59:04.340","lastModified":"2026-06-17T00:38:03.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application."},{"lang":"es","value":"Apache Tomcat 6.x en versiones anteriores a 6.0.45, 7.x en versiones anteriores a 7.0.68, 8.x en versiones anteriores a 8.0.31 y 9.x en versiones anteriores a 9.0.0.M2 no sitúa org.apache.catalina.manager.StatusManagerServlet en la lista org/apache/catalina/core/RestrictedServlets.properties, lo que permite a usuarios remotos autenticados eludir las restricciones de SecurityManager previstas y leer peticiones HTTP arbitrarias, y consecuentemente descubrir valores de ID de sesión, a través de una aplicación web manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:alpha:*:*:*:*:*:*","matchCriteriaId":"0A354C34-A3FE-4B8A-9985-8874A0634BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"CFE300CC-FD4A-444E-8506-E5E269D0A0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"F50A3EC9-516E-48A7-839B-A73F491B5B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"8C28F09D-5CAA-4CA7-A2B5-3B2820F5F409"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"FAC2FC75-97D2-4EA1-A1A0-F592A6D7C1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*","matchCriteriaId":"BD8802B2-57E0-4AA6-BC8E-00DE60468569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.20:*:*:*:*:*:*:*","matchCriteriaId":"1F4C9BCF-9C73-4991-B02F-E08C5DA06EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.24:*:*:*:*:*:*:*","matchCriteriaId":"2823789C-2CB6-4300-94DB-BDBE83ABA8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.26:*:*:*:*:*:*:*","matchCriteriaId":"C5416C76-46ED-4CB1-A7F8-F24EA16DE7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.28:*:*:*:*:*:*:*","matchCriteriaId":"31B3593F-CEDF-423C-90F8-F88EED87DC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.29:*:*:*:*:*:*:*","matchCriteriaId":"AE7862B2-E1FA-4E16-92CD-8918AB461D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.30:*:*:*:*:*:*:*","matchCriteriaId":"A9E03BE3-60CC-4415-B993-D0BB00F87A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.32:*:*:*:*:*:*:*","matchCriteriaId":"BFD64FE7-ABAF-49F3-B8D0-91C37C822F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.33:*:*:*:*:*:*:*","matchCriteriaId":"48E5E8C3-21AD-4230-B945-AB7DE66307B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.35:*:*:*:*:*:*:*","matchCriteriaId":"4945C8C1-C71B-448B-9075-07C6C92599CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.36:*:*:*:*:*:*:*","matchCriteriaId":"ED4730B0-2E09-408B-AFD4-FE00F73700FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B8DE8A8A-7643-4292-BCC1-758AE0940207"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.39:*:*:*:*:*:*:*","matchCriteriaId":"E9B54FCD-CF7C-47E2-8513-40419E47AF49"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.41:*:*:*:*:*:*:*","matchCriteriaId":"D87EFB6D-B626-469F-907C-40C771A55833"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.43:*:*:*:*:*:*:*","matchCriteriaId":"6330B97B-8FC5-4D7E-A960-5D94EDD0C378"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.44:*:*:*:*:*:*:*","matchCriteriaId":"2A0B2FA4-772E-4B23-8B3F-CC86515E4226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"33E9607B-4D28-460D-896B-E4B7FA22441E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"81A31CA0-A209-4C49-AA06-C38E165E5B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"0AA563BF-A67A-477D-956A-167ABEF885C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"6F1B937B-57E0-4E88-9E39-39012A924525"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8980E61E-27BE-4858-82B3-C0E8128AF521"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A9731BAA-4C6C-4259-B786-F577D8A90FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1F74A421-D019-4248-84B8-C70D4D9A8A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*","matchCriteriaId":"2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*","matchCriteriaId":"305688F2-50A6-41FB-8614-BC589DB9A789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*","matchCriteriaId":"25966344-15D5-4101-9346-B06BFD2DFFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*","matchCriteriaId":"0D4F710E-06EA-48F4-AC6A-6F143950F015"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2C4936C2-0B2D-4C44-98C3-443090965F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*","matchCriteriaId":"48453405-2319-4327-9F4C-6F70B49452C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*","matchCriteriaId":"49DD9544-6424-41A6-AEC0-EC19B8A10E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E4670E65-2E11-49A4-B661-57C2F60D411F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"31002A23-4788-4BC7-AE11-A3C2AA31716D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*","matchCriteriaId":"7144EDDF-8265-4642-8EEB-ED52527E0A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*","matchCriteriaId":"DF06B5C1-B9DD-4673-A101-56E1E593ACDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*","matchCriteriaId":"7D731065-626B-4425-8E49-F708DD457824"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*","matchCriteriaId":"B3D850EA-E537-42C8-93B9-96E15CB26747"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*","matchCriteriaId":"E037DA05-2BEF-4F64-B8BB-307247B6A05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D395D95B-1F4A-420E-A0F6-609360AF7B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*","matchCriteriaId":"9BD221BA-0AB6-4972-8AD9-5D37AC07762F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*","matchCriteriaId":"E55B6565-96CB-4F6A-9A80-C3FB82F30546"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*","matchCriteriaId":"D3300AFE-49A4-4904-B9A0-5679F09FA01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*","matchCriteriaId":"7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*","matchCriteriaId":"B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*","matchCriteriaId":"2C6109D1-BC36-40C5-A02A-7AEBC949BAC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*","matchCriteriaId":"DA8A7333-B4C3-4876-AE01-62F2FD315504"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*","matchCriteriaId":"92993E23-D805-407B-8B87-11CEEE8B212F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*","matchCriteriaId":"6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*","matchCriteriaId":"C947E549-2459-4AFB-84A7-36BDA30B5F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*","matchCriteriaId":"5D55DF79-F9BE-4907-A4D8-96C4B11189ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*","matchCriteriaId":"14AB5787-82D7-4F78-BE93-4556AB7A7D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*","matchCriteriaId":"F8E9453E-BC9B-4F77-85FA-BA15AC55C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*","matchCriteriaId":"A7EF0518-73F9-47DB-8946-A8334936BEFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*","matchCriteriaId":"95AA8778-7833-4572-A71B-5FD89938CE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*","matchCriteriaId":"242E47CE-EF69-4F8F-AB40-5AF2811674CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*","matchCriteriaId":"CDA1555C-E55A-4E14-B786-BFEE3F09220B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*","matchCriteriaId":"F8075E9A-DA7F-4A0B-8B4D-0CD951369111"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*","matchCriteriaId":"335A5320-6086-4B45-9903-82F6F92A584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"46B33408-C2E2-4E7C-9334-6AB98F13468C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*","matchCriteriaId":"9F036676-9EFB-4A92-828E-A38905D594E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*","matchCriteriaId":"E9728EE8-6029-4DF3-942E-E4ACC09111A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*","matchCriteriaId":"34E7DAC8-8419-45D1-A28F-14CF2FE1B6EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"4752862B-7D26-4285-B8A0-CF082C758353"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*","matchCriteriaId":"58EA7199-3373-4F97-9907-3A479A02155E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F963D737-2E95-4D7C-92C7-DACF3F36D1E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"2BBBC5EA-012C-4C5D-A61B-BAF134B300DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A358FDF-C249-4D7A-9445-8B9E7D9D40AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AFF96F96-34DB-4EB3-BF59-11220673FA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"701424A2-BB06-44B5-B468-7164E4F95529"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1BA6388C-5B6E-4651-8AE3-EBCCF61C27E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8F9A5B7E-33A9-4651-9BE1-371A0064B661"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*","matchCriteriaId":"F99252E8-A59C-48E1-B251-718D7FB3E399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*","matchCriteriaId":"4E0DDEF6-A8EE-46C4-A046-A1F26E7C4E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*","matchCriteriaId":"14B38892-9C00-4510-B7BA-F2A8F2CACCAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*","matchCriteriaId":"7409B064-D43E-489E-AEC6-0A767FB21737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*","matchCriteriaId":"F019268F-80C4-48FE-8164-E9DA0A3BAFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*","matchCriteriaId":"1EFBD214-FCFE-4F04-A903-66EFDA764B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*","matchCriteriaId":"425D86B3-6BB9-410D-8125-F7CF87290AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*","matchCriteriaId":"3EE3BB0D-1002-41E4-9BE8-875D97330057"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*","matchCriteriaId":"6622472B-8644-4D45-A54B-A215C3D64B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.27:*:*:*:*:*:*:*","matchCriteriaId":"B338F95B-2924-435B-827F-E64420A93244"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.28:*:*:*:*:*:*:*","matchCriteriaId":"209D1349-7740-4DBE-80A5-E6343C62BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.29:*:*:*:*:*:*:*","matchCriteriaId":"09E77C24-C265-403D-A193-B3739713F6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.30:*:*:*:*:*:*:*","matchCriteriaId":"28616FA3-9A98-4AAE-9F94-3E77A14156EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*","matchCriteriaId":"9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=145974991225029&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2045.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2599.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2807.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2808.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/bugtraq/2016/Feb/144","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1722799","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1722800","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1722801","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1722802","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-7.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-8.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-9.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3530","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3552","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3609","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83324","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035069","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3024-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1087","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1088","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa118","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201705-09","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20180531-0001/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=145974991225029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2599.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2807.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2808.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/Feb/144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1722799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1722800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1722801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1722802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-7.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-8.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-9.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3024-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201705-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180531-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0763","sourceIdentifier":"secalert@redhat.com","published":"2016-02-25T01:59:06.280","lastModified":"2026-06-17T00:38:10.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context."},{"lang":"es","value":"El método setGlobalContext en org/apache/naming/factory/ResourceLinkFactory.java en Apache Tomcat 7.x en versiones anteriores a 7.0.68, 8.x en versiones anteriores a 8.0.31 y 9.x en versiones anteriores a 9.0.0.M3 no considera si los que llaman a ResourceLinkFactory.setGlobalContext están autorizados, lo que permite a usuarios remotos autenticados eludir las restricciones de SecurityManager previstas y leer o escribir a datos de aplicación arbitrarios, o provocar una denegación de servicio (interrupción de aplicación), a través de una aplicación web que establece un contexto global manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"33E9607B-4D28-460D-896B-E4B7FA22441E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"81A31CA0-A209-4C49-AA06-C38E165E5B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"0AA563BF-A67A-477D-956A-167ABEF885C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"6F1B937B-57E0-4E88-9E39-39012A924525"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8980E61E-27BE-4858-82B3-C0E8128AF521"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A9731BAA-4C6C-4259-B786-F577D8A90FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1F74A421-D019-4248-84B8-C70D4D9A8A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*","matchCriteriaId":"2BA27FF9-4C66-4E17-95C0-1CB2DAA6AFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*","matchCriteriaId":"305688F2-50A6-41FB-8614-BC589DB9A789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*","matchCriteriaId":"25966344-15D5-4101-9346-B06BFD2DFFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*","matchCriteriaId":"0D4F710E-06EA-48F4-AC6A-6F143950F015"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2C4936C2-0B2D-4C44-98C3-443090965F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*","matchCriteriaId":"48453405-2319-4327-9F4C-6F70B49452C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*","matchCriteriaId":"49DD9544-6424-41A6-AEC0-EC19B8A10E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E4670E65-2E11-49A4-B661-57C2F60D411F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"31002A23-4788-4BC7-AE11-A3C2AA31716D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*","matchCriteriaId":"7144EDDF-8265-4642-8EEB-ED52527E0A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*","matchCriteriaId":"DF06B5C1-B9DD-4673-A101-56E1E593ACDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*","matchCriteriaId":"7D731065-626B-4425-8E49-F708DD457824"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*","matchCriteriaId":"B3D850EA-E537-42C8-93B9-96E15CB26747"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*","matchCriteriaId":"E037DA05-2BEF-4F64-B8BB-307247B6A05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D395D95B-1F4A-420E-A0F6-609360AF7B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*","matchCriteriaId":"9BD221BA-0AB6-4972-8AD9-5D37AC07762F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*","matchCriteriaId":"E55B6565-96CB-4F6A-9A80-C3FB82F30546"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*","matchCriteriaId":"D3300AFE-49A4-4904-B9A0-5679F09FA01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*","matchCriteriaId":"7BD93669-1B30-4BF8-AD7D-F60DD8D63CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*","matchCriteriaId":"B8C8C97F-6C9D-4647-AB8A-ADAA5536DDE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*","matchCriteriaId":"2C6109D1-BC36-40C5-A02A-7AEBC949BAC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*","matchCriteriaId":"DA8A7333-B4C3-4876-AE01-62F2FD315504"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*","matchCriteriaId":"92993E23-D805-407B-8B87-11CEEE8B212F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*","matchCriteriaId":"6AA28D3A-3EE5-4F90-B8F5-4943F7607DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*","matchCriteriaId":"C947E549-2459-4AFB-84A7-36BDA30B5F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*","matchCriteriaId":"5D55DF79-F9BE-4907-A4D8-96C4B11189ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*","matchCriteriaId":"14AB5787-82D7-4F78-BE93-4556AB7A7D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*","matchCriteriaId":"F8E9453E-BC9B-4F77-85FA-BA15AC55C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*","matchCriteriaId":"A7EF0518-73F9-47DB-8946-A8334936BEFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*","matchCriteriaId":"95AA8778-7833-4572-A71B-5FD89938CE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*","matchCriteriaId":"242E47CE-EF69-4F8F-AB40-5AF2811674CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*","matchCriteriaId":"CDA1555C-E55A-4E14-B786-BFEE3F09220B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*","matchCriteriaId":"F8075E9A-DA7F-4A0B-8B4D-0CD951369111"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*","matchCriteriaId":"335A5320-6086-4B45-9903-82F6F92A584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"46B33408-C2E2-4E7C-9334-6AB98F13468C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*","matchCriteriaId":"9F036676-9EFB-4A92-828E-A38905D594E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*","matchCriteriaId":"E9728EE8-6029-4DF3-942E-E4ACC09111A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*","matchCriteriaId":"34E7DAC8-8419-45D1-A28F-14CF2FE1B6EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"4752862B-7D26-4285-B8A0-CF082C758353"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*","matchCriteriaId":"58EA7199-3373-4F97-9907-3A479A02155E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F963D737-2E95-4D7C-92C7-DACF3F36D1E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"2BBBC5EA-012C-4C5D-A61B-BAF134B300DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A358FDF-C249-4D7A-9445-8B9E7D9D40AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AFF96F96-34DB-4EB3-BF59-11220673FA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"701424A2-BB06-44B5-B468-7164E4F95529"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1BA6388C-5B6E-4651-8AE3-EBCCF61C27E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8F9A5B7E-33A9-4651-9BE1-371A0064B661"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*","matchCriteriaId":"F99252E8-A59C-48E1-B251-718D7FB3E399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*","matchCriteriaId":"4E0DDEF6-A8EE-46C4-A046-A1F26E7C4E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*","matchCriteriaId":"14B38892-9C00-4510-B7BA-F2A8F2CACCAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*","matchCriteriaId":"7409B064-D43E-489E-AEC6-0A767FB21737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*","matchCriteriaId":"F019268F-80C4-48FE-8164-E9DA0A3BAFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*","matchCriteriaId":"1EFBD214-FCFE-4F04-A903-66EFDA764B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*","matchCriteriaId":"425D86B3-6BB9-410D-8125-F7CF87290AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*","matchCriteriaId":"3EE3BB0D-1002-41E4-9BE8-875D97330057"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*","matchCriteriaId":"6622472B-8644-4D45-A54B-A215C3D64B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.27:*:*:*:*:*:*:*","matchCriteriaId":"B338F95B-2924-435B-827F-E64420A93244"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.28:*:*:*:*:*:*:*","matchCriteriaId":"209D1349-7740-4DBE-80A5-E6343C62BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.29:*:*:*:*:*:*:*","matchCriteriaId":"09E77C24-C265-403D-A193-B3739713F6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:8.0.30:*:*:*:*:*:*:*","matchCriteriaId":"28616FA3-9A98-4AAE-9F94-3E77A14156EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*","matchCriteriaId":"9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179356.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2599.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2807.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2808.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/bugtraq/2016/Feb/147","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1725926","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1725929","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1725931","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-7.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-8.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-9.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3530","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3552","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3609","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83326","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035069","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3024-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1087","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1088","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa118","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201705-09","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20180531-0001/","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179356.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2599.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2807.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2808.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/Feb/147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1725926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1725929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1725931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-7.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-8.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-9.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3024-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201705-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180531-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1342","sourceIdentifier":"psirt@cisco.com","published":"2016-02-26T05:59:01.193","lastModified":"2026-06-17T00:41:44.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The device login page in Cisco FirePOWER Management Center 5.3 through 6.0.0.1 allows remote attackers to obtain potentially sensitive software-version information by reading help files, aka Bug ID CSCuy36654."},{"lang":"es","value":"La página de inicio de sesión del dispositivo en Cisco FirePOWER Management Center 5.3 hasta la versión 6.0.0.1 permite a atacantes remotos obtener información potencialmente sensible de la versión de software mediante la lectura de los archivos de ayuda, también conocida como Bug ID CSCuy36654."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E12A7E1A-DD5F-4D24-B40C-9B6A4B06B7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B03AFE63-7D90-4092-9AB0-E05531EB0412"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C06AC416-34EE-4881-8CCE-7E5CDD185364"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"47D22E4A-D02B-48E7-86D9-2A05A07C8A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"8695C71C-53B3-49F6-9BDD-85A45762D9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3_base:*:*:*:*:*:*:*","matchCriteriaId":"D75E6197-710E-415F-8E5E-E1C3D48A31B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"27EA38C1-A34F-430A-92F7-1D299F78B449"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"38ACE806-3514-4D95-85DA-BAD7245011A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1898CADB-3B2B-4A3E-86DD-23A9E1A3E40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8D6B5ED0-0E42-45A2-BBBB-148C2BE5DD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0091657B-E242-4664-8F2F-85B8FCDF3EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"95D7DA95-E977-4D06-92C8-E4E8B464E1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"15B5C864-D82A-43BB-B193-CB9756A3B8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4_base:*:*:*:*:*:*:*","matchCriteriaId":"9B2E1AA9-8A80-489A-8A6F-E9034E7D2A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"036E4035-E8E2-4964-A6F4-7292E1804E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6FD6283-CC58-4864-AA24-F6C6DDE630FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:6.0_base:*:*:*:*:*:*:*","matchCriteriaId":"554F229F-A0F5-4CA9-9778-5585E01ADF6E"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160224-fmc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160224-fmc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2522","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:01.087","lastModified":"2026-06-17T00:44:13.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_ber_constrained_bitstring en epan/dissectors/packet-ber.c en el disector ASN.1 BER en Wireshark 2.0.x en versiones anteriores a 2.0.2 no verifica que cierta longitud sea distinta de cero, lo que permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-02.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11828","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9b2f3f7c5c9205381cb72e42b66e97d8ed3abf63","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9b2f3f7c5c9205381cb72e42b66e97d8ed3abf63","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2523","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:02.103","lastModified":"2026-06-17T00:44:13.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet."},{"lang":"es","value":"La función dnp3_al_process_object en epan/dissectors/packet-dnp.c en el disector DNP3 en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.0.x en versiones anteriores a 2.0.2 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3516","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-03.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11938","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=260afe11feb796d1fde992d8f8c133ebd950b573","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=260afe11feb796d1fde992d8f8c133ebd950b573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2524","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:03.073","lastModified":"2026-06-17T00:44:13.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-x509af.c en el disector X.509AF en Wireshark 2.0.x en versiones anteriores a 2.0.2 no maneja correctamente el ID de algoritmo, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-04.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12002","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5a8020a1b6bb73fcb8bb7eb7d53177bc8a9fc703","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5a8020a1b6bb73fcb8bb7eb7d53177bc8a9fc703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2525","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:04.043","lastModified":"2026-06-17T00:44:13.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-http2.c en el disector HTTP/2 en Wireshark 2.0.x en versiones anteriores a 2.0.2 no limita la cantidad de datos de cabecera, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de memoria o caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-05.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6a47ac7624993b99966e1d813245ffb419a2d201","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6a47ac7624993b99966e1d813245ffb419a2d201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2526","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:05.027","lastModified":"2026-06-17T00:44:13.663","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-hiqnet.c en el disector HiQnet en Wireshark 2.0.x en versiones anteriores a 2.0.2 no valida el tipo de datos, lo que permite a ataca remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=69a679cc3a9c087064b7e9521b9e9f3c40dd0b72","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=69a679cc3a9c087064b7e9521b9e9f3c40dd0b72","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2527","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:06.027","lastModified":"2026-06-17T00:44:13.780","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"wiretap/nettrace_3gpp_32_423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file."},{"lang":"es","value":"wiretap/nettrace_3gpp_32_423.c en el analizador de archivos 3GPP TS 32.423 Trace en Wireshark 2.0.x en versiones anteriores a 2.0.2 no asegura que un carácter '\\0' esté presente al final de ciertas cadenas, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de buffer basado en pila y caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-07.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11982","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=140aad08e081489b5cdb715cb5bca01db856fded","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=140aad08e081489b5cdb715cb5bca01db856fded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2528","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:06.950","lastModified":"2026-06-17T00:44:13.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_nhdr_extopt en epan/dissectors/packet-lbmc.c en el disector LBMC en Wireshark 2.0.x en versiones anteriores a 2.0.2 no valida los valores de longitud, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de buffer basado en pila y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-08.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11984","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c090e929269a78bf7a4cb3dc0d34565f4351312","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c090e929269a78bf7a4cb3dc0d34565f4351312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2529","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:07.963","lastModified":"2026-06-17T00:44:14.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the \"OBJECT PROTOCOL\" substring, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file."},{"lang":"es","value":"La función iseries_check_file_type en wiretap/iseries.c en el analizador de archivos iSeries en Wireshark 2.0.x en versiones anteriores a 2.0.2 no considera que una línea pueda carecer de la subcadena \"OBJECT PROTOCOL\", lo que permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-09.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11985","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=96d585a5e9baef21e1eea8505d78305b034dc80e","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=96d585a5e9baef21e1eea8505d78305b034dc80e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2530","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:08.917","lastModified":"2026-06-17T00:44:14.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet, a different vulnerability than CVE-2016-2531."},{"lang":"es","value":"La función dissct_rsl_ipaccess_msg en epan/dissectors/packet-rsl.c en el disector RSL en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.0.x en versiones anteriores a 2.0.2 no maneja correctamente el caso de un tipo TLV no reconocido, lo que permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un paquete manipulado, una vulnerabilidad diferente a CVE-2016-2531."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3516","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-10.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2930d3105c3ff2bfb1278b34ad10e2e71c3b8fb0","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2930d3105c3ff2bfb1278b34ad10e2e71c3b8fb0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2531","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:09.887","lastModified":"2026-06-17T00:44:14.303","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that triggers a 0xff tag value, a different vulnerability than CVE-2016-2530."},{"lang":"es","value":"Error por un paso en epan/dissectors/packet-rsl.c en el disector RSL en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.0.x en versiones anteriores a 2.0.2 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un paquete manipulado que desencadena un valor de etiqueta 0xff, una vulnerabilidad diferente a CVE-2016-2530."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3516","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-10.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=de65fd6b00d0b891930324b9549c93ccfe9cac30","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=de65fd6b00d0b891930324b9549c93ccfe9cac30","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2532","sourceIdentifier":"cve@mitre.org","published":"2016-02-28T04:59:10.887","lastModified":"2026-06-17T00:44:14.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet."},{"lang":"es","value":"La función dissect_llrp_parameters en epan/dissectors/packet-llrp.c en el disector LLRP en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.0.x en versiones anteriores a 2.0.2 no limita la profundidad de recursión, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de memoria o caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3516","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035118","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-11.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4a2cd6c79ecbf2cb21f985f01ce1c1e3030285ec","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4a2cd6c79ecbf2cb21f985f01ce1c1e3030285ec","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201604-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7457","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-29T11:59:02.060","lastModified":"2026-06-17T00:32:34.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Portal 8.0.x en versiones anteriores a 8.0.0.1 CF20 y 8.5.x en versiones anteriores a 8.5.0.0 CF09 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56432","source":"psirt@us.ibm.com"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Appropriate Vendor Advisory Link:  <a href=\"http://www-01.ibm.com/support/docview.wss?uid=swg21976358\">HERE</a>"}},{"cve":{"id":"CVE-2015-7491","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-29T11:59:02.997","lastModified":"2026-06-17T00:32:37.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Portal 8.0.x en versiones anteriores a 8.0.0.1 CF20 y 8.5.x en versiones anteriores a 8.5.0.0 CF09 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56433","source":"psirt@us.ibm.com"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Appropriate Vendor Advisory Link:  <a href=\"http://www-01.ibm.com/support/docview.wss?uid=swg21976358\">HERE</a>"}},{"cve":{"id":"CVE-2015-8524","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-29T11:59:03.997","lastModified":"2026-06-17T00:34:41.413","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en Process Portal en IBM Business Process Manager 8.5.0.x hasta la versión 8.5.0.2, 8.5.5.x hasta la versión 8.5.5.0 y 8.5.6.x hasta la versión 8.5.6.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*","matchCriteriaId":"9942841D-3E36-4159-AA5A-B534CB701B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*","matchCriteriaId":"8FE10C1D-2077-435A-8C14-2746A685681C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*","matchCriteriaId":"F6E31F25-6E71-4A5C-A940-0A935AF19035"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*","matchCriteriaId":"7A1FCB4E-DC46-4780-9017-1E8E789E785F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*","matchCriteriaId":"EE43BACD-D187-49C9-85D1-51E3F71D2274"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*","matchCriteriaId":"F646DABB-4C10-4308-8169-EC42C358CF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*","matchCriteriaId":"19B921EC-DE16-4A2B-BB29-B02A9B416470"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*","matchCriteriaId":"8578A0D7-3330-4F79-A934-4940673383A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*","matchCriteriaId":"CC44A2D4-F3D3-4D98-8FDC-8274E1725800"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*","matchCriteriaId":"00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*","matchCriteriaId":"80D84C06-5E93-4DA4-A333-D3CECB7D74E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*","matchCriteriaId":"DF7E8429-8750-4D3C-90E1-829031C7C306"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*","matchCriteriaId":"66A4A455-A75B-4363-AC6D-DAD50287EB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*","matchCriteriaId":"D06A925E-C739-48A9-B211-36DE458A7898"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*","matchCriteriaId":"12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*","matchCriteriaId":"66327978-D257-4ADE-8AEA-22547B0E4541"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*","matchCriteriaId":"ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*","matchCriteriaId":"E590C058-EC80-48FB-87C7-3F84E2BC07E1"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54981","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974472","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035126","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0225","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-29T11:59:07.953","lastModified":"2026-06-17T00:37:09.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.9 allows remote authenticated Commerce Accelerator administrators to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"IBM WebSphere Commerce 6.x hasta la versión 6.0.0.11 y 7.x hasta la versión 7.0.0.9 permite a administradores Commerce Accelerator remotos autenticados obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B59C1AD7-5E0A-4DB6-B1F9-BAE6C6BC52D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C21677D0-CF4E-4958-83A7-EF8C3AF4B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAF24659-1284-4762-925C-4879B56AC386"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"162FF755-CFF5-4AF2-B5D4-AEBA107DD93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4783F5D2-0709-4E5B-B6B7-DF7823E928CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8EB6E277-36B8-483E-8F9E-34D350BBB0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"40A7EA48-BCC0-41BD-975D-0C01B6066BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FA2AE738-BC94-4731-B6C3-54F808756ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FE23443C-6FB5-43AC-9822-1267AE61D14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"5952ADD8-4D62-401A-A5D3-1A63706D2F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8BA04184-B648-48CB-8664-D53AE07196BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F7D656-CFD1-4447-97CE-1D183CB41571"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:*:*:*:*:*:*:*","matchCriteriaId":"775206CE-A901-4653-BD17-DE1BFBA076FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"213C52C9-C5B5-4F26-BBB7-EE0824A995AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3CC937CD-1BE1-4827-9145-E2EA7F3AA792"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2A6189A9-E083-41D3-9D36-7B41D82EC197"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE6F4DC0-41E3-4F73-9F62-3D415F8949C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1ACFED34-9B1E-4950-9D03-756942EF32F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"202F791B-697B-4D9C-BF5D-84F7C657C790"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"012405FA-CE85-47B6-B368-2EAEBD06A15E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"05260EDC-BD28-4F89-809A-7852E294A540"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"66F86968-8BD4-42D0-A5C5-9685E3287D01"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54585","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21976623","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21976623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0243","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-29T11:59:08.983","lastModified":"2026-06-17T00:37:11.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0244."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Portal 6.1.0.x hasta la versión 6.1.0.6 CF27, 6.1.5.x hasta la versión 6.1.5.3 CF27, 7.x hasta la versión 7.0.0.2 CF29, 8.0.x en versiones anteriores a 8.0.0.1 CF20 y 8.5.x en versiones anteriores a 8.5.0.0 CF09 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2016-0244."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5DB29F4-59AB-439C-91C4-CDF677676C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6CA922-11EF-4315-A09A-B4A8937E4CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"526738D7-1AF8-4A8F-B833-BA0E35973A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"13D6BE9C-16FD-4FB4-8A87-56B42C246316"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5B50CEA-AFC4-4B45-9954-519965237FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0902AC0F-EA4D-4E65-A70A-15DE9B904B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D808F95D-C6BD-43EB-B16C-66449977BCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6ECEE98-B276-4ED6-AA5A-109EA57E9925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E4FF84B-A17F-464B-A718-67C44D2C69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI54088","source":"psirt@us.ibm.com"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"psirt@us.ibm.com"},{"url":"http://www.securityfocus.com/bid/100572","source":"psirt@us.ibm.com"},{"url":"http://www.securityfocus.com/bid/83488","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI54088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/100572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83488","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Appropriate Vendor Advisory Link:  <a href=\"http://www-01.ibm.com/support/docview.wss?uid=swg21976358\">HERE</a>"}},{"cve":{"id":"CVE-2016-0244","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-29T11:59:09.873","lastModified":"2026-06-17T00:37:11.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0243."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Portal 6.1.0.x hasta la versión 6.1.0.6 CF27, 6.1.5.x hasta la versión 6.1.5.3 CF27, 7.x hasta la versión 7.0.0.2 CF29, 8.0.x en versiones anteriores a 8.0.0.1 CF20 y 8.5.x en versiones anteriores a 8.5.0.0 CF09 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2016-0243."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5DB29F4-59AB-439C-91C4-CDF677676C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6CA922-11EF-4315-A09A-B4A8937E4CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"526738D7-1AF8-4A8F-B833-BA0E35973A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"13D6BE9C-16FD-4FB4-8A87-56B42C246316"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5B50CEA-AFC4-4B45-9954-519965237FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0902AC0F-EA4D-4E65-A70A-15DE9B904B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D808F95D-C6BD-43EB-B16C-66449977BCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6ECEE98-B276-4ED6-AA5A-109EA57E9925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E4FF84B-A17F-464B-A718-67C44D2C69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI55327","source":"psirt@us.ibm.com"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI55327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Appropriate Vendor Advisory Link:  <a href=\"http://www-01.ibm.com/support/docview.wss?uid=swg21976358\">HERE</a>"}},{"cve":{"id":"CVE-2016-0245","sourceIdentifier":"psirt@us.ibm.com","published":"2016-02-29T11:59:10.767","lastModified":"2026-06-17T00:37:11.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of service via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue."},{"lang":"es","value":"El intérprete XML en IBM WebSphere Portal 8.0.x en versiones anteriores a 8.0.0.1 CF20 y 8.5.x en versiones anteriores a 8.5.0.0 CF10 permite a usuarios remotos autenticados leer archivos arbitrarios o causar una denegación de servicio a través de una declaración de entidad externa en conjunción con una referencia de entidad, relacionado con un caso XML External Entity (XXE)."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56682","source":"psirt@us.ibm.com","tags":["Not Applicable"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21975358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/611.html\">CWE-611: Improper Restriction of XML External Entity Reference ('XXE')</a>"}},{"cve":{"id":"CVE-2016-1353","sourceIdentifier":"psirt@cisco.com","published":"2016-03-01T04:59:00.123","lastModified":"2026-06-17T00:41:46.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.3(0), 3.3(1), 4.0(0), and 4.1(0) does not properly initiate new TCP sessions when a previous session is in a FIN wait state, which allows remote attackers to cause a denial of service (TCP outage) via vectors involving FIN packets, aka Bug ID CSCuy45136."},{"lang":"es","value":"La implementación TCP en Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.3(0), 3.3(1), 4.0(0) y 4.1(0) no inicia adecuadmente nuevas sesiones TCP cuando una sesión anterior está en un estado de espera FIN, lo que permite a atacantes remotos provocar una denegación de servicio (interrupción TCP) a través de vectores que involucran paquetes FIN, también conocida como Bug ID CSCuy45136."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"13FCD744-1D54-425E-A384-6448C7CC32B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C50016BD-BF0B-48E0-B8FD-4EC5FD0A9C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ECD0794C-D06F-4262-9938-4B262D727AC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2B462122-BE6A-4F82-9A63-3BAEB4212A57"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160226-vds-is","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035123","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160226-vds-is","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2559","sourceIdentifier":"cve@mitre.org","published":"2016-03-01T11:59:00.190","lastModified":"2026-06-17T00:44:17.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query."},{"lang":"es","value":"Vulnerabilidad de XSS en la función format en libraries/sql-parser/src/Utils/Error.php en el intérprete SQL en phpMyAdmin 4.5.x en versiones anteriores a 4.5.5.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una petición manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F90283AD-A616-403C-BE69-BCB2FD58A2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"043B846F-4CDF-402A-B14A-B4949B1D403E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C7B52D3D-C5F0-4793-AFA3-C518400DB71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5B476503-1A1B-408B-9E66-1E4940090AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7123D6E6-3AE7-4413-AD6E-0D68D44C6F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"05A2EBE2-E55C-45DF-A74C-1B5F7E6EEC25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"909DFCAB-A44B-4EB8-B54D-066699AE760B"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178562.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178869.html","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/3a6a9a807d99371ee126635e1a505fc1fe0df32c","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-10/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178562.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178869.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/3a6a9a807d99371ee126635e1a505fc1fe0df32c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-10/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2560","sourceIdentifier":"cve@mitre.org","published":"2016-03-01T11:59:02.237","lastModified":"2026-06-17T00:44:17.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Host HTTP header, related to libraries/Config.class.php; (2) crafted JSON data, related to file_echo.php; (3) a crafted SQL query, related to js/functions.js; (4) the initial parameter to libraries/server_privileges.lib.php in the user accounts page; or (5) the it parameter to libraries/controllers/TableSearchController.class.php in the zoom search page."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en phpMyAdmin 4.0.x en versiones anteriores a 4.0.10.15, 4.4.x en versiones anteriores a 4.4.15.5 y 4.5.x en versiones anteriores a 4.5.5.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de (1) una cabecera Host HTTP manipulada, relacionada con libraries/Config.class.php; (2) datos JSON manipulados, relacionados con file_echo.php; (3) una petición SQL manipulada, relacionada con js/functions.js; (4) el parámetro inicial en libraries/server_privileges.lib.php en la página de cuentas de usuario; o (5) el parámetro it en libraries/controllers/TableSearchController.class.php en la página zoom search."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F06DC95-76B1-4E24-A55F-1358A25ED0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA76CB4-6167-446A-8D4F-6D5B38046334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8D28655-7F37-474D-A4E2-772AF24B94E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1FA1951E-BD85-42BF-BF7F-79A14D165914"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"58DD0910-DBBA-4858-B9B1-FA93D08323D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DC8D93A3-8997-4EB9-A411-74B296D1341F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0245AF2D-F856-4CAA-A830-36D43026D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C69E253E-157D-45BA-A977-079A49F74A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6325E2AE-BB86-4953-AA9E-0433C00B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3C54B828-8B23-4C62-907E-8EE7E757B721"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"02DD18C8-172B-41CD-87DD-58BDEC0D9418"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"10666E30-D98A-47A9-881A-B281066F0EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3993826B-CA66-4BC2-8E1B-06CF9230B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"14928F51-761E-4FCA-B13C-A11530C7FC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"DB761644-20F5-4E0D-B301-7809EAECA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"896439D0-6C98-44A6-8C9D-0D57D57782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"978B828C-1FCB-4386-B685-5BEE5A8A500C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"51A3261B-23BE-42D7-8A52-AE2E8C274A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"F0B7EA51-27EC-4884-8D60-FB9477D2B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"40F85FEC-427E-487D-997E-7EE359475876"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"2C825978-7E00-4C20-A806-0B968AA589AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14:*:*:*:*:*:*:*","matchCriteriaId":"C6D742A8-B9D0-4BC0-8E3E-E0FDCC1083FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*","matchCriteriaId":"4BED20D9-C571-4BC5-9A54-450A364C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F90283AD-A616-403C-BE69-BCB2FD58A2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"043B846F-4CDF-402A-B14A-B4949B1D403E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C7B52D3D-C5F0-4793-AFA3-C518400DB71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5B476503-1A1B-408B-9E66-1E4940090AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7123D6E6-3AE7-4413-AD6E-0D68D44C6F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"05A2EBE2-E55C-45DF-A74C-1B5F7E6EEC25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"909DFCAB-A44B-4EB8-B54D-066699AE760B"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178562.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178869.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00018.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00020.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/38fa1191049ac0c626a6684eea52068dfbbb5078","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/41c4e0214c286f28830cca54423b5db57e7c0ce4","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/7877a9c0084bf8ae15cbd8d2729b126271f682cc","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/ab1283e8366c97a155d4e9ae58628a248458ea32","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/c842a0de9288033d25404d1d6eb22dd83033675f","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-11/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178562.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178869.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/38fa1191049ac0c626a6684eea52068dfbbb5078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/41c4e0214c286f28830cca54423b5db57e7c0ce4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/7877a9c0084bf8ae15cbd8d2729b126271f682cc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/ab1283e8366c97a155d4e9ae58628a248458ea32","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/c842a0de9288033d25404d1d6eb22dd83033675f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-11/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2561","sourceIdentifier":"cve@mitre.org","published":"2016-03-01T11:59:03.533","lastModified":"2026-06-17T00:44:17.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated users to inject arbitrary web script or HTML via (1) normalization.php or (2) js/normalization.js in the database normalization page, (3) templates/database/structure/sortable_header.phtml in the database structure page, or (4) the pos parameter to db_central_columns.php in the central columns page."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en phpMyAdmin 4.4.x en versiones anteriores a 4.4.15.5 y 4.5.x en versiones anteriores a 4.5.5.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de (1) normalization.php o (2) js/normalization.js en la página de normalización de la base de datos, (3) templates/database/structure/sortable_header.phtml en la página de estructura de la base de datos, o (4) el parámetro pos parameter en db_central_columns.php en la página central columns."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14:*:*:*:*:*:*:*","matchCriteriaId":"C6D742A8-B9D0-4BC0-8E3E-E0FDCC1083FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*","matchCriteriaId":"4BED20D9-C571-4BC5-9A54-450A364C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F90283AD-A616-403C-BE69-BCB2FD58A2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"043B846F-4CDF-402A-B14A-B4949B1D403E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C7B52D3D-C5F0-4793-AFA3-C518400DB71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5B476503-1A1B-408B-9E66-1E4940090AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7123D6E6-3AE7-4413-AD6E-0D68D44C6F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"05A2EBE2-E55C-45DF-A74C-1B5F7E6EEC25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"909DFCAB-A44B-4EB8-B54D-066699AE760B"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178562.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178869.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00018.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00020.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/37c34d089aa19f30d11203bb0c7f85b486424372","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/746240bd13b62b5956fc34389cfbdc09e1e67775","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/983faa94f161df3623ecd371d3696a1b3f91c15f","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/bcd4ce8cba1272fca52f2331c08f2e3ac19cbbef","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/cc55f44a4a90147a007dee1aefa1cb529e23798b","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/f33a42f1da9db943a67bda7d29f7dd91957a8e7e","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-12/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178562.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178869.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/37c34d089aa19f30d11203bb0c7f85b486424372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/746240bd13b62b5956fc34389cfbdc09e1e67775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/983faa94f161df3623ecd371d3696a1b3f91c15f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/bcd4ce8cba1272fca52f2331c08f2e3ac19cbbef","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/cc55f44a4a90147a007dee1aefa1cb529e23798b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/f33a42f1da9db943a67bda7d29f7dd91957a8e7e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-12/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2562","sourceIdentifier":"cve@mitre.org","published":"2016-03-01T11:59:04.643","lastModified":"2026-06-17T00:44:18.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate."},{"lang":"es","value":"La función checkHTTP en libraries/Config.class.php en phpMyAdmin 4.5.x en versiones anteriores a 4.5.5.1 no verifica certificados X.509 desde los servidores SSL de api.github.com, lo que permite a atacantes man-in-the-middle suplantar estos servidores y obtener información sensible a través de un certificado manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7AAF1-64FF-40C9-90B2-DEC814157372"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F90283AD-A616-403C-BE69-BCB2FD58A2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"043B846F-4CDF-402A-B14A-B4949B1D403E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C7B52D3D-C5F0-4793-AFA3-C518400DB71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96D529F5-8870-4934-BCD8-E49095D21224"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"296EB2FA-FCAD-4BD5-A015-62765407AFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBD0DC7-64D0-42B1-8EEE-73A0214680F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A6A15D1E-83ED-47EC-B17C-E6BCC49DE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4112ACFF-D40E-45BE-9307-F710E7B41ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5B476503-1A1B-408B-9E66-1E4940090AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7123D6E6-3AE7-4413-AD6E-0D68D44C6F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"05A2EBE2-E55C-45DF-A74C-1B5F7E6EEC25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"909DFCAB-A44B-4EB8-B54D-066699AE760B"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178562.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178869.html","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/e42b7e3aedd29dd0f7a48575f20bfc5aca0ff976","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-13/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178562.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178869.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/e42b7e3aedd29dd0f7a48575f20bfc5aca0ff976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-13/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0800","sourceIdentifier":"secalert@redhat.com","published":"2016-03-01T20:59:00.253","lastModified":"2026-06-17T00:38:15.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a \"DROWN\" attack."},{"lang":"es","value":"El protocolo SSLv2, como se utiliza en OpenSSL en versiones anteriores a 1.0.1s y 1.0.2 en versiones anteriores a 1.0.2g y otros productos requiere un servidor para enviar un mensaje ServerVerify antes de establecer que un cliente posee ciertos datos RSA en texto plano, lo que facilita a atacantes remotos descifrar datos de texto cifrados con TLS aprovechándose de un Bleichenbacher RSA padding oracle, también conocida como ataque \"DROWN\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:client:-:*:*:*:*:iphone_os:*:*","matchCriteriaId":"B0648626-6AAC-4338-A258-7536866A3B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:steel_belted_radius:-:*:*:*:*:*:*:*","matchCriteriaId":"AF972AB5-74AE-4ED0-81FA-706D6A8DE67A"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10722","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=146133665209436&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1519.html","source":"secalert@redhat.com"},{"url":"http://support.citrix.com/article/CTX208403","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83733","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-623229.pdf","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/vulnerabilities/drown","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf","source":"secalert@redhat.com"},{"url":"https://drownattack.com","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05143554","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"secalert@redhat.com"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","source":"secalert@redhat.com"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10154","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20160301-0001/","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18","source":"secalert@redhat.com"},{"url":"https://www.kb.cert.org/vuls/id/583776","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=146133665209436&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1519.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX208403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-623229.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/security/vulnerabilities/drown","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://drownattack.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05143554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160301-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/583776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0703","sourceIdentifier":"secalert@redhat.com","published":"2016-03-02T11:59:00.113","lastModified":"2026-06-17T00:38:03.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800."},{"lang":"es","value":"La función get_client_master_key en s2_srvr.c en la implementación de SSLv2 en OpenSSL en versiones anteriores a 0.9.8zf, 1.0.0 en versiones anteriores a 1.0.0r, 1.0.1 en versiones anteriores a 1.0.1m y 1.0.2 en versiones anteriores a 1.0.2a acepta un valor CLIENT-MASTER-KEY CLEAR-KEY-LENGTH distinto de cero para un cifrado arbitrario, lo que permite a atacantes man-in-the-middle determinar el valor MASTER-KEY y descifrar datos de texto cifrados con TLS aprovechándose de un Bleichenbacher RSA padding oracle, un caso relacionado con CVE-2016-0800."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83743","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://drownattack.com","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://drownattack.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0704","sourceIdentifier":"secalert@redhat.com","published":"2016-03-02T11:59:01.363","lastModified":"2026-06-17T00:38:03.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800."},{"lang":"es","value":"Un mecanismo de protección oracle en la función get_client_master_key en s2_srvr.c en la implementación de SSLv2 en OpenSSL en versiones anteriores a 0.9.8zf, 1.0.0 en versiones anteriores a 1.0.0r, 1.0.1 en versiones anteriores a 1.0.1m y 1.0.2 en versiones anteriores a 1.0.2a sobrescribe MASTER-KEY bytes incorrectos durante el uso de suites de cifrado de exportación, lo que facilita a atacantes remotos el descifrado de datos de texto cifrados con TLS aprovechándose de un Bleichenbacher RSA padding oracle, un caso relacionado con CVE-2016-0800."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83764","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://drownattack.com","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://drownattack.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2279","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-03-02T11:59:03.723","lastModified":"2026-06-17T00:43:44.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el servidor web en Rockwell Automation Allen-Bradley CompactLogix 1769-L* en versiones anteriores a 28.011+ permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-03T13:42:31.274891Z","id":"CVE-2016-2279","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l16er-bb1b_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"29E82D3C-0B61-4C04-8D6A-421340BB4393"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l16er-bb1b:-:*:*:*:*:*:*:*","matchCriteriaId":"74D0FCCA-640C-499D-A3E5-018FD334C761"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l18er-bb1b_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"1E6C0BBB-F802-4D8E-9F82-E14229ECD449"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l18er-bb1b:-:*:*:*:*:*:*:*","matchCriteriaId":"EF975B1A-D3CE-495C-9A84-2CF4274687C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l18erm-bb1b_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"6728FF66-F294-4198-9CB4-675BDF112F03"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l18erm-bb1b:-:*:*:*:*:*:*:*","matchCriteriaId":"4AAC1C57-CD59-4459-B037-28D179DF8818"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l24er-qb1b_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"8E3DB264-8F8F-4B72-94BE-7B2FF3E96AC5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l24er-qb1b:-:*:*:*:*:*:*:*","matchCriteriaId":"7BACD59C-44A6-4B5B-AE98-E64361581D86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l24er-qbfc1b_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"CA427BEC-D40F-484E-BDC7-E68A5B199818"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l24er-qbfc1b:-:*:*:*:*:*:*:*","matchCriteriaId":"5390AF53-D808-4FCF-B39B-1835EBDC2FC7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l27erm-qbfc1b_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"00BA17FA-5836-491E-AB58-1CFB537B861A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l27erm-qbfc1b:-:*:*:*:*:*:*:*","matchCriteriaId":"98A92CC7-E6B3-4110-8B9F-9C483AE523F7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l30er_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"9489D003-036F-4C68-8EA5-5D38C50E5DFC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l30er:-:*:*:*:*:*:*:*","matchCriteriaId":"3FB0AB23-EED7-4A6B-8B19-41ADAD3CC109"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l30erm_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"C1209809-9F62-4CC3-947A-ED694D18092E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l30erm:-:*:*:*:*:*:*:*","matchCriteriaId":"5C12EC13-C5A8-409E-BA61-30912D9C18D3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l30er-nse_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"0B893D1A-949D-47D1-A547-CC0883AC1422"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l30er-nse:-:*:*:*:*:*:*:*","matchCriteriaId":"A28922E6-DC6B-4290-B7C4-D3159778C74E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l33er_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"F5E30EA9-0133-4705-8E56-04A73E577B3F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l33er:-:*:*:*:*:*:*:*","matchCriteriaId":"FEB15370-768D-42F1-BB7B-F919B507910C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l33erm_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"AC872DF7-4225-49AF-990B-5CB36F16BCAC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l33erm:-:*:*:*:*:*:*:*","matchCriteriaId":"21AAB46D-43CB-4A6B-9EA0-4FEA1F22AFC8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l36erm_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"27.011","matchCriteriaId":"2CC604A4-8D26-40AB-91F0-9D9D7479C984"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l36erm:-:*:*:*:*:*:*:*","matchCriteriaId":"519467C1-2EE6-4A75-B04C-409E5A111473"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l23e-qb1b_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"20.018","matchCriteriaId":"312E4B19-D739-4790-9861-A6FF9838F9D5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l23e-qb1b:-:*:*:*:*:*:*:*","matchCriteriaId":"B727E262-837B-4805-AED1-0A2B67F3F419"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1769-l23e-qbfc1b_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"20.018","matchCriteriaId":"F94E9C64-B56B-4887-BBB1-A3B746F03716"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1769-l23e-qbfc1b:-:*:*:*:*:*:*:*","matchCriteriaId":"4110720F-6CBF-4EC8-BB13-E6E546CCD38B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1756-en2f_series_a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"102DC432-6651-4B65-9125-B647AF827763"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1756-en2f_series_a:-:*:*:*:*:*:*:*","matchCriteriaId":"1E3C8EAD-86B6-4E15-BEC7-84A9B96610FC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1756-en2f_series_b_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"113AD581-CA23-40E0-BF8B-CEEEBCEBEEE1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1756-en2f_series_b:-:*:*:*:*:*:*:*","matchCriteriaId":"660B516C-C272-43D7-98C3-899BD32B68EF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1756-en2t_series_a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9235FFD9-54A8-46A7-890B-F9A5859140DC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1756-en2t_series_a:-:*:*:*:*:*:*:*","matchCriteriaId":"766F4673-114B-4FBB-9AB2-7D61AB468F53"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1756-en2t_series_b_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D3E6782D-C69A-4877-9F95-FB276E8A5D81"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1756-en2t_series_b:-:*:*:*:*:*:*:*","matchCriteriaId":"09D974B7-453B-46D9-9C11-899E57E9E3E8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1756-en2t_series_c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"991A44E9-E79C-46ED-9ABA-19492877E0DE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1756-en2t_series_c:-:*:*:*:*:*:*:*","matchCriteriaId":"2D8A95D5-D3CF-4A5C-B06C-E3FEEA21059A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1756-en2t_series_d_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.007","matchCriteriaId":"07E5BF49-8E02-4202-A2FB-0BEBFFF98FA0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1756-en2t_series_d:-:*:*:*:*:*:*:*","matchCriteriaId":"D2921B42-4D68-4489-9FE6-07C4B71A6465"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1756-en2tr_series_a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"431EC8A4-412C-4523-9E0D-FB6507CB9E03"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1756-en2tr_series_a:-:*:*:*:*:*:*:*","matchCriteriaId":"12B26FEC-27DF-4F03-8800-5B378B3647A8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1756-en2tr_series_b_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"55D01607-9B6E-4FDD-A62A-A8EA1DC79ECC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1756-en2tr_series_b:-:*:*:*:*:*:*:*","matchCriteriaId":"A417416D-8CCB-433B-B663-E6842965956C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rockwellautomation:compactlogix_1756-en3tr_series_a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9963F5D0-CBBB-4D11-BFBE-EA1F3F70E3A7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:rockwellautomation:compactlogix_1756-en3tr_series_a:-:*:*:*:*:*:*:*","matchCriteriaId":"F9DAEA1C-4F31-41E8-A072-F7118ABA9A55"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035190","source":"ics-cert@hq.dhs.gov","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-061-02","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.exploit-db.com/exploits/44626/","source":"ics-cert@hq.dhs.gov","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-061-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.exploit-db.com/exploits/44626/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1354","sourceIdentifier":"psirt@cisco.com","published":"2016-03-03T15:59:00.117","lastModified":"2026-06-17T00:41:46.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Unified Communications Domain Manager (UCDM) 8.x en versiones anteriores a 8.1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de datos markup manipulados, también conocida como Bug ID CSCud41176."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_domain_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"02189D5F-EC41-436B-8EDF-5300CC70BE41"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_domain_manager:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0DCA3DB1-FDDB-4D06-82B3-40443663B377"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_domain_manager:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"75793CEB-E2B1-4D74-9E19-670626450B2D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cucdm","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cucdm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1355","sourceIdentifier":"psirt@cisco.com","published":"2016-03-03T15:59:01.743","lastModified":"2026-06-17T00:41:46.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy41687."},{"lang":"es","value":"Vulnerabilidad de XSS en la UI de Device Management UI en la interfaz de gestión en Cisco FireSIGHT System Software 6.1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un valor manipulado, también conocida como Bug ID CSCuy41687."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"362E320D-70E9-4B51-9298-ADF612FD440F"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-FireSIGHT","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035188","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-FireSIGHT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0702","sourceIdentifier":"secalert@redhat.com","published":"2016-03-03T20:59:00.080","lastModified":"2026-06-17T00:38:02.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack."},{"lang":"es","value":"La función MOD_EXP_CTIME_COPY_FROM_PREBUF en crypto/bn/bn_exp.c en OpenSSL 1.0.1 en versiones anteriores a 1.0.1s y 1.0.2 en versiones anteriores a 1.0.2g no considera correctamente las veces que se accede al cache-bank durante la exponenciación modular, lo que facilita a usuarios locales descubrir las claves RSA ejecutando una aplicación manipulada en el mismo núcleo de la CPU Intel Sandy Bridge como víctima y aprovechándose de los conflictos del cache-bank, también conocida como un ataque \"CacheBleed\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.3.2","matchCriteriaId":"30C92A41-47F3-46D7-AD29-66B717E6D5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.7.1","matchCriteriaId":"183CD912-7D2E-4CCD-BA99-05AF9E685030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://cachebleed.info","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145889460330120&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=708dc2f1291e104fe4eef810bb8ffc1fae5b19c1","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://cachebleed.info","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145889460330120&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=708dc2f1291e104fe4eef810bb8ffc1fae5b19c1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0227","sourceIdentifier":"psirt@us.ibm.com","published":"2016-03-03T22:59:10.537","lastModified":"2026-06-17T00:37:09.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the document-list control implementation in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, and 8.5.5 and 8.5.6 through 8.5.6.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en la implementación de control del documento-listado en IBM Business Process Manager (BPM) 8.0 hasta la versión 8.0.1.3, 8.5.0 hasta la versión 8.5.0.2 y 8.5.5 y 8.5.6 hasta la versión 8.5.6.2 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*","matchCriteriaId":"E71AC948-9F71-403E-8035-172D5F667B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*","matchCriteriaId":"FE68791B-B7AE-4715-810E-0C278E5C363F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*","matchCriteriaId":"37281A0A-3BE1-4B22-840F-65CA7B8AB360"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*","matchCriteriaId":"E77872E9-D66C-47FF-AA1D-7764D65997A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*","matchCriteriaId":"00CC8270-5ABE-428C-9090-16EC8298E50C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*","matchCriteriaId":"446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*","matchCriteriaId":"7B3D03C8-B7F4-43AF-9270-555507AAC527"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*","matchCriteriaId":"A05F59A1-3063-45ED-B1E8-AABC4FC0A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*","matchCriteriaId":"3FC25EB0-CA22-4176-8752-8BD26B111F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*","matchCriteriaId":"E69BBEFA-B321-4085-AEA1-BAE2B0B54524"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*","matchCriteriaId":"60F679C8-74FB-40F5-A5B8-FBD6BF424379"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*","matchCriteriaId":"7C097D2E-5BB7-4979-A755-E928094A92C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*","matchCriteriaId":"BE4F0900-83C3-4228-9F3B-2664C1C816F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*","matchCriteriaId":"0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*","matchCriteriaId":"021FABA7-6B97-4511-8E07-B7A34A387493"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*","matchCriteriaId":"9942841D-3E36-4159-AA5A-B534CB701B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*","matchCriteriaId":"8FE10C1D-2077-435A-8C14-2746A685681C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*","matchCriteriaId":"F6E31F25-6E71-4A5C-A940-0A935AF19035"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*","matchCriteriaId":"7A1FCB4E-DC46-4780-9017-1E8E789E785F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*","matchCriteriaId":"EE43BACD-D187-49C9-85D1-51E3F71D2274"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*","matchCriteriaId":"F646DABB-4C10-4308-8169-EC42C358CF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*","matchCriteriaId":"19B921EC-DE16-4A2B-BB29-B02A9B416470"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*","matchCriteriaId":"8578A0D7-3330-4F79-A934-4940673383A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*","matchCriteriaId":"CC44A2D4-F3D3-4D98-8FDC-8274E1725800"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*","matchCriteriaId":"00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*","matchCriteriaId":"80D84C06-5E93-4DA4-A333-D3CECB7D74E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*","matchCriteriaId":"DF7E8429-8750-4D3C-90E1-829031C7C306"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*","matchCriteriaId":"66A4A455-A75B-4363-AC6D-DAD50287EB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*","matchCriteriaId":"D06A925E-C739-48A9-B211-36DE458A7898"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*","matchCriteriaId":"12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*","matchCriteriaId":"66327978-D257-4ADE-8AEA-22547B0E4541"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*","matchCriteriaId":"ADE7414F-BF17-4415-95C3-FDBC2BC5C7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*","matchCriteriaId":"E590C058-EC80-48FB-87C7-3F84E2BC07E1"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55152","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21978058","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035175","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21978058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1288","sourceIdentifier":"psirt@cisco.com","published":"2016-03-03T22:59:12.490","lastModified":"2026-06-17T00:41:39.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (service outage) by leveraging certain intranet connectivity and sending a malformed HTTPS request, aka Bug ID CSCuu24840."},{"lang":"es","value":"La funcionalidad de HTTPS Proxy en Cisco AsyncOS en versiones anteriores a 8.5.3-051 y 9.x en versiones anteriores a 9.0.0-485 en dispositivos Web Security Appliance (WSA) permite a atancantes remotos causar una denegación de servicio (corte de servicio) mediante el aprovechamiento de cierta conectividad de intranet y mandando una petición HTTPS malformada, también conocida como Bug ID CSCuu24840."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.0.0-193:*:*:*:*:*:*:*","matchCriteriaId":"5AD5471D-6A95-4BF2-9ECB-3F7AE74BCE57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:web_security_appliance:8.5.0-497:*:*:*:*:*:*:*","matchCriteriaId":"21C621E7-A2CB-4C52-9E9C-6B9B0D29D883"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-wsa","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035163","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-wsa","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1357","sourceIdentifier":"psirt@cisco.com","published":"2016-03-03T22:59:14.193","lastModified":"2026-06-17T00:41:46.527","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The password-management administration component in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att, and 7.5.0 allows remote attackers to bypass intended RBAC restrictions and read unspecified data via unknown vectors, aka Bug ID CSCut85211."},{"lang":"es","value":"El componente de administración de gestión de contraseñas en Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att y 7.5.0 permite a atacantes remotos eludir las restricciones RBAC destinadas y leer datos no especificados a través de vectores desconocidos, también conocido como Bug ID CSCut85211."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_policy_suite:7.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E95D3656-CA96-4AB2-A569-80DA9C17921F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_policy_suite:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"735D35C5-3F9E-4F9D-9724-122073E6209C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_policy_suite:7.0.2-att:*:*:*:*:*:*:*","matchCriteriaId":"4F347AA0-EF65-4375-8368-CCE8538959F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_policy_suite:7.0.3-att:*:*:*:*:*:*:*","matchCriteriaId":"FD605C4E-DA87-4390-8211-AA564681492F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_policy_suite:7.0.4-att:*:*:*:*:*:*:*","matchCriteriaId":"BB156AF5-03D2-43F9-86B5-AEB7ECDE0D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_policy_suite:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"13A7FBF2-5BD6-45D9-A855-10AD07AE058A"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-psc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-psc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1358","sourceIdentifier":"psirt@cisco.com","published":"2016-03-03T22:59:15.037","lastModified":"2026-06-17T00:41:46.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuw81497."},{"lang":"es","value":"Cisco Prime Infrastructure 2.2, 3.0 y 3.1(0.0) permite a usuarios remotos autenticados leer archivos arbitrarios o provocar una denegación del servicio a través de un documento XML que contiene una declaración de entidad externa en conjunción con una referencia de entidad, relacionado con un problema XML External Entity (XXE), también conocido como Bug ID CSCuw81497."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_infrastructure:2.2:*:*:*:*:*:*:*","matchCriteriaId":"56394A07-6D74-4588-8C05-DE04959F7FC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_infrastructure:3.0:*:*:*:*:*:*:*","matchCriteriaId":"48F3C5A5-6C84-408D-B59A-265F8775C943"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_infrastructure:3.1:*:*:*:*:*:*:*","matchCriteriaId":"27F4F1D6-82DA-4675-B734-D9C5371E6654"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cpi","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035181","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cpi","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2244","sourceIdentifier":"hp-security-alert@hp.com","published":"2016-03-04T15:59:01.500","lastModified":"2026-06-17T00:43:43.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Impresoras HP LaserJet e impresoras MFPs OfficeJet Enterprise con firmware anterior a 3.7.01 permiten a atacantes remotos obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"hp-security-alert@hp.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:a2w75a:-:*:*:*:*:*:*:*","matchCriteriaId":"B21E6919-1D0C-44DA-AFF5-77486213E98A"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:a2w76a:-:*:*:*:*:*:*:*","matchCriteriaId":"42266438-FCAA-4626-A5E6-EA675BC6CED7"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:a2w77a:-:*:*:*:*:*:*:*","matchCriteriaId":"02BA1E17-7260-4BE9-A8D0-FF62A47EA988"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:a2w78a:-:*:*:*:*:*:*:*","matchCriteriaId":"A7A66E28-F591-4105-8F5C-658047CB28AA"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:a2w79a:-:*:*:*:*:*:*:*","matchCriteriaId":"6A56760E-BDBF-455D-892B-27B3A309E53D"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:b3g85a:-:*:*:*:*:*:*:*","matchCriteriaId":"D480FED5-85AA-4D6A-805B-995A6BCE70C0"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:b5l04a:-:*:*:*:*:*:*:*","matchCriteriaId":"4BDB3A97-FB33-4723-BE10-B08D604DCB8F"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:b5l05a:-:*:*:*:*:*:*:*","matchCriteriaId":"8C6655F2-5E0E-45DF-A331-CACED3A39EB1"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:b5l07a:-:*:*:*:*:*:*:*","matchCriteriaId":"5E9A2E2C-422A-4D51-A6C0-F2253F7BE5C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:c2s11a:-:*:*:*:*:*:*:*","matchCriteriaId":"50D1D946-FA61-43D6-867C-B1FA207F2532"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:c2s12a:-:*:*:*:*:*:*:*","matchCriteriaId":"333BE27C-8E3B-494D-A630-CBF0EC7078BD"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:ca251a:-:*:*:*:*:*:*:*","matchCriteriaId":"D6C2BCB4-ED2B-4716-B61D-1F16B166D0B7"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cc522a:-:*:*:*:*:*:*:*","matchCriteriaId":"D3C1ADE6-B1A1-4A47-9D1E-C99BB70D389D"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cc523a:-:*:*:*:*:*:*:*","matchCriteriaId":"A03F6C70-DCF2-437A-B4C5-1D0110FB79EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cc524a:-:*:*:*:*:*:*:*","matchCriteriaId":"A7D48163-079E-4928-A090-7E0A30FB6B4C"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cd644a:-:*:*:*:*:*:*:*","matchCriteriaId":"4F9F0833-1CFB-4425-9C66-ACA8680545B4"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cd645a:-:*:*:*:*:*:*:*","matchCriteriaId":"DD382BD5-E902-47C0-B9E5-3F08D04EEFAC"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cd646a:-:*:*:*:*:*:*:*","matchCriteriaId":"41A1C170-BC7D-49EC-B1EF-D56D4469590E"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:ce989a:-:*:*:*:*:*:*:*","matchCriteriaId":"39A54EDB-CC34-4BC4-A20A-0EA30FC798DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:ce990a:-:*:*:*:*:*:*:*","matchCriteriaId":"7DD99E74-A75F-44B8-86F3-22850CEBEA9A"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:ce991a:-:*:*:*:*:*:*:*","matchCriteriaId":"E8412130-F79B-45BF-A8CF-9F24FF5F777A"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:ce992a:-:*:*:*:*:*:*:*","matchCriteriaId":"2765F303-BA92-4BE1-A672-62CAF0ECC201"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:ce993a:-:*:*:*:*:*:*:*","matchCriteriaId":"69C58820-E294-4BE6-9565-78B0EAEE0CF6"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:ce994a:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB2F91-FCAA-4A92-A7DC-9637C901FB53"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:ce995a:-:*:*:*:*:*:*:*","matchCriteriaId":"1C6798D2-FD42-44F9-A45D-AA49228F672B"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:ce996a:-:*:*:*:*:*:*:*","matchCriteriaId":"8F40E086-FFDE-4E4E-9DB0-F537F7CEB6E0"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf066a:-:*:*:*:*:*:*:*","matchCriteriaId":"E7284308-1FC8-474E-8DE0-AB358B6D0ED7"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf067a:-:*:*:*:*:*:*:*","matchCriteriaId":"4E3D1195-AF78-4B87-BB61-AD551E8DCD1D"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf068a:-:*:*:*:*:*:*:*","matchCriteriaId":"E2DB7025-7AD5-4C4F-B6BA-7EA1874D2B5B"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf069a:-:*:*:*:*:*:*:*","matchCriteriaId":"8711CE56-C7CD-4C92-B18B-4AE9CDD11BAD"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf081a:-:*:*:*:*:*:*:*","matchCriteriaId":"DFF19F65-3CD4-46C3-9AFD-1C5EA0942B7C"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf082a:-:*:*:*:*:*:*:*","matchCriteriaId":"64646EAE-4CFF-4184-BA59-DCD59C18C217"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf083a:-:*:*:*:*:*:*:*","matchCriteriaId":"5FBCD353-9942-4B5C-BEAB-BF818B22962C"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf116a:-:*:*:*:*:*:*:*","matchCriteriaId":"0EBA452B-6812-48FA-8DEE-AA72F6FFCCE5"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf117a:-:*:*:*:*:*:*:*","matchCriteriaId":"DCA39F69-75F0-4574-A8B9-435AE52890D0"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf118a:-:*:*:*:*:*:*:*","matchCriteriaId":"3AA28619-6BDC-4167-8DEA-67FF748D2453"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf235a:-:*:*:*:*:*:*:*","matchCriteriaId":"6BCEAD56-073F-423B-B1AA-7DE21DFC1DA7"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf236a:-:*:*:*:*:*:*:*","matchCriteriaId":"A4D83788-6F36-4826-BA2C-1FFDB83192A5"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf238a:-:*:*:*:*:*:*:*","matchCriteriaId":"99EC7506-7169-4B99-BAD5-91E3150B8EB1"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cf367a:-:*:*:*:*:*:*:*","matchCriteriaId":"915BCAF3-F2C4-46F9-80EF-08C49E3C19CD"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cz244a:-:*:*:*:*:*:*:*","matchCriteriaId":"9491218A-2F33-4FE4-993E-D72769CFC469"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cz245a:-:*:*:*:*:*:*:*","matchCriteriaId":"308131FB-9BF5-46B9-B049-EB277E53794A"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cz249a:-:*:*:*:*:*:*:*","matchCriteriaId":"66EA5150-015F-4D53-85D7-C81944149BD3"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cz250a:-:*:*:*:*:*:*:*","matchCriteriaId":"A1558200-C015-4972-9CF2-13CC73C6949C"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cz255a:-:*:*:*:*:*:*:*","matchCriteriaId":"0D0A2497-71D3-41B3-8605-E8D1571EB422"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cz256a:-:*:*:*:*:*:*:*","matchCriteriaId":"5C139B39-BC0A-494B-A397-100BAE4496EA"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cz257a:-:*:*:*:*:*:*:*","matchCriteriaId":"0A9F4435-E0B8-4469-A9CF-E285B788BBC8"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:cz258a:-:*:*:*:*:*:*:*","matchCriteriaId":"87EC177C-8515-431F-88D3-F396EA41AD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:d3l08a:-:*:*:*:*:*:*:*","matchCriteriaId":"8A251D48-87A8-48FC-AF78-C0B777544F3F"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:d3l09a:-:*:*:*:*:*:*:*","matchCriteriaId":"6821F1D6-64E5-4455-BC1E-5D44DDBF7B0E"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:d3l10a:-:*:*:*:*:*:*:*","matchCriteriaId":"8D50185D-D324-4396-975D-1F2ED909F1A6"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:d7p70a:-:*:*:*:*:*:*:*","matchCriteriaId":"4B03873D-9DF5-43E3-AB2B-8161CB111509"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:d7p71a:-:*:*:*:*:*:*:*","matchCriteriaId":"08CF9EF0-4DA6-41B6-B3FD-B56C7A28918A"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:j7x28a:-:*:*:*:*:*:*:*","matchCriteriaId":"DF983EC0-D722-406D-90A9-A012056C7520"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:futuresmart_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7","matchCriteriaId":"0DA2EC65-9693-49FD-8F48-35E90DDB81FE"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035191","source":"hp-security-alert@hp.com"},{"url":"https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05030353","source":"hp-security-alert@hp.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05030353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2282","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-03-04T15:59:02.407","lastModified":"2026-06-17T00:43:45.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."},{"lang":"es","value":"Dispositivos Moxa ioLogik E2200 en versiones anteriores 3.12 e ioAdmin Configuration Utility en versiones anteriores a 3.18 no cifran correctamente las credenciales, lo que facilita a atacantes remotos obtener el texto plano asociado a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:moxa:ioadmin_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17","matchCriteriaId":"83193E46-EC52-400F-A426-17E710048BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:moxa:iologik_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.11","matchCriteriaId":"3285A152-0075-4B61-BE61-60C5E92E8E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2210:-:*:*:*:*:*:*:*","matchCriteriaId":"861285B9-D63C-42A7-B694-A6F68DF5489B"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2210-t:-:*:*:*:*:*:*:*","matchCriteriaId":"93099C60-C5E5-4558-956F-3C340C435A97"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2212:-:*:*:*:*:*:*:*","matchCriteriaId":"38D2B0D8-AD5E-4C19-8AA7-37B471342BA3"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2212-t:-:*:*:*:*:*:*:*","matchCriteriaId":"9C21D360-CDAC-4819-BA77-F9D983EF3061"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2214:-:*:*:*:*:*:*:*","matchCriteriaId":"A95D941B-95C8-461B-8E96-0B6EC3A46AA9"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2214-t:-:*:*:*:*:*:*:*","matchCriteriaId":"EA635CC7-6596-443F-B2BA-4526F331A92B"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2240:-:*:*:*:*:*:*:*","matchCriteriaId":"94F2BAE6-8A3C-4A1B-871A-3EF069C643C4"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2240-t:-:*:*:*:*:*:*:*","matchCriteriaId":"22E3C7AC-0BCC-41F1-9B4B-43CC6F6E2609"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2242:-:*:*:*:*:*:*:*","matchCriteriaId":"340A9411-F756-493C-8F95-7218C3F8548E"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2242-t:-:*:*:*:*:*:*:*","matchCriteriaId":"D455F5E7-CE0C-486E-8EFF-F6003D0F2EE1"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2260:-:*:*:*:*:*:*:*","matchCriteriaId":"B7FE3E7C-F4A3-46EC-B823-2D2B9E0EDF37"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2260-t:-:*:*:*:*:*:*:*","matchCriteriaId":"C160F9D0-AEC4-4FD1-B520-424E016E6761"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2262:-:*:*:*:*:*:*:*","matchCriteriaId":"BD47951B-A792-48E4-A8B1-D19616177FA4"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2262-t:-:*:*:*:*:*:*:*","matchCriteriaId":"4611357D-1FEC-4BB0-A8A6-2BA8E6498C06"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-2283","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-03-04T15:59:03.343","lastModified":"2026-06-17T00:43:45.263","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."},{"lang":"es","value":"Dispositivos Moxa ioLogik E2200 en versiones anteriores 3.12 e ioAdmin Configuration Utility en versiones anteriores a 3.18 no cifran correctamente los datos, lo que facilita a atacantes remotos obtener el texto plano asociado a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:moxa:ioadmin_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17","matchCriteriaId":"83193E46-EC52-400F-A426-17E710048BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:moxa:iologik_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.11","matchCriteriaId":"3285A152-0075-4B61-BE61-60C5E92E8E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2210:-:*:*:*:*:*:*:*","matchCriteriaId":"861285B9-D63C-42A7-B694-A6F68DF5489B"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2210-t:-:*:*:*:*:*:*:*","matchCriteriaId":"93099C60-C5E5-4558-956F-3C340C435A97"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2212:-:*:*:*:*:*:*:*","matchCriteriaId":"38D2B0D8-AD5E-4C19-8AA7-37B471342BA3"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2212-t:-:*:*:*:*:*:*:*","matchCriteriaId":"9C21D360-CDAC-4819-BA77-F9D983EF3061"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2214:-:*:*:*:*:*:*:*","matchCriteriaId":"A95D941B-95C8-461B-8E96-0B6EC3A46AA9"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2214-t:-:*:*:*:*:*:*:*","matchCriteriaId":"EA635CC7-6596-443F-B2BA-4526F331A92B"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2240:-:*:*:*:*:*:*:*","matchCriteriaId":"94F2BAE6-8A3C-4A1B-871A-3EF069C643C4"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2240-t:-:*:*:*:*:*:*:*","matchCriteriaId":"22E3C7AC-0BCC-41F1-9B4B-43CC6F6E2609"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2242:-:*:*:*:*:*:*:*","matchCriteriaId":"340A9411-F756-493C-8F95-7218C3F8548E"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2242-t:-:*:*:*:*:*:*:*","matchCriteriaId":"D455F5E7-CE0C-486E-8EFF-F6003D0F2EE1"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2260:-:*:*:*:*:*:*:*","matchCriteriaId":"B7FE3E7C-F4A3-46EC-B823-2D2B9E0EDF37"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2260-t:-:*:*:*:*:*:*:*","matchCriteriaId":"C160F9D0-AEC4-4FD1-B520-424E016E6761"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2262:-:*:*:*:*:*:*:*","matchCriteriaId":"BD47951B-A792-48E4-A8B1-D19616177FA4"},{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:iologik_e2262-t:-:*:*:*:*:*:*:*","matchCriteriaId":"4611357D-1FEC-4BB0-A8A6-2BA8E6498C06"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-1637","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-03-06T02:59:08.320","lastModified":"2026-06-17T00:42:18.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles arctangent calculations, which allows remote attackers to obtain sensitive information via a crafted web site."},{"lang":"es","value":"La función SkATan2_255 en effects/gradients/SkSweepGradient.cpp en Skia, tal como se utiliza en Google Chrome en versiones anteriores a 49.0.2623.75, no maneja correctamente los cálculos de arcotangente, lo que permite a atacantes remotos obtener información sensible a través de un sitio web manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2564.116","matchCriteriaId":"99CABF0F-D201-46AE-83DC-09257264BF7D"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3507","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/84008","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035185","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2920-1","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=555544","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1506913002","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2920-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=555544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1506913002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1638","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-03-06T02:59:09.180","lastModified":"2026-06-17T00:42:18.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app."},{"lang":"es","value":"extensions/renderer/resources/platform_app.js en el subsistema Extensions en Google Chrome en versiones anteriores a 49.0.2623.75 no restringe adecuadamente el uso de APIs Web, lo que permite a atacantes remotos eludir las restricciones destinadas al acceso a través de una app de plataforma manipulada."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2564.116","matchCriteriaId":"99CABF0F-D201-46AE-83DC-09257264BF7D"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3507","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/84008","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035185","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=585282","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1744623002","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=585282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1744623002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1640","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-03-06T02:59:11.070","lastModified":"2026-06-17T00:42:19.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the user's next navigation target via a crafted web site."},{"lang":"es","value":"La implementación de Web Store inline-installer en Extensions UI en Google Chrome en versiones anteriores a 49.0.2623.75 no bloquea las instalaciones sobre la eliminación de un marco de instalación, lo que facilita a atacantes remotos engañar a un usuario haciéndole creer que una petición de instalación está originada desde el siguiente destino de navegación del usuario a través de un sitio web manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2564.116","matchCriteriaId":"99CABF0F-D201-46AE-83DC-09257264BF7D"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3507","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/84008","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035185","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=550047","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1496033003","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1554233005","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=550047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1496033003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1554233005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2845","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-03-06T02:59:15.867","lastModified":"2026-06-17T00:44:34.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation reports, related to FrameFetchContext.cpp and ResourceFetcher.cpp."},{"lang":"es","value":"La implementación de la Content Security Policy (CSP) en Blink, tal como se utiliza en Google Chrome en versiones anteriores a 49.0.2623.75, no ignora un componente de ruta de URL en el caso de la recuperación de un ServiceWorker, lo que permite a atacantes remotos obtener información sensible sobre páginas web visitadas mediante la lectura de informes de violación de la CSP, relacionados con FrameFetchContext.cpp y ResourceFetcher.cpp."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2564.116","matchCriteriaId":"99CABF0F-D201-46AE-83DC-09257264BF7D"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://homakov.blogspot.com/2014/01/using-content-security-policy-for-evil.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/84168","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035185","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2920-1","source":"chrome-cve-admin@google.com"},{"url":"https://bugs.chromium.org/p/chromium/issues/detail?id=542060","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=591402","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1454003003/","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://homakov.blogspot.com/2014/01/using-content-security-policy-for-evil.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2920-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.chromium.org/p/chromium/issues/detail?id=542060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=591402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1454003003/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0120","sourceIdentifier":"secure@microsoft.com","published":"2016-03-09T11:59:27.453","lastModified":"2026-06-17T00:36:57.423","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via a crafted OpenType font, aka \"OpenType Font Parsing Vulnerability.\""},{"lang":"es","value":"Adobe Type Manager Library en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold y 1511 permite a atacantes remotos causar una denegación de servicio (cuelgue del sistema) a través de una fuente OpenType manipulada, también conocida como \"OpenType Font Parsing Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/84071","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035198","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-026","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/39561/","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/84071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39561/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Per Microsoft:  \"For systems running Windows 10, an attacker who successfully exploited the vulnerability could potentially cause the application to stop responding instead of the system.\""}},{"cve":{"id":"CVE-2016-0133","sourceIdentifier":"secure@microsoft.com","published":"2016-03-09T11:59:34.750","lastModified":"2026-06-17T00:36:58.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows physically proximate attackers to execute arbitrary code by inserting a crafted USB device, aka \"USB Mass Storage Elevation of Privilege Vulnerability.\""},{"lang":"es","value":"El controlador USB Mass Storage Class en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold y 1511 permite a atacantes físicamente próximos ejecutar código arbitrario insertando un dispositivo USB manipulado, también conocido como \"USB Mass Storage Elevation of Privilege Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*","matchCriteriaId":"7519928D-0FF2-4584-8058-4C7764CD5671"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/84035","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035211","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-033","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/84035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2774","sourceIdentifier":"cve@mitre.org","published":"2016-03-09T15:59:00.147","lastModified":"2026-06-17T00:44:22.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions."},{"lang":"es","value":"ISC DHCP 4.1.x en versiones anteriores a 4.1-ESV-R13 y 4.2.x y 4.3.x en versiones anteriores a 4.3.4 no restringe el número de sesiones TCP concurrentes, lo que permite a atacantes remotos provocar una denegación de servicio (fallo de aserción INSIST o interrupción de procesamiento de petición) estableciendo muchas sesiones."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*","matchCriteriaId":"F27D0660-2F07-430B-A651-5D0B6AA763C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*","matchCriteriaId":"FBAABA4E-0D34-4644-AC26-E272CEE6C361"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*","matchCriteriaId":"179443DC-4B6A-408A-8BE5-B3E72188F43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*","matchCriteriaId":"C9BE7736-58CD-468B-84AB-B38C9B254BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*","matchCriteriaId":"40B21FCB-43A8-4266-934D-ECFF8138F637"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*","matchCriteriaId":"69D49F23-9074-49E7-985F-4D93393324CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*","matchCriteriaId":"3F729D1D-7234-4BC2-839B-AE1BB9D16C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*","matchCriteriaId":"FBA64EEC-C0C7-4F11-8131-2868691E54DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*","matchCriteriaId":"157520D7-AE39-4E23-A8CF-DD75EA78C055"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*","matchCriteriaId":"A5E2FFC7-6E73-463E-846C-C403E41A2022"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*","matchCriteriaId":"E9D08285-745D-40AB-9A78-F467712CDA5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*","matchCriteriaId":"1D115F1F-1A3A-4924-AF10-723B3BB0CBB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*","matchCriteriaId":"79F235F0-AD16-4E5B-AB60-97F0BB86AEB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*","matchCriteriaId":"E84D5E5B-0336-4166-AAAC-49375E3AF971"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*","matchCriteriaId":"09561C97-563C-4DDC-9EE4-E83EFFD467D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*","matchCriteriaId":"519CF0CC-FB12-4C68-88A0-E0E15738C620"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*","matchCriteriaId":"80EB131E-32E5-458F-8DDA-48835D2D883F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*","matchCriteriaId":"65E0296F-3522-4B43-AF34-CFE1AE7EEC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*","matchCriteriaId":"69F6E619-A52B-4A60-8247-41ADD0E7D655"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*","matchCriteriaId":"AA48EBAA-10B7-43D6-9A27-99F2578DF7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*","matchCriteriaId":"20040BB3-F157-4505-BB60-0D919A7D1436"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*","matchCriteriaId":"974A8587-8351-490A-82D9-B541862CA4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*","matchCriteriaId":"7DABD43E-818A-4B21-B4E7-753056D4A184"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*","matchCriteriaId":"EE991D0E-2E2D-4844-9BBD-235D8BC5FB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*","matchCriteriaId":"975EF88C-988F-40A6-B7D1-D27439144CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*","matchCriteriaId":"3120B566-2BB6-4A1F-9ED7-E099E2870919"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*","matchCriteriaId":"78214BCE-9739-40B9-A32E-89C16F7195DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.0:a1:*:*:*:*:*:*","matchCriteriaId":"40C764F4-8FAD-477E-92E5-79D234673478"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.0:a2:*:*:*:*:*:*","matchCriteriaId":"36045DDB-48C6-48CA-AAAF-A3487EF7A537"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.0:b1:*:*:*:*:*:*","matchCriteriaId":"ECA81B95-97B7-4A56-A448-6E5DB6FA5F76"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*","matchCriteriaId":"A91F4FD9-1797-4B9C-AFB8-EC6445119DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*","matchCriteriaId":"4479C934-BF9A-428F-AD22-41C45B70C546"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*","matchCriteriaId":"11EE9507-6827-4CFF-B3B4-9DC4DE3E0B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*","matchCriteriaId":"E6CE1A0F-BE1E-4312-B68F-F09B05929F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.1:p1:*:*:*:*:*:*","matchCriteriaId":"F92474BB-7CC0-47EE-A608-190F70AAFE41"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"17B6DEFA-0977-474A-9871-B03DEE924ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*","matchCriteriaId":"09F19067-DD99-4B26-8125-0801459ED6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*","matchCriteriaId":"9B63D409-60F5-4AB9-A576-8672D42E071E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*","matchCriteriaId":"CA5D825C-B72A-44F5-AF24-4F3200881ABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9A1C3F3E-CFB2-40F2-89F4-735AAE042F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:-:*:*:*:*:*:*","matchCriteriaId":"150D46FA-873E-4E4F-8192-BCA1076994D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:a1:*:*:*:*:*:*","matchCriteriaId":"56113AB6-8295-4EB7-A003-79049FBB8B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:a2:*:*:*:*:*:*","matchCriteriaId":"362DA97E-B940-4649-803F-26D8C1D16DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:b1:*:*:*:*:*:*","matchCriteriaId":"950A6BA0-C348-4B89-8C18-F2AFA467649F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:b2:*:*:*:*:*:*","matchCriteriaId":"9088D042-F104-4F31-AEBB-75F5A0F03AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:p1:*:*:*:*:*:*","matchCriteriaId":"F159908A-00E7-4EC8-8342-28182F547C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:p2:*:*:*:*:*:*","matchCriteriaId":"6CE0BBF8-7FB8-44DD-8C6B-30A657BA9EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1C49DF07-9612-43C7-9771-B76487B4A9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.1:-:*:*:*:*:*:*","matchCriteriaId":"5C6D8D55-DCD2-4E70-B3C6-76F2134DA336"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.1:b1:*:*:*:*:*:*","matchCriteriaId":"C0F06FC0-6477-4589-B9CB-24B1F893EF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.1:p1:*:*:*:*:*:*","matchCriteriaId":"B3AF9E2C-E0BC-427C-9F13-BCB15916F5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"6CCA07EB-B0CB-40EE-B62E-DB4C408717B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.2:-:*:*:*:*:*:*","matchCriteriaId":"5E91F700-F59A-491F-BA99-53EC79E573D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.2:b1:*:*:*:*:*:*","matchCriteriaId":"53551545-041A-456F-BC81-E05A6B3CB198"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"0F3DBB40-638E-4A4B-99B4-534D2564E146"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.3:-:*:*:*:*:*:*","matchCriteriaId":"0B921430-F03C-42DB-A362-562136B01445"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.3:p1:*:*:*:*:*:*","matchCriteriaId":"FA0C3173-8630-4613-B1D3-711468FC3749"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.3:p2:*:*:*:*:*:*","matchCriteriaId":"F104AD27-0AE0-4853-B19C-1D83070A0DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:-:*:*:*:*:*:*","matchCriteriaId":"4A290541-BF9E-4E18-A941-0ACC40509A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:b1:*:*:*:*:*:*","matchCriteriaId":"F13E1B0F-5731-4949-9D35-497D1D49882C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:p1:*:*:*:*:*:*","matchCriteriaId":"E85A27A0-A83B-4BBF-A3B8-5219F2053902"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:p2:*:*:*:*:*:*","matchCriteriaId":"50D601E4-C5EF-4A6E-9EF8-FB9E24D5C6C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"ADDDFFB6-046E-407E-9B2E-D4BC18D416CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.4:rc2:*:*:*:*:*:*","matchCriteriaId":"042495FE-3E6A-4602-8E5A-8F4BBD9E3245"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.5:-:*:*:*:*:*:*","matchCriteriaId":"331D2BBF-858F-49E8-AD2A-01668848F5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.5:b1:*:*:*:*:*:*","matchCriteriaId":"5EDCDDC5-6A8F-490B-BFB9-094259A7AF9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.5:p1:*:*:*:*:*:*","matchCriteriaId":"5368A7D2-4709-4302-8EB9-D1A16449E2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"A368842A-E2A8-4689-A6CA-2349AAF55EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.6:-:*:*:*:*:*:*","matchCriteriaId":"3DC8FB80-A6CA-46C7-B5CE-FD6B0BD4CF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.6:b1:*:*:*:*:*:*","matchCriteriaId":"9C602DE3-F326-4810-81D9-21CED82D400A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"EA0D6DF6-039F-44FA-9B6B-6ED0A0D898A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.7:-:*:*:*:*:*:*","matchCriteriaId":"01318107-989F-4800-9E30-F89424836D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.7:b1:*:*:*:*:*:*","matchCriteriaId":"DCB3FA8B-597A-4E27-8CC6-D1B164C6A99F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.7:rc1:*:*:*:*:*:*","matchCriteriaId":"2A331218-0BD5-4084-B1B7-A002A7FCDADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.8:-:*:*:*:*:*:*","matchCriteriaId":"CD8082FC-3004-4A18-AA49-67FB49E33E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.8:b1:*:*:*:*:*:*","matchCriteriaId":"7F7B441D-4E20-41B7-8B21-39FCC5E80976"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.8:rc1:*:*:*:*:*:*","matchCriteriaId":"422B12D1-8395-47F1-8A4F-AA964C1AA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.2.8:rc2:*:*:*:*:*:*","matchCriteriaId":"1CC2583E-F9E7-4FB1-B59C-070458E4C228"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.0:-:*:*:*:*:*:*","matchCriteriaId":"368D2368-FC25-419A-B309-400D790DF54F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.0:a1:*:*:*:*:*:*","matchCriteriaId":"90FE2884-4468-4D56-9929-C799FA7BF119"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.0:b1:*:*:*:*:*:*","matchCriteriaId":"B02C7E44-2F8B-40D7-B57A-5B78A6BD891F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"80DC9586-9846-4E61-82F4-F0FF1A61F89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.1:-:*:*:*:*:*:*","matchCriteriaId":"745B6602-696B-4ED8-9D62-D236DA5159AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.1:b1:*:*:*:*:*:*","matchCriteriaId":"43235DDF-B8E1-48F5-906F-F1100F29DEAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"C279D9B3-A774-4D4F-A52B-22CE633ACDE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.2:-:*:*:*:*:*:*","matchCriteriaId":"EC991ABB-E23E-46E4-9D8A-3E351ADE282A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.2:b1:*:*:*:*:*:*","matchCriteriaId":"0241F629-A09E-4CC7-B6A5-48E041C2C390"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.2:rc1:*:*:*:*:*:*","matchCriteriaId":"570BB5C3-CA10-4440-917E-4E88BDDD5656"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.2:rc2:*:*:*:*:*:*","matchCriteriaId":"50C6B9BB-136F-4F79-A329-DE8F361EF00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.3:-:*:*:*:*:*:*","matchCriteriaId":"7AED2A3E-E969-4AC0-8928-9E53A07078BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.3.3:b1:*:*:*:*:*:*","matchCriteriaId":"632B45FA-D76A-4EB6-A208-225B560845FA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","matchCriteriaId":"9070C9D8-A14A-467F-8253-33B966C16886"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183458.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183640.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00066.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2590.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84208","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035196","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kb.isc.org/article/AA-01354","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00023.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3586-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183458.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183640.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2590.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kb.isc.org/article/AA-01354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3586-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0886","sourceIdentifier":"security_alert@emc.com","published":"2016-03-09T23:59:01.163","lastModified":"2026-06-17T00:38:24.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcp_member API call."},{"lang":"es","value":"EMC Documentum xCP 2.1 en versiones anteriores al parche 24 y 2.2 en versiones anteriores al parche 12 permite a usuarios remotos autenticados obtener metadatos de cuenta de usuario sensibles a través de una llamada a la API members/xcp_member."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_xcp:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66A06679-442C-484B-9522-ADEEFBB78323"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_xcp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCAC7A92-DDF2-4A90-B3BC-FB3211F8EF67"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Mar/44","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/84210","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035197","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/44","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/84210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1285","sourceIdentifier":"cve@mitre.org","published":"2016-03-09T23:59:02.133","lastModified":"2026-06-17T00:41:38.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c."},{"lang":"es","value":"named en ISC BIND 9.x en versiones anteriores a 9.9.8-P4 y 9.10.x en versiones anteriores a 9.10.3-P4 no maneja adecuadamente los archivos DNAME cuando analiza gramaticalmente la recuperación de mensajes contestados, lo que permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y salida de demonio) a través de un paquete mal formado en la interfaz rndc (también conocido como canal de control), relacionado con alist.c y sexpr.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-23T17:28:36.470367Z","id":"CVE-2016-1285","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.9.8","matchCriteriaId":"A842D7E6-54A8-44C8-A241-1CE8B7B8BDAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionStartIncluding":"9.10.0","versionEndExcluding":"9.10.3","matchCriteriaId":"D4B076C1-84ED-4924-B65A-994A23B78345"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.8:-:*:*:*:*:*:*","matchCriteriaId":"B41581B6-E576-4273-A2B8-CDB1AD1497B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.8:p2:*:*:*:*:*:*","matchCriteriaId":"B02B1665-1283-4B0B-9AD2-827C8BEFCF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.8:p3:*:*:*:*:*:*","matchCriteriaId":"A7CE97C3-AE65-407B-B209-9809923732AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.8:rc1:*:*:*:*:*:*","matchCriteriaId":"86C0C8FC-6004-4DFF-919C-068DEC26FA6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:-:*:*:*:*:*:*","matchCriteriaId":"D4C46844-7B97-4EBA-9B9D-715498B5FEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:beta1:*:*:*:*:*:*","matchCriteriaId":"BF170094-2C93-4630-A827-C2335D75425B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*","matchCriteriaId":"88359A5D-CE32-4920-BE5D-98EC262B41EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*","matchCriteriaId":"B77760E4-57C5-4A5E-A169-C84409930757"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:*","matchCriteriaId":"24E9CBCA-241C-4EF6-8C0C-FA32E81B8B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*","matchCriteriaId":"893ACAAC-406E-4A1C-970B-A15B42961271"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:*","matchCriteriaId":"D5900A25-FDD7-4900-BF7C-F3ECCB714D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*","matchCriteriaId":"58D3B6FD-B474-4B09-B644-A8634A629280"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"F892F1B0-514C-42F7-90AE-12ACDFDC1033"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FD4EEF7C-CC33-4494-8531-7C0CC28A8823"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CBED083-B935-4C47-BBDA-F39D8EA277ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*","matchCriteriaId":"BD6136E8-74DE-48AF-A8AB-B0E93D34870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:*","matchCriteriaId":"17D4B6F2-514D-4BC2-B2C5-4E2FCCAC594C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"CB6476C7-03F2-4939-AB85-69AA524516D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*","matchCriteriaId":"B12243B2-D726-404C-ABFF-F1AB51BA1783"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*","matchCriteriaId":"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*","matchCriteriaId":"92F31F7F-02E0-4E63-A600-DF8AB4E3BAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*","matchCriteriaId":"A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*","matchCriteriaId":"4FD4237A-C257-4D8A-ABC4-9B2160530A4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*","matchCriteriaId":"5A449C87-C5C3-48FE-9E46-64ED5DD5F193"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*","matchCriteriaId":"F4B6215F-76BF-473F-B325-0975B0EB101E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*","matchCriteriaId":"A1C4A10C-49A3-4103-9E56-F881113BC5D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*","matchCriteriaId":"50E7FD07-A309-48EC-A520-C7F0FA35865C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*","matchCriteriaId":"F868948A-04D7-473B-971F-721302653633"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*","matchCriteriaId":"830A9EBA-88F1-4277-B98F-75AC52A60824"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*","matchCriteriaId":"BFA2ADAB-E486-4DBB-8B84-CC095D102278"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*","matchCriteriaId":"9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d60:*:*:*:*:*:*","matchCriteriaId":"0DD32D8A-7531-4691-B45D-9EACC69A23D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d65:*:*:*:*:*:*","matchCriteriaId":"76DFA52F-5B2E-47DA-9A8E-7D17A7413929"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d66:*:*:*:*:*:*","matchCriteriaId":"4D363E73-ABC4-4E9F-9E7B-86087D3A3F9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d67:*:*:*:*:*:*","matchCriteriaId":"A7502F95-BADC-432A-B7BE-8E9931FA1448"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d70:*:*:*:*:*:*","matchCriteriaId":"9451CD3F-BF4E-4BBC-AD00-660BE2B313C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d71:*:*:*:*:*:*","matchCriteriaId":"C63E8B17-250D-4D74-9A1F-2F3577D9A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d72:*:*:*:*:*:*","matchCriteriaId":"801AB7D7-3407-4F8B-83C4-CC16076DB0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d73:*:*:*:*:*:*","matchCriteriaId":"FA4104D4-3FA2-4936-ACBD-06B0BD0B9E4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d76:*:*:*:*:*:*","matchCriteriaId":"090BB276-C169-4A41-B03D-0EC40D20E8BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d77:*:*:*:*:*:*","matchCriteriaId":"51732A2B-52E2-4356-8409-5CB6D79F23DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46-d10:*:*:*:*:*:*:*","matchCriteriaId":"A6390879-1AB9-4B11-A8A8-6B914F52EB83"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46-d76:-:*:*:*:*:*:*","matchCriteriaId":"D6A2BAF7-8D71-474C-9F72-FF5DABC69749"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*","matchCriteriaId":"AC1FED64-8725-4978-9EBF-E3CD8EF338E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*","matchCriteriaId":"5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*","matchCriteriaId":"6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*","matchCriteriaId":"3C82799B-BD25-4359-9E3D-4D7CA7367525"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*","matchCriteriaId":"094485FF-960C-4533-A2AF-6C4D420D260D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*","matchCriteriaId":"F8BE3661-1DE5-4F57-9384-68C1B34F6812"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*","matchCriteriaId":"B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*","matchCriteriaId":"C6C694C6-C58C-4513-91E8-6CC22A2386E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d51:*:*:*:*:*:*","matchCriteriaId":"64A0CCD4-91BA-440E-A14C-48E67D1F03A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*","matchCriteriaId":"6B65EF51-ED97-4973-94C4-8F66C553F190"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:*","matchCriteriaId":"9EE7C08A-2A4B-4A84-AD95-A890913E2EE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d65:*:*:*:*:*:*","matchCriteriaId":"44C61900-680C-4C74-8B96-ACC93FE9465E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d66:*:*:*:*:*:*","matchCriteriaId":"6A793CCD-397E-45DA-9349-D01C69AB96D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d70:*:*:*:*:*:*","matchCriteriaId":"B6C38637-ABE0-419A-A053-CBE076766551"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d75:*:*:*:*:*:*","matchCriteriaId":"1F87EF0D-E609-4D4A-B228-CEF05C753E68"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*","matchCriteriaId":"856A5668-FA4F-44E9-A3F0-BE4979F631E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*","matchCriteriaId":"F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*","matchCriteriaId":"FA2459ED-DFA5-4701-AF92-C2928C3BD64D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*","matchCriteriaId":"8830C4BC-2B3D-4CCF-A37E-79C2D46159BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d131:*:*:*:*:*:*","matchCriteriaId":"40D42ACF-860C-4B47-8E25-7DEC30FB8064"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*","matchCriteriaId":"C808E08F-1992-43DD-A106-E920DC784831"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*","matchCriteriaId":"C8C94365-988C-4A14-8E49-846152FDC666"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*","matchCriteriaId":"E288F54B-AEA3-412F-85A4-EBDFE74DB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:*","matchCriteriaId":"02AAC05C-1C4B-4F35-A286-52D20DFD6212"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:*","matchCriteriaId":"080422D3-B508-4049-B558-4B04BF2E8AB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:*","matchCriteriaId":"2FAFD8F8-CBD2-45CA-BD3C-875C8FA1D778"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*","matchCriteriaId":"18468579-0195-4DDE-BAA5-4BE4068F3A69"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d25:*:*:*:*:*:*","matchCriteriaId":"6825F6BA-B48F-4E02-938F-6B297E21BA07"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*","matchCriteriaId":"0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*","matchCriteriaId":"870244F3-1C05-4F10-A205-5189BB860F46"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*","matchCriteriaId":"235EE40B-AA15-4F39-8087-A051F4F70995"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*","matchCriteriaId":"17330544-3AFC-463E-A146-2840A8AE17D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*","matchCriteriaId":"8ABA301F-7866-42A5-8391-E07BEAFF06FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*","matchCriteriaId":"884E4A85-ED42-4391-9FDD-9052F957743A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*","matchCriteriaId":"1901864B-688B-4352-A587-4B96B4E49FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*","matchCriteriaId":"78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*","matchCriteriaId":"1B6670FB-9F5A-469B-97F2-074C28572065"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*","matchCriteriaId":"71198992-83AA-4E28-BA7D-A3C1897B5E2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*","matchCriteriaId":"4323D874-C317-4D76-8E2D-C82376D84CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*","matchCriteriaId":"F56067DA-EBA9-481A-B60B-52148584EFBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*","matchCriteriaId":"A283D32F-1CAF-4A5A-83E1-585F2801771F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*","matchCriteriaId":"38A40E03-F915-4888-87B0-5950F75F097D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*","matchCriteriaId":"C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*","matchCriteriaId":"267A3603-BC18-442E-803A-4CAEB6493433"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*","matchCriteriaId":"69FC46D4-39E2-4E2F-A1D3-1001769A7115"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*","matchCriteriaId":"32F83E8B-A816-4F26-95F8-F0DA7F3DF426"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*","matchCriteriaId":"2C433359-BC8B-4E69-BE74-A31EB148083A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*","matchCriteriaId":"BCA2976C-C84B-40D9-A806-588629BFFB13"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*","matchCriteriaId":"A2C7B980-033E-40AC-98C9-B252733B0F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*","matchCriteriaId":"BA8D32E4-1892-46DC-9782-5466A14E18D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*","matchCriteriaId":"25C7C3D0-A203-4979-8375-A610ADD48E9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*","matchCriteriaId":"D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*","matchCriteriaId":"565AE6D8-28A9-4A62-A886-5BAB954695D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*","matchCriteriaId":"0C366F93-BB30-4144-99AE-40B676977834"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*","matchCriteriaId":"488BB10A-1360-42E5-A68D-23D51B332850"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*","matchCriteriaId":"64988F0A-E02C-455B-99C9-4059C896416F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*","matchCriteriaId":"DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*","matchCriteriaId":"9F431D3D-5D55-45A9-98E8-00CB1D4C0196"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*","matchCriteriaId":"A00CA6FB-8F28-4171-B510-8DBA351E80C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*","matchCriteriaId":"988D317A-0646-491F-9B97-853E8E208276"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*","matchCriteriaId":"605F1AD7-5B09-44F0-9017-15AB3EEE559C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*","matchCriteriaId":"CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*","matchCriteriaId":"DF3F9F86-166F-45E4-92B7-3DD3B06199F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*","matchCriteriaId":"4E4EB6B0-8DB2-4199-96E4-30195D49F756"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*","matchCriteriaId":"204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*","matchCriteriaId":"9D8A8E33-473A-4A40-A7B7-47086BB9012A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*","matchCriteriaId":"F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*","matchCriteriaId":"0E0CE79A-157D-47DE-BE65-936BC12470EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*","matchCriteriaId":"05060C06-18C1-40E8-AE01-385B036CC9AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*","matchCriteriaId":"341417EE-71C2-465C-96CA-65B2B5B63FF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*","matchCriteriaId":"A701A73D-A795-47DD-8EB5-55D1CDF67A49"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s12:*:*:*:*:*:*","matchCriteriaId":"CC1EE8D6-8963-49D8-84C7-C9406B04D9EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s13:*:*:*:*:*:*","matchCriteriaId":"03BCD35E-29D3-4F8C-ABE9-32C7010FD796"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*","matchCriteriaId":"0C752783-4843-407B-AF33-0E1D36FCAAF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*","matchCriteriaId":"006EE425-A146-4E10-B050-7E754BB8402A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*","matchCriteriaId":"2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*","matchCriteriaId":"A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*","matchCriteriaId":"4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*","matchCriteriaId":"5E327643-D8D8-4EFA-9F38-BA862A919501"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*","matchCriteriaId":"1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*","matchCriteriaId":"63B00B4F-3E65-4CB2-807D-43908B570AE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*","matchCriteriaId":"0DFDD907-5305-4602-8A9C-685AA112C342"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*","matchCriteriaId":"B0A756E2-C320-405A-B24F-7C5022649E5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*","matchCriteriaId":"2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*","matchCriteriaId":"84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*","matchCriteriaId":"18A4CA3E-DA61-49CC-8476-3A476CCB2B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*","matchCriteriaId":"A7380B3E-09F5-4497-86C6-11EF56BD89F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*","matchCriteriaId":"658841A9-BEC9-433E-81D0-47DE82887C4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*","matchCriteriaId":"5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3-s13:*:*:*:*:*:*","matchCriteriaId":"F144834D-7FC0-4B60-AFCB-AD86BA121719"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*","matchCriteriaId":"C97683B3-A07B-428F-9535-C49B55305679"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*","matchCriteriaId":"A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*","matchCriteriaId":"73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*","matchCriteriaId":"678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*","matchCriteriaId":"7988CE92-71D2-4EEC-B596-4A60E2C1136A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*","matchCriteriaId":"330D176F-8DAD-440C-A623-44FA233FAB01"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*","matchCriteriaId":"8CC5EAB8-1364-4325-9F01-BE7CC479C29D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*","matchCriteriaId":"A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*","matchCriteriaId":"167EEC4F-729E-47C2-B0F8-E8108CE3E985"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*","matchCriteriaId":"0070B31B-59DC-46E9-93E0-1E8BF3560BFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*","matchCriteriaId":"A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*","matchCriteriaId":"42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*","matchCriteriaId":"238EC996-8E8C-4332-916F-09E54E6EBB9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*","matchCriteriaId":"5F711936-33A1-47FC-A6A0-A63088915815"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*","matchCriteriaId":"21B7820C-01D2-401C-9E6D-C83994FD5961"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*","matchCriteriaId":"3D2FBD29-2CAC-41B4-9336-671373EF4A7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*","matchCriteriaId":"EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*","matchCriteriaId":"74B99981-840F-4DAD-976A-5DAEFE9FB93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*","matchCriteriaId":"BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*","matchCriteriaId":"341F2459-8335-40E9-A2B3-BE804D319F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*","matchCriteriaId":"0CD17956-8E8C-489D-927A-5709C05EA705"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.2:r2-s8:*:*:*:*:*:*","matchCriteriaId":"27D9AEBC-2CA3-4E17-9543-D60B10BA2AE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*","matchCriteriaId":"1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*","matchCriteriaId":"5342C3DC-D640-47AB-BD76-3444852988A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*","matchCriteriaId":"8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*","matchCriteriaId":"A2ABC574-B3FC-4025-B50D-7F9EEB28C806"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*","matchCriteriaId":"6F6EAFC3-C3AC-4361-8530-39FCF89702F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*","matchCriteriaId":"92FB1BF6-8852-45D8-817C-36CDBE730801"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*","matchCriteriaId":"6B363298-315C-4FD5-9417-C5B82883A224"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*","matchCriteriaId":"EB08FF7B-01F5-4A19-858E-E2CD19D61A62"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*","matchCriteriaId":"74CA9010-D3DE-487B-B46F-589A48AB0F0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*","matchCriteriaId":"A38F224C-8E9B-44F3-9D4F-6C9F04F57927"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*","matchCriteriaId":"853F146A-9A0F-49B6-AFD2-9907434212F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*","matchCriteriaId":"8F73B88B-E66C-4ACD-B38D-9365FB230ABA"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*","matchCriteriaId":"EE1F82EC-3222-4158-8923-59CDA1909A9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*","matchCriteriaId":"8FE95D15-B5E5-4E74-9464-C72D8B646A6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*","matchCriteriaId":"C012CD07-706A-4E1C-B399-C55AEF5C8309"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:juniper:vsrx:-:*:*:*:*:*:*:*","matchCriteriaId":"36F68E75-E6C6-4DB4-AE0E-C5637ECE7C88"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*","matchCriteriaId":"561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*","matchCriteriaId":"78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*","matchCriteriaId":"927EAB8B-EC3B-4B12-85B9-5517EBA49A30"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*","matchCriteriaId":"2CEBF85C-736A-4E7D-956A-3E8210D4F70B"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4AE06B18-BFB5-4029-A05D-386CFBFBF683"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*","matchCriteriaId":"CD647C15-A686-4C8F-A766-BC29404C0FED"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*","matchCriteriaId":"45AB1622-1AED-4CD7-98F1-67779CDFC321"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*","matchCriteriaId":"48A1DCCD-208C-46D9-8E14-89592B49AB9A"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*","matchCriteriaId":"89276D88-3B8D-4168-A2CD-0920297485F2"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*","matchCriteriaId":"E020556B-693F-4963-BA43-3164AB50FA49"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*","matchCriteriaId":"AB0D31FF-0812-42B8-B25E-03C35EC1B021"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*","matchCriteriaId":"BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*","matchCriteriaId":"80F9DC32-5ADF-4430-B1A6-357D0B29DB78"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*","matchCriteriaId":"8B82D4C4-7A65-409A-926F-33C054DCBFBA"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*","matchCriteriaId":"746C3882-2A5B-4215-B259-EB1FD60C513D"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*","matchCriteriaId":"CE535749-F4CE-4FFA-B23D-BF09C92481E5"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*","matchCriteriaId":"DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*","matchCriteriaId":"2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*","matchCriteriaId":"06A03463-6B1D-4DBA-9E89-CAD5E899B98B"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*","matchCriteriaId":"3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*","matchCriteriaId":"CCC5F6F5-4347-49D3-909A-27A3A96D36C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*","matchCriteriaId":"826F893F-7B06-43B5-8653-A8D9794C052E"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*","matchCriteriaId":"56BA6B86-D3F4-4496-AE46-AC513C6560FA"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*","matchCriteriaId":"462CFD52-D3E2-4F7A-98AC-C589D2420556"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*","matchCriteriaId":"5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*","matchCriteriaId":"2FDDC897-747F-44DD-9599-7266F9B5B7B1"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*","matchCriteriaId":"62FC145A-D477-4C86-89E7-F70F52773801"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*","matchCriteriaId":"06685D0E-A075-49A5-9EF4-34F0F795C8C6"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*","matchCriteriaId":"52F0B735-8C49-4B08-950A-296C9CDE43CA"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*","matchCriteriaId":"68CA098D-CBE4-4E62-9EC0-43E1B6098710"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*","matchCriteriaId":"66F474D4-79B6-4525-983C-9A9011BD958B"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*","matchCriteriaId":"8AA424D4-4DBF-4E8C-96B8-E37741B5403E"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=146191105921542&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0562.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0601.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3511","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035236","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2925-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://kb.isc.org/article/AA-01352","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01380","source":"cve@mitre.org","tags":["Broken Link","Release Notes"]},{"url":"https://kb.isc.org/article/AA-01438","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-07","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=146191105921542&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0562.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0601.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2925-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.isc.org/article/AA-01352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Release Notes"]},{"url":"https://kb.isc.org/article/AA-01438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2088","sourceIdentifier":"cve@mitre.org","published":"2016-03-09T23:59:04.493","lastModified":"2026-06-17T00:43:24.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option."},{"lang":"es","value":"resolver.c en named en ISC BIND 9.10.x en versiones anteriores a 9.10.3-P4, cuando las cookies DNS están habilitadas, permite a atacantes remotos provocar una denegación de servicio (fallo de aserción INSIST y salida de demonio) a través de un paquete mal formado con más de una opción de cookie."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*","matchCriteriaId":"92ECA27E-4248-49BD-A84C-4854CCA19AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.0:a1:*:*:*:*:*:*","matchCriteriaId":"8B0C031F-96F1-4117-83B7-82EE749FC6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.0:a2:*:*:*:*:*:*","matchCriteriaId":"F5D7D5B7-5696-4B51-954E-F32DF9617D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.0:b1:*:*:*:*:*:*","matchCriteriaId":"2B953804-C53B-4C77-AAE4-C60961C23A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.0:b2:*:*:*:*:*:*","matchCriteriaId":"51BBFF21-4E77-44EC-B472-6925904772AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.0:p1:*:*:*:*:*:*","matchCriteriaId":"8FAA10DC-71AC-4E56-900A-B69B24917DE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.0:p2:*:*:*:*:*:*","matchCriteriaId":"9A0C5E26-B896-449D-B004-337C9C0C40F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"444326E3-9D0D-4C9F-9B86-2AB6ADE1F405"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.0:rc2:*:*:*:*:*:*","matchCriteriaId":"812CD568-82C1-4F44-99BA-1F1DF3AF16EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:*","matchCriteriaId":"16EB6777-8E49-4B07-B859-06D0C2F29DC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.1:b1:*:*:*:*:*:*","matchCriteriaId":"A2574190-E1DC-46B9-AE82-5581960D8819"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.1:b2:*:*:*:*:*:*","matchCriteriaId":"5EB06ECC-D36F-4BE7-93BF-8B1C025298EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:*","matchCriteriaId":"54E5A7DC-D432-470A-B95A-AF8EE1ECB561"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.1:p2:*:*:*:*:*:*","matchCriteriaId":"A6F3181D-BB94-4700-A66C-8503B7B4107C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.1:rc1:*:*:*:*:*:*","matchCriteriaId":"8EB2A5D6-DEDF-4962-8117-2F1FADB5B984"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.1:rc2:*:*:*:*:*:*","matchCriteriaId":"26B6584A-707A-463C-BB2F-1D663FE50C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:*","matchCriteriaId":"D35C161A-3CCC-4FFC-9698-98FAE71BBF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:*","matchCriteriaId":"6518FD7D-0249-4793-9531-E5338EEC4C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:*","matchCriteriaId":"D468B433-D785-4A5B-A8CC-B2F1B27BAB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:*","matchCriteriaId":"7BCF9BD9-F557-408C-9CD7-BD0EAD66366F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:*","matchCriteriaId":"407F36C2-886C-48A7-A3AB-E5F9194775D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:*","matchCriteriaId":"24CEA3F3-C4F8-4BD1-92EA-AC1B54A3CFE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.2:rc2:*:*:*:*:*:*","matchCriteriaId":"574C2F69-C5A0-48C6-8F13-C164518B8ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:*","matchCriteriaId":"40BD4A8C-785C-4460-AB52-B249C5DC9BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:b1:*:*:*:*:*:*","matchCriteriaId":"6AAE7145-F1BA-4BEA-841E-DEE08891A3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*","matchCriteriaId":"88359A5D-CE32-4920-BE5D-98EC262B41EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*","matchCriteriaId":"B77760E4-57C5-4A5E-A169-C84409930757"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:*","matchCriteriaId":"24E9CBCA-241C-4EF6-8C0C-FA32E81B8B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*","matchCriteriaId":"893ACAAC-406E-4A1C-970B-A15B42961271"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/84290","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035238","source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01351","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01380","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201610-07","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.isc.org/article/AA-01351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-6485","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-03-12T02:59:00.113","lastModified":"2026-06-17T00:30:56.883","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3030M RTUs with firmware before C3414-500-S02J2, allow remote attackers to obtain sensitive information from device memory by reading a padding field of an Ethernet packet."},{"lang":"es","value":"Schneider Electric Telvent Sage 2300 RTUs con firmware anterior a C3413-500-S01 y LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400 y Sage 3030M RTUs con firmware anterior a C3414-500-S02J2, permiten a atacantes remotos obtener información sensible de memoria del dispositivo leyendo un campo de relleno de un paquete Ethernet."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:schneider-electric:telvent_rtu_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"c3414-500-s02j1","matchCriteriaId":"62D26165-D236-4015-9BFC-FCB18D9C439E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:schneider-electric:sage_1410:-:*:*:*:*:*:*:*","matchCriteriaId":"02E606BD-92F8-4396-AD13-666D76E1E34D"},{"vulnerable":false,"criteria":"cpe:2.3:h:schneider-electric:sage_1430:-:*:*:*:*:*:*:*","matchCriteriaId":"97E29CCC-4E21-411E-80DD-545A66E9B042"},{"vulnerable":false,"criteria":"cpe:2.3:h:schneider-electric:sage_1450:-:*:*:*:*:*:*:*","matchCriteriaId":"66759867-027F-4FA6-ABA6-BFDEE49E8F8D"},{"vulnerable":false,"criteria":"cpe:2.3:h:schneider-electric:sage_2400:-:*:*:*:*:*:*:*","matchCriteriaId":"AA561E2A-4787-48D7-ABBB-26D0D7D24E6F"},{"vulnerable":false,"criteria":"cpe:2.3:h:schneider-electric:sage_3030m:-:*:*:*:*:*:*:*","matchCriteriaId":"BF675FF2-416A-43AA-9DCF-0661DE9B3505"},{"vulnerable":false,"criteria":"cpe:2.3:h:schneider-electric:sage_landac_ii-2:-:*:*:*:*:*:*:*","matchCriteriaId":"4892DAFA-A8E9-4714-B545-251A4EF4EAE0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:schneider-electric:sage_2300:-:*:*:*:*:*:*:*","matchCriteriaId":"C829F113-406B-4FFF-8413-7F3C1303C5DD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:schneider-electric:telvent_rtu_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"c3413-500-001d3","matchCriteriaId":"90797CBE-6CE0-4452-A4E5-AE3BEFBCE034"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-070-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-070-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-1338","sourceIdentifier":"psirt@cisco.com","published":"2016-03-12T02:59:02.660","lastModified":"2026-06-17T00:41:44.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP outage) via a crafted SIP message, aka Bug ID CSCuu43026."},{"lang":"es","value":"Cisco TelePresence Video Communication Server (VCS) X8.5.1 y X8.5.2 permite a usuarios remotos autenticados provocar una denegación de servicio (corte de VoIP) a través de un mensaje SIP manipulado, también conocida como Bug ID CSCuu43026."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:C","baseScore":8.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C645F71B-D8E6-4F2E-9F22-DCFC2B14DDD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.2:*:*:*:*:*:*:*","matchCriteriaId":"ABE4C06E-5916-44D1-B991-049C44FA45F8"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160309-vcs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160309-vcs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1361","sourceIdentifier":"psirt@cisco.com","published":"2016-03-12T02:59:04.910","lastModified":"2026-06-17T00:41:46.933","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900."},{"lang":"es","value":"Cisco IOS XR hasta la versión 4.3.2 en dispositivos Gigabit Switch Router (GSR) 12000 no verifica adecuadamente para una cabecera Bidirectional Forwarding Detection (BFD) en un paquete UDP, lo que permite a atacantes remotos provocar una denegación de servicio (reinicio de tarjeta en línea) a través de un paquete manipulado, también conocida como Bug ID CSCuw56900."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:H/Au:N/C:N/I:N/A:C","baseScore":4.6,"accessVector":"ADJACENT_NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.2,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8E1811B6-737F-407C-8AB0-63E6B031D5AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"81797938-F953-42BE-B287-AA48B9860AF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"92AED038-C73F-4499-B064-F01D80DB0C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5F15240-6323-4766-801A-D887F3EA8A6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D99DC1CF-78DC-4E59-98BA-DD84702D6467"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"0B9FA754-E3D2-4D80-8F4B-41139973D9FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F497A05C-2FC5-427D-8036-2476ACA956C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1131A524-AA7A-4C94-9FFE-54546EA7D2CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"46D1A634-D39C-4305-8915-4AA289FB68EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"21BAB799-3150-46D8-AEA3-9FCC73203221"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"99042285-94AC-4C57-8EAA-EE63C678A94A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"96F48419-AF66-4B50-ACBF-9E38287A64FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB71A24-AA6C-4BAD-BD37-5C191751C9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"3A20B6A9-27B7-4F42-B88D-F4AACC9BC24D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9B9A223A-7A0A-4E31-B8A1-C809373A799D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1ECAB9C3-9248-4663-ABAE-31FFC969EF3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"10596213-9D2B-48A3-A733-744D41E90419"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A07DCCD1-85D5-4ED2-B845-8C6EAC7E9D9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7F57421B-F54C-4C50-8B25-AF787E541C5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A865225-6AEA-430D-8DB6-E70F7ED5E547"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"39F8B336-0DFA-41CE-9EFF-89A09BBDC6D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5BFD77AF-358B-4385-BA8E-1BE9AC166825"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8E593EF3-133A-4E15-9B86-6B451F5C0159"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3BB49EB2-2D99-4C45-80B7-48299A1EBF30"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FB6ABB63-E2D2-42F7-B648-BF6002D1C05E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"58FEC4F2-040A-4D23-8FE0-BC55020766BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"82520CBD-F42F-4E2D-9D36-878737779690"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4DB87708-B088-47F7-BABA-2CD456766897"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFC1194B-56AC-4850-88B0-5EDFF92FABFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"074571B4-65EF-451A-89DC-0797F6E4BFEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D909532E-85F5-4201-8BFF-561A21998D97"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"73D962D3-563F-4CDE-B51D-224D7995FBC9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:xr_12404:*:*:*:*:*:*:*:*","matchCriteriaId":"54D5CEDE-699C-496E-95CF-BEF9BCF55981"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:xr_12406:*:*:*:*:*:*:*:*","matchCriteriaId":"4C32030A-3F87-4F01-AA86-493C8F93F777"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:xr_12410:*:*:*:*:*:*:*:*","matchCriteriaId":"F5CEC5B1-0595-4163-A458-D4FF29F4E117"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:xr_12416:*:*:*:*:*:*:*:*","matchCriteriaId":"DAD5FA50-0753-43EA-8D07-8F5D719E394D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035314","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1562","sourceIdentifier":"cret@cert.org","published":"2016-03-12T02:59:05.783","lastModified":"2026-06-17T00:42:10.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter."},{"lang":"es","value":"La API REST en la aplicación DTE Energy Insight en versiones anteriores a 1.7.8 para Android permite a usuarios remotos autenticados obtener información de cliente no especificada a través de una expresión SQL en el parámetro filter."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dte_energy:insight:1.7.7:*:*:*:*:android:*:*","matchCriteriaId":"AC53DD9A-B786-4529-BD90-E19BF92A8A79"}]}]}],"references":[{"url":"http://jeffq.com/blog/dteenergy-insight/","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/713312","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://jeffq.com/blog/dteenergy-insight/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/713312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-7448","sourceIdentifier":"psirt@us.ibm.com","published":"2016-03-12T15:59:01.430","lastModified":"2026-06-17T00:32:33.420","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX003, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en IBM Maximo Asset Management 7.1 hasta la versión 7.1.1.13, 7.5.0 en versiones anteriores a 7.5.0.9 IFIX003 y 7.6.0 en versiones anteriores a 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 en versiones anteriores a 7.5.0.9 IFIX003, 7.5.1 y 7.6.0 en versiones anteriores a 7.6.0.3 IFIX001 para SmartCloud Control Desk; y Maximo Asset Management 7.1 hasta la versión 7.1.1.13 y 7.2 para Tivoli IT Asset Management for IT y otros determinados productos permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1AF3DBFF-A377-4147-A6EB-BEC6F38FD8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C1CC8BE0-5DFD-4D51-8C14-333596151E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"59D13A5E-AC99-4632-8987-2C1CC3AC9376"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6A0C5995-8850-4AFE-9008-8ED3DE17E2F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"92B6F032-D50D-43C3-ADF2-C67FAD74A58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E3C5BFF2-8361-485D-9DE5-80323EFAFFB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0E8194D6-55CE-4760-8F27-4990FFA32F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2:*:*:*:*:*:*:*","matchCriteriaId":"83470AC7-A06B-4443-9E60-B0AA18B69AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"29A7E369-EBBD-4456-AE47-712CB273F40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DF4B91AA-C45B-42F8-A7AC-D64DE66B5AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"69D30DA9-2096-421C-AEE3-EA83D2AA5996"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3F13CF56-5007-413D-A936-B3667E0051D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"019C8B6D-0669-447E-9EB3-F6A9B42797FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C9956DF3-70A3-49CD-9145-B0C880D3DACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BC336DAB-A3DE-48B7-AC32-89F46F21887B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*","matchCriteriaId":"DE721CF9-0F75-410B-A0F4-542041E25925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F261A268-7CD0-4328-8FBB-6AC40927DDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"537C2C01-302E-48A2-9D50-C98AB6DBC466"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"65C72B48-0C0F-4C90-A34B-528A5C67432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"59090B6A-09AE-4597-A60A-38C20AEA8F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"74B7BC68-4BCB-4E02-9F6D-0F99DBE87FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6FB99EBA-9725-4AB3-B816-5E00ADD7B7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"19A4B2CD-94F5-4449-8D1F-E69C3BA9929C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"9F077F88-37D3-43FA-8EA6-A7FBD9869AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"741A13F4-DED0-43A2-8761-AAEAA0557B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8945E452-7D50-4C59-B8CE-8F1C756DB01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"D0632D29-B9B9-48E1-9762-A80B660CEBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"048BAB63-0A88-4E3D-998B-06EC7917DC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4B590C42-21A1-4C62-8293-5A0D7AD628E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"01604919-877F-4BDF-A137-C1A54E04BEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4577B9CD-45CA-4D01-B99D-7C39131C9C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBB734EA-42EE-4BE0-934E-9E783BCDA31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"16981EC3-76AE-441B-92C4-8DD6E6A1EA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"36BB996E-17BC-4E35-97A0-142946F6B2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BA8B991C-2AE4-499D-B173-BF016D7F78F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"804A2AD3-94FB-4085-AE08-F7120EDDEFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D2659CCD-6D04-4479-BA93-B906DC200424"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C47DB9B3-C8CD-45E9-9F53-617354F3A339"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B028794E-5FA0-4E3D-AC4D-A2826DD6282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"050D798F-F9CC-447B-94F4-81A893349695"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"948B518D-129E-42E7-B07F-5E1CA5056DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7038EBF6-E527-492B-A6A5-14F9A2F79BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:*","matchCriteriaId":"85457F6C-80FE-4E9F-BAB6-58B0485D8B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*","matchCriteriaId":"598EAB6C-7D41-46FE-BB32-D31014CA01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FCA89D39-C008-49CD-9D1E-7109644970AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5F7AF98E-13F3-4D28-9BD1-4D17DFF290D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1CF1B4FA-A938-4A1C-91C7-21255ACDB0DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E5C2A28-739B-42A3-9161-E88BACB1876A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7BB685AE-C72D-41BD-B9E3-0767328EAB73"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8BDC50C9-49EF-47CA-88FB-A8BCDF44922B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7197C12C-5CD7-4F7D-8B38-F792FAABC1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1EE096D4-40A8-4FD8-905C-3B13476BF748"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1E369397-1BC9-42E3-94AB-1CDB01D4838C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"56F90E1F-C0A0-4D6C-A497-9CC3AAF9ECB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_energy_optimization:7.1:*:*:*:*:*:*:*","matchCriteriaId":"47FE69C7-D7C4-4707-B3EF-AC290F2CF92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3D8673B0-D385-467A-A60C-90A436C976D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8DE37A22-D39D-4B80-BD3B-31009824126B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4908AC9D-7410-47A6-BC46-5587C60061A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.1:*:*:*:*:*:*:*","matchCriteriaId":"9B315997-8DD3-4244-B292-68568FB82CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.5:*:*:*:*:*:*:*","matchCriteriaId":"360D781D-AD52-4309-A484-2150B10DFB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BA294D6-4D4D-4ADB-A05B-F578A8877A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4796CF9E-0065-4DE2-8C7A-22EB76F65E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F1ECDC62-A636-4DB4-9C1B-B52722631DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5:*:*:*:*:*:*:*","matchCriteriaId":"75C69BA7-055F-446B-9E76-398D57680BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85D493B1-2E6E-48B4-9FA3-78D8F6447F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7FBE3268-230C-4B1A-B0D9-21B0158EE10F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1:*:*:*:*:*:*:*","matchCriteriaId":"764D9D95-26A8-441E-95E1-55C9CDEA59BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E1297463-A52F-4657-A8D0-366B34C6534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"926B2AE3-B65D-4A36-8B0D-4B0EB42D99A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"26E20654-F96C-4753-85F3-5D956F433D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5:*:*:*:*:*:*:*","matchCriteriaId":"012787EB-E7F0-4CAD-B406-6057A7F6F14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C3795A39-8488-4F09-A7B5-600D4F8E7FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.1:*:*:*:*:*:*:*","matchCriteriaId":"2F780ADF-3151-4B2C-98B9-7FFD0DB47A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F0773CDA-CE18-4717-9C12-8CFD8848EEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D874CE6A-1885-4EB7-B77E-3D22C208E55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0A2CEE0F-EF29-4D41-8E74-0538CAF9D612"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F61A8511-5C5E-4328-998A-28D3229B9B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7BA87EC4-0CBB-4173-BA0B-DD633D271442"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C6442C6D-E74B-47A0-9701-5461F651976F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.1:*:*:*:*:*:*:*","matchCriteriaId":"553D4A7C-E2F0-40F7-88FC-AB372DFCA9DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F82E2804-9085-45AA-A97E-974CE652DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B5543E50-0B54-405B-A10A-06A08FF9E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1480E9F7-9CA1-4F8D-977F-0F13594D0D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C9688CC0-4A67-4884-B327-B403ABF59A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5:*:*:*:*:*:*:*","matchCriteriaId":"88692CEA-1B67-4D1D-86CF-FC0C6DDB2B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55A421E5-F65D-459D-87E3-6398D587F8C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"868B2E44-6193-4159-8D87-C77B468B02DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0F37D573-8E61-41D1-AC4D-D5AAA7C46CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6EECFFA3-6D8F-454F-AD00-2DC51A954B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7078628B-134D-48C6-A461-23CCC41A848E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E249DE7D-6C22-4DA3-B004-17728F06C6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"EBD13DA8-00F5-43CE-BBAE-EB7DE0E46F8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.3:*:*:*:*:*:*:*","matchCriteriaId":"5E3DB206-074F-4533-B466-CB73883FA8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F976949C-D8C6-4567-ADC4-E5C14D0D7C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.6:*:*:*:*:*:*:*","matchCriteriaId":"A9FC166C-B9B7-4DD9-B22E-174247578F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:7.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"54B1037D-F4D1-4CD6-BBD7-6E72EB4A1620"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*","matchCriteriaId":"013D299A-6A9C-44C7-B49C-A4115F4C13E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:*","matchCriteriaId":"3D5C1BCF-1DC0-45E7-B624-9221F8610346"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF1F14EE-6B26-427D-8FFB-94EC042C0FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2697AF-D5A6-470D-9031-8677BBB20EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5680D2FE-5D9F-4DB6-9D5B-48A425CD7014"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89B0CE60-ABE6-44BA-95BA-13977D244963"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"085C1DEF-0B4B-4070-A665-1382AAD04BBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"46F0397C-8B0C-49CD-BBB7-F9286EAFD8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"54234F72-760A-4E80-8172-1AD93F0A372B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DCDD59E9-2CC7-459B-B6C9-9EEFB92FCBAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D6FDA27E-6933-4346-9DF3-BD0387192FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1EDBC180-B618-49A3-824F-B4DDF119FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"25D37ADF-49A6-4EF6-9B69-5EC83DB54CB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E81B34B0-D451-4B33-8F81-36718998C857"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2:*:*:*:*:*:*:*","matchCriteriaId":"95FF438A-31FC-44DD-AC14-C9332F0B0A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B1F47F9-4D3D-439A-BEE8-F270C9BA7B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87F7EA33-B49A-4283-8A00-9B629508143E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2633424C-ACB6-4AE0-AA25-CAE343C88359"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8CE4D7F1-66CF-466E-8747-68AA3D23E03A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A5683C1E-AEF4-40FF-9069-7391C0BEA343"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C0EDB633-C4B8-4770-9B16-94F106C639A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2F2396D4-D367-4811-AD7C-8B8FEE42B008"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"92A3FD84-9497-47B7-8B9C-15DEEF5267F5"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974938","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0818","sourceIdentifier":"security@android.com","published":"2016-03-12T21:59:02.807","lastModified":"2026-06-17T00:38:17.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA, which allows man-in-the-middle attackers to spoof servers by leveraging access to an intermediate CA to issue a certificate, aka internal bug 26232830."},{"lang":"es","value":"La funcionalidad de almacenamiento en caché en la clase TrustManagerImpl en TrustManagerImpl.java en Conscrypt en Android 4.x en versiones anteriores a 4.4.4, 5.x en versiones anteriores a 5.1.1 LMY49H y 6.x en versiones anteriores a 2016-03-01 no maneja correctamente la distinción entre un CA intermedio y un CA root de confianza, lo que permite a atacantes man-in-the-middle suplantar servidores aprovechando el acceso a un CA intermedio para emitir un certificado, también conocida como error interno 26232830."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"},{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9915371-C730-41F7-B86E-7E4DE0DF5385"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84245","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/4c9f9c2201116acf790fca25af43995d29980ee0","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/c4ab1b959280413fb11bf4fd7f6b4c2ba38bd779","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/4c9f9c2201116acf790fca25af43995d29980ee0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/c4ab1b959280413fb11bf4fd7f6b4c2ba38bd779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0821","sourceIdentifier":"security@android.com","published":"2016-03-12T21:59:05.900","lastModified":"2026-06-17T00:38:17.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636."},{"lang":"es","value":"La funcionalidad LIST_POISON en include/linux/poison.h en el kernel de Linux en versiones anteriores a 4.3, como se utiliza en Android 6.0.1 en versiones anteriores a 2016-03-01, no considera adecuadamente la relación del valor mmap_min_addr, lo que hace más fácil a atacantes eludir un mecanismo de protección poison-pointer desencadenando el uso de una entrada de lista no inicializada, también conocido como error interno de Android 26186802, una vulnerabilidad diferente a CVE-2015-3636."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"24716AE4-6BBB-4E20-B9CC-8D2D43014BBD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8a5e5e02fc83aaf67053ab53b359af08c6c49aaf","source":"security@android.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/05/02/6","source":"security@android.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84260","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"security@android.com","tags":["Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/8a5e5e02fc83aaf67053ab53b359af08c6c49aaf","source":"security@android.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8a5e5e02fc83aaf67053ab53b359af08c6c49aaf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/05/02/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/8a5e5e02fc83aaf67053ab53b359af08c6c49aaf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0823","sourceIdentifier":"security@android.com","published":"2016-03-12T21:59:08.027","lastModified":"2026-06-17T00:38:18.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721."},{"lang":"es","value":"La función pagemap_open en fs/proc/task_mmu.c en el kernel de Linux en versiones anteriores a 3.19.3, tal como se utiliza en Android 6.0.1 en versiones anteriores a 2016-03-01, permite a usuarios locales obtener información sensible de la dirección física leyendo un archivo pagemap, también conocido como error interno de Android 25739721."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.19.2","matchCriteriaId":"9E335FBB-6DCB-4D93-92DD-B57D792B07F4"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce","source":"security@android.com"},{"url":"http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3","source":"security@android.com"},{"url":"http://www.securityfocus.com/bid/84265","source":"security@android.com"},{"url":"https://github.com/torvalds/linux/commit/ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce","source":"security@android.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0824","sourceIdentifier":"security@android.com","published":"2016-03-12T21:59:08.883","lastModified":"2026-06-17T00:38:18.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25765591."},{"lang":"es","value":"libmpeg2 en libstagefright en Android 6.x en versiones anteriores a 2016-03-01 permite a atacantes obtener información sensible, y consecuentemente eludir un mecanismo de protección no especificado, a través de datos Bitstream manipulados, según lo demostrado mediante la obtención de acceso Signature o SignatureOrSystem, también conocida como error interno 25765591."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84262","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/external/libmpeg2/+/ffab15eb80630dc799eb410855c93525b75233c3","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/libmpeg2/+/ffab15eb80630dc799eb410855c93525b75233c3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0825","sourceIdentifier":"security@android.com","published":"2016-03-12T21:59:10.180","lastModified":"2026-06-17T00:38:18.420","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039."},{"lang":"es","value":"La Widevine Trusted Application en Android 6.0.1 en versiones anteriores a 2016-03-01 permite a atacantes obtener información sensible del almacenamiento seguro TrustZone aprovechando el acceso al kernel, según lo demostrado mediante la obtención de acceso Signature o SignatureOrSystem, también conocida como error interno 20860039."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84269","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0830","sourceIdentifier":"security@android.com","published":"2016-03-12T21:59:15.057","lastModified":"2026-06-17T00:38:18.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering a large number of configuration entries, and consequently exceeding the maximum size of a configuration file, aka internal bug 26071376."},{"lang":"es","value":"btif_config.c en Bluetooth en Android 6.x en versiones anteriores a 2016-03-01 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída persistente del demonio) desencadenando un gran número de configuraciones de entrada, y consecuentemente excediendo el tamaño máximo de un archivo de configuración, también conocida como error interno 26071376."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:P","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84270","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/system/bt/+/d77f1999ecece56c1cbb333f4ddc26f0b5bac2c5","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/system/bt/+/d77f1999ecece56c1cbb333f4ddc26f0b5bac2c5","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0831","sourceIdentifier":"security@android.com","published":"2016-03-12T21:59:15.947","lastModified":"2026-06-17T00:38:19.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READ_PHONE_STATE permission, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 25778215."},{"lang":"es","value":"La función getDeviceIdForPhone en internal/telephony/PhoneSubInfoController.java en Telephony en Android 5.x en versiones anteriores a 5.1.1 LMY49H y 6.x en versiones anteriores a 2016-03-01 no comprueba los permisos para el READ_PHONE_STATE, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocida como error interno 25778215."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9915371-C730-41F7-B86E-7E4DE0DF5385"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84266","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/79eecef63f3ea99688333c19e22813f54d4a31b1","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/79eecef63f3ea99688333c19e22813f54d4a31b1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0832","sourceIdentifier":"security@android.com","published":"2016-03-12T21:59:16.837","lastModified":"2026-06-17T00:38:19.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25955042."},{"lang":"es","value":"Setup Wizard en Android 5.1.x en versiones anteriores a LMY49H y 6.x en versiones anteriores a 2016-03-01 permite a atacantes físicamente próximos eludir el mecanismo de protección Factory Reset Protection y borrar datos a través de vectores no especificados, también conocida como error interno 25955042."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","baseScore":6.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9915371-C730-41F7-B86E-7E4DE0DF5385"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84264","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-03-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1955","sourceIdentifier":"security@mozilla.org","published":"2016-03-13T18:59:04.613","lastModified":"2026-06-17T00:42:56.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element."},{"lang":"es","value":"Mozilla Firefoz en versiones anteriores a 45.0 permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible leyendo un informe de violación de Content Security Policy (CSP) que contiene información de ruta asociada con un elemento IFRAME."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*","matchCriteriaId":"B5BEF8F1-A70F-455C-BFDD-09E0A658F702"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"44.0.2","matchCriteriaId":"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-18.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1208946","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1208946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1956","sourceIdentifier":"security@mozilla.org","published":"2016-03-13T18:59:05.957","lastModified":"2026-06-17T00:42:56.433","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 45.0 en Linux, cuando se utiliza un controlador de video Intel, permite a atacantes remotos causar una denegación de servicio (consumo de la memoria o corrupción de la memoria de pila) desencadenando el uso de un sombreador WebGL.\""}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"44.0.2","matchCriteriaId":"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*","matchCriteriaId":"B5BEF8F1-A70F-455C-BFDD-09E0A658F702"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-19.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1199923","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1199923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1957","sourceIdentifier":"security@mozilla.org","published":"2016-03-13T18:59:06.817","lastModified":"2026-06-17T00:42:56.563","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array."},{"lang":"es","value":"Fuga de memoria en libstagefright en Mozilla Firefox en versiones anteriores a 45.0 y Firefox ESR 38.x en versiones anteriores a 38.7 permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un archivo MPEG-4 que desencadena una operación de borrado sobre un array."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*","matchCriteriaId":"B5BEF8F1-A70F-455C-BFDD-09E0A658F702"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"44.0.2","matchCriteriaId":"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*","matchCriteriaId":"35BF0AFB-26BA-4BEA-B6B8-11CF88E951DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F007CC6-9391-4E1C-A747-F3DE5E572FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*","matchCriteriaId":"45E9641F-430C-4B3A-BD63-EC13DBD3D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5AADD23B-A8AF-4679-990D-C29A1D6EB5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1343A1FD-98CF-4A6C-A697-1253E538FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6D098567-B55E-4EAC-8FAA-31FAFDD4058F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE0389BC-D295-4957-8AE7-EDAC770F596D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E75E69A5-AC94-4F35-9EFB-1BFF8B78210D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2765E663-C9CF-476A-B7A8-6F02D0E2D72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*","matchCriteriaId":"62B4E871-0ACB-4EC5-8392-EAD0DF25E64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*","matchCriteriaId":"435D6EF5-C879-4121-9D47-EF2236E53409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5963D11-D2F4-40A7-81CE-E034C91FCCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5FB022A7-B792-4AC0-B2CF-AF6F384AE719"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"38.6.0","matchCriteriaId":"525474B4-A489-41FA-8E97-CB9C7F87C524"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3510","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3520","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-20.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2934-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1227052","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2934-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1227052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1958","sourceIdentifier":"security@mozilla.org","published":"2016-03-13T18:59:07.677","lastModified":"2026-06-17T00:42:56.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL."},{"lang":"es","value":"browser/base/content/browser.js en Mozilla Firefox en versiones anteriores a 45.0 y Firefox ESR 38.x en versiones anteriores a 38.7 permite a atacantes remotos suplantar la barra de direcciones a través de un URL javascript:."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"44.0.2","matchCriteriaId":"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*","matchCriteriaId":"35BF0AFB-26BA-4BEA-B6B8-11CF88E951DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F007CC6-9391-4E1C-A747-F3DE5E572FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*","matchCriteriaId":"45E9641F-430C-4B3A-BD63-EC13DBD3D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5AADD23B-A8AF-4679-990D-C29A1D6EB5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1343A1FD-98CF-4A6C-A697-1253E538FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6D098567-B55E-4EAC-8FAA-31FAFDD4058F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE0389BC-D295-4957-8AE7-EDAC770F596D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E75E69A5-AC94-4F35-9EFB-1BFF8B78210D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2765E663-C9CF-476A-B7A8-6F02D0E2D72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*","matchCriteriaId":"62B4E871-0ACB-4EC5-8392-EAD0DF25E64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*","matchCriteriaId":"435D6EF5-C879-4121-9D47-EF2236E53409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5963D11-D2F4-40A7-81CE-E034C91FCCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5FB022A7-B792-4AC0-B2CF-AF6F384AE719"}]}]}],"references":[{"url":"http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3510","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-21.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1228754","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1228754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1965","sourceIdentifier":"security@mozilla.org","published":"2016-03-13T18:59:14.553","lastModified":"2026-06-17T00:42:59.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 45.0 y Firefox ESR 38.x en versiones anteriores a 38.7 no maneja correctamente la secuencia de navegación que devuelve a la página original, lo que permite a atacantes remotos suplantar la barra de direcciones a través de vectores que involucran el método history.back y la propiedad location.protocol."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"44.0.2","matchCriteriaId":"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*","matchCriteriaId":"35BF0AFB-26BA-4BEA-B6B8-11CF88E951DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F007CC6-9391-4E1C-A747-F3DE5E572FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*","matchCriteriaId":"45E9641F-430C-4B3A-BD63-EC13DBD3D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5AADD23B-A8AF-4679-990D-C29A1D6EB5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1343A1FD-98CF-4A6C-A697-1253E538FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6D098567-B55E-4EAC-8FAA-31FAFDD4058F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE0389BC-D295-4957-8AE7-EDAC770F596D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E75E69A5-AC94-4F35-9EFB-1BFF8B78210D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2765E663-C9CF-476A-B7A8-6F02D0E2D72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*","matchCriteriaId":"62B4E871-0ACB-4EC5-8392-EAD0DF25E64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*","matchCriteriaId":"435D6EF5-C879-4121-9D47-EF2236E53409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5963D11-D2F4-40A7-81CE-E034C91FCCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:38.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5FB022A7-B792-4AC0-B2CF-AF6F384AE719"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3510","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-28.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1245264","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-28.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1245264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1967","sourceIdentifier":"security@mozilla.org","published":"2016-03-13T18:59:16.367","lastModified":"2026-06-17T00:42:59.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 45.0 no restringe correctamente la disponibilidad de los tiempos de la API IFRAME Resource Timing, lo que permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de código JavaScript manipulado que se aprovecha de las llamadas history.back y performance.getEntries después de restaurar una sesión del navegador. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2015-7207."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"44.0.2","matchCriteriaId":"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-29.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1246956","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-29.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1246956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1975","sourceIdentifier":"security@mozilla.org","published":"2016-03-13T18:59:24.287","lastModified":"2026-06-17T00:43:00.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors."},{"lang":"es","value":"Múltiples condiciones de carrera en dom/media/systemservices/CamerasChild.cpp en la implementación de WebRTC en Mozilla Firefox en versiones anteriores a 45.0 en Windows podría permitir a atacantes remotos causar una denegación de servicio (corrupción de memoria) o posiblemente tener otro impacto no especificado a través de vectores desconocidos."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webrtc_project:webrtc:-:*:*:*:*:*:*:*","matchCriteriaId":"A512F860-997E-44AC-9908-5F196BE2937A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"44.0.2","matchCriteriaId":"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE"}]}]}],"references":[{"url":"http://hg.mozilla.org/releases/mozilla-release/rev/bafc86c12e63","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-32.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84220","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1035215","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1230768","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://hg.mozilla.org/releases/mozilla-release/rev/bafc86c12e63","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1230768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1976","sourceIdentifier":"security@mozilla.org","published":"2016-03-13T18:59:25.430","lastModified":"2026-06-17T00:43:00.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de uso después de liberación de memoria en la clase DesktopDisplayDevice en la implementación de WebRTC en Mozilla Firefox en versiones anteriores a 45.0 en Windows podría permitir a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de vectores desconocidos."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.1,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"44.0.2","matchCriteriaId":"A2CA2CAD-3088-47C2-AE3A-607E6064E9BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webrtc_project:webrtc:-:*:*:*:*:*:*:*","matchCriteriaId":"A512F860-997E-44AC-9908-5F196BE2937A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-32.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84220","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1035215","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1176340","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1176340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>"}},{"cve":{"id":"CVE-2015-7560","sourceIdentifier":"secalert@redhat.com","published":"2016-03-13T22:59:00.123","lastModified":"2026-06-17T00:32:45.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content."},{"lang":"es","value":"La implementación de SMB1 en smbd en Samba 3.x y 4.x en versiones anteriores a 4.1.23, 4.2.x en versiones anteriores a 4.2.9, 4.3.x en versiones anteriores a 4.3.6 y 4.4.x en versiones anteriores a 4.4.0rc4 permite a usuarios remotos autenticados modificar ACLs arbitrarias utilizando una llamada UNIX SMB1 para crear un enlace simbólico, y después usar una llamada no-UNIX SMB1 para escribir en el contenido de la ACL."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"4.1.23","matchCriteriaId":"25B3770C-EA58-406C-BF07-FD5AB4CBFF96"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.9","matchCriteriaId":"7B71571B-8D9E-41C9-800A-4C7752D40B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3.0","versionEndExcluding":"4.3.6","matchCriteriaId":"0C70D917-053E-4024-AEC2-200D6E88A1B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"85877BF1-8B16-4FED-8CDD-3EE9E1999BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"02A189FF-0E20-4F84-8935-C218F5ED126B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:rc3:*:*:*:*:*:*","matchCriteriaId":"55F79F4D-6C85-4388-B7C4-C07AB5502A0F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178730.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178764.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3514","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84267","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035220","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2922-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=11648","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121842","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2015-7560.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178730.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178764.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2922-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=11648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2015-7560.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0771","sourceIdentifier":"secalert@redhat.com","published":"2016-03-13T22:59:01.797","lastModified":"2026-06-17T00:38:11.663","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record."},{"lang":"es","value":"El servidor DNS interno en Samba 4.x en versiones anteriores a 4.1.23, 4.2.x en versiones anteriores a 4.2.9, 4.3.x en versiones anteriores a 4.3.6 y 4.4.x en versiones anteriores a 4.4.0rc4, cuando está configurado un AD DC permite a usuarios remotos autenticados causar una denegación de servicio (lectura fuera de rango) o posiblemente obtener información sensible de la memoria de proceso cargando un registro DNS TXT manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:P","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0DEEFFF7-DF7C-4641-81A9-1CD64DC29DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2855B3F6-49B6-4D25-BEAC-4D1797D1E100"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6C1F1993-70A2-4104-85AF-3BECB330AB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E955458C-8F5C-4D55-9F78-9E1CB4416F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"866FF7AC-19EA-49E7-B423-9FF57839B580"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1A64C7-B039-4724-B06C-EAC898EB3B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C572E25A-4B44-426D-B637-292A08766D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6D96D806-ED52-4010-9F5F-F84E33C245D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"643FC7D2-FC39-43FA-99E6-805553FE1DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E2B95519-0C9D-473C-912D-E350106DC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DC603E1A-7882-45F0-9E8D-157F191C0FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E4F9321C-B442-4081-8E4A-62BAD95239A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"012A397B-004D-489C-B06D-C0D67E26B1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"392E0C61-7718-4DBC-8F02-6F3C2CBE1783"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D893CD1C-31D7-4F7F-BD0B-BEF75DCB2DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"324AE9D7-C41F-493E-A1AD-FCD869D29D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"68519B1F-F315-4BBD-A4A3-4E1956D81E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"EF745E93-A92E-4AD7-8D42-36E9387C6915"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"30E4B760-417E-45D1-9CE1-AEBC8936BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"BD0DA221-078A-49DC-B0F1-F318FD785664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D72BCA7B-6338-4A7C-AE71-E0B8F6C9F2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"DD8F6AB9-A6C4-443E-A846-EE845BE24F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56C8F7D7-BAAD-4F3A-BA39-44BE0CCADFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EC522377-A6CD-4513-83B4-9ADC15F76B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"55BC4595-5699-4237-BCD7-FD233BA1AECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CB9C10B-284E-48CD-A524-1A6BF828AED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F70DD815-1DAA-4025-8C97-32C7D06D8AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A37DA6E-6EB7-429B-ACE0-2B1220BD62C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CA25E8C-9EFA-4A01-A2F0-CD63A39EDD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"41C33F47-0F28-4AE2-A895-82B5E0F4496D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6EEFF35-E903-4651-A4B4-D92FF26A7509"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B44BD172-80FA-4260-BAFB-251A95E8C7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F09116D2-F168-4305-9A1D-88A1D42739A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"558E0B71-F79E-47B5-90CC-9C165BB15507"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"E8D7E102-DD54-43F2-B008-66F7C243477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8066AB8C-1AE6-4DA3-91DB-4BF67DBBA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2A03CB9E-DEFC-4507-A314-5E0824A66462"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E6708D6E-2098-432D-820A-853032BD9A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"42BA346B-F7C6-4EB3-91BD-2CCC2B688AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F2B689AA-2074-4E9A-93BD-F910510A29AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"3EF22E49-B259-4E13-B371-0C0173E534FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE5C0A8F-A502-4BC1-AC8A-45AE1D16371D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D73876B7-A758-40CB-919D-6720AA7B9564"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"84925F68-F440-4677-B3DF-F87EAC39E235"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"CC0A0B3C-C011-4F27-BE8D-5A89BFC93F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"E7792A65-DB6E-49F4-9447-021EA9A82697"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"4EF3B982-B094-4B54-84A2-4CA199EE4E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1F6811F5-DDCA-4AED-9BF9-4C71550A727D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AE10A1EF-F9CE-4126-9793-FB70A1D512A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7FA4DD6C-1531-420A-B271-EB16EA05470B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"AB6AEA9D-42C8-4C60-86AE-54DB2940A3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"2F221BF0-7B2B-4676-B8F2-2705C05B4034"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"72C395C0-160C-4D8A-A3B6-7E30DD8721EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B17EC5DF-2F00-479B-9775-45DA569BCED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0CC31CBA-10A4-417C-A381-2BB7A68CE0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"65D07800-4CCD-4B98-8D41-778295D1A3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1C4D3BA-781F-4C96-9234-73DB1593C7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4AACDFB6-841E-42A5-AA8D-58E8A38D11D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"FD43D2C5-26D5-41AC-BC20-FACB68D22F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D186867E-18D6-4960-B8BE-A4353D941357"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8643B45-1CE3-492F-BD82-65801F6C6FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7F009D18-204C-4E6D-9827-9FBA9A4FFBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"158DC9D2-2264-48B6-9116-CE6F0138D7C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A4339B46-E92A-4F7C-A0BA-62D7F7C428DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1A3D5E50-874B-48AE-B7C0-264DA0531847"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"60C0F5A3-DB13-4BAC-B633-7E7F54FE34FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"85877BF1-8B16-4FED-8CDD-3EE9E1999BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"02A189FF-0E20-4F84-8935-C218F5ED126B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:rc3:*:*:*:*:*:*","matchCriteriaId":"55F79F4D-6C85-4388-B7C4-C07AB5502A0F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3514","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/84273","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035219","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2922-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=11128","source":"secalert@redhat.com"},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=11686","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/security/CVE-2016-0771.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2922-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=11128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=11686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/security/CVE-2016-0771.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0222","sourceIdentifier":"psirt@us.ibm.com","published":"2016-03-14T01:59:01.467","lastModified":"2026-06-17T00:37:08.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors."},{"lang":"es","value":"IBM Maximo Asset Management 7.6 en versiones anteriores a 7.6.0.3 IFIX001 permite a usuarios remotos autenticados eludir las restricciones de acceso previstas y leer registros de trabajo de órdenes de compra arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B028794E-5FA0-4E3D-AC4D-A2826DD6282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"050D798F-F9CC-447B-94F4-81A893349695"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"948B518D-129E-42E7-B07F-5E1CA5056DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7038EBF6-E527-492B-A6A5-14F9A2F79BDF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:smartcloud_control_desk:-:*:*:*:*:*:*:*","matchCriteriaId":"742BF86E-E5D2-4CC9-BD41-78C243995880"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B028794E-5FA0-4E3D-AC4D-A2826DD6282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"050D798F-F9CC-447B-94F4-81A893349695"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"948B518D-129E-42E7-B07F-5E1CA5056DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7038EBF6-E527-492B-A6A5-14F9A2F79BDF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_government:-:*:*:*:*:*:*:*","matchCriteriaId":"6952A03A-657B-4CE9-8C85-1EBEB6D090FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:-:*:*:*:*:*:*:*","matchCriteriaId":"F0660482-340B-4FDA-8F0A-323BE0167800"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:-:*:*:*:*:*:*:*","matchCriteriaId":"C0E7B2B1-2746-40A4-83FC-DCEDE8B607BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:-:*:*:*:*:*:*:*","matchCriteriaId":"55DB8F6D-F7DB-485B-80D9-368188F2E858"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:-:*:*:*:*:*:*:*","matchCriteriaId":"537D5FEA-7809-4CB6-9D71-FC3C408B2611"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:-:*:*:*:*:*:*:*","matchCriteriaId":"EEE303C7-7873-4754-926D-122FD45337FB"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21976949","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21976949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0262","sourceIdentifier":"psirt@us.ibm.com","published":"2016-03-14T01:59:02.590","lastModified":"2026-06-17T00:37:12.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7.5.0 before 7.5.0.9 IFIX004, and 7.6.0 before 7.6.0.3 IFIX001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Maximo Asset Management 7.1.1 hasta la versión 7.1.1.3, 7.5.0 en versiones anteriores a 7.5.0.9 IFIX004 y 7.6.0 en versiones anteriores a 7.6.0.3 IFIX001 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F261A268-7CD0-4328-8FBB-6AC40927DDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"537C2C01-302E-48A2-9D50-C98AB6DBC466"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"65C72B48-0C0F-4C90-A34B-528A5C67432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F919705D-1394-4443-BE46-117F41A38D87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4B590C42-21A1-4C62-8293-5A0D7AD628E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"01604919-877F-4BDF-A137-C1A54E04BEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4577B9CD-45CA-4D01-B99D-7C39131C9C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBB734EA-42EE-4BE0-934E-9E783BCDA31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"16981EC3-76AE-441B-92C4-8DD6E6A1EA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"36BB996E-17BC-4E35-97A0-142946F6B2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BA8B991C-2AE4-499D-B173-BF016D7F78F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"804A2AD3-94FB-4085-AE08-F7120EDDEFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D2659CCD-6D04-4479-BA93-B906DC200424"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C47DB9B3-C8CD-45E9-9F53-617354F3A339"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B028794E-5FA0-4E3D-AC4D-A2826DD6282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"050D798F-F9CC-447B-94F4-81A893349695"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"948B518D-129E-42E7-B07F-5E1CA5056DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7038EBF6-E527-492B-A6A5-14F9A2F79BDF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21977828","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21977828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1731","sourceIdentifier":"product-security@apple.com","published":"2016-03-14T01:59:03.903","lastModified":"2026-06-17T00:42:31.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream."},{"lang":"es","value":"Apple Software Update en versiones anteriores a 2.2 en Windows no utiliza HTTPS, lo que facilita a atacantes man-in-the-middle suplantar actualizaciones modificando el flujo de datos cliente-servidor."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"},{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:software_update:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3.127","matchCriteriaId":"C4D14BCB-3A83-4032-97A1-A06F8AF54714"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/84283","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035256","source":"product-security@apple.com"},{"url":"https://support.apple.com/kb/HT206091","source":"product-security@apple.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT206091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-2344","sourceIdentifier":"cve@mitre.org","published":"2016-03-16T10:59:00.133","lastModified":"2026-06-17T00:23:57.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in VMware vRealize Automation 6.x before 6.2.4 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en VMware vRealize Automation 6.x en versiones anteriores a 6.2.4 en Linux permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B110EF4-3EA2-4F63-9513-923C420A621A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7E44E9AC-0CEF-4162-8AEE-92270D270FCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1817C16A-21D2-4588-B6EE-7D2AE529E0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D70E7CCA-A05F-4304-ADDB-3D9D06223D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.1:*:*:*:*:*:*:*","matchCriteriaId":"9A43D4F1-404D-4C31-8E26-76A7EC41390D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C9FDD731-F1BD-4F87-AB86-6D0DE29D5FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.2:*:*:*:*:*:*:*","matchCriteriaId":"F18E5102-16EA-4EED-AF84-8F96A3E52666"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FED94068-5DE2-4347-AB37-00589FEA97AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6D313C77-95CB-4681-A14C-8D0ACE31487C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_automation:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1F9F0449-C5FD-4F6B-98C3-B78FDD9F5B77"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035270","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0003.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2075","sourceIdentifier":"cve@mitre.org","published":"2016-03-16T10:59:03.290","lastModified":"2026-06-17T00:43:23.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en VMware vRealize Business Advanced and Enterprise 8.x en versiones anteriores a 8.2.5 en Linux permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_business_advanced_and_enterprise:8.0:*:*:*:*:*:*:*","matchCriteriaId":"85209780-C96A-4ACA-BA12-3ECE64BDFDB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_business_advanced_and_enterprise:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56C35772-6403-447B-BCB8-3709886182EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_business_advanced_and_enterprise:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE20EF05-F4AC-426D-A7B0-87BDAC347366"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_business_advanced_and_enterprise:8.1:*:*:*:*:*:*:*","matchCriteriaId":"CC92507B-C063-4F4E-A827-D41B36BE9894"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_business_advanced_and_enterprise:8.2:*:*:*:*:*:*:*","matchCriteriaId":"CF1C193C-8EBA-4DCE-AD24-35AF1F05A60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_business_advanced_and_enterprise:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C5C537E4-502E-4B8B-93D0-E5E9278FFA6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_business_advanced_and_enterprise:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7ACCA6F8-4826-4418-8CE1-125E50BF228E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_business_advanced_and_enterprise:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FA6DD94C-57F8-49AD-BD1F-C35C1883B6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_business_advanced_and_enterprise:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C6E13286-CAB0-4D47-B248-4039AB972BFE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035270","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0003.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2846","sourceIdentifier":"cve@mitre.org","published":"2016-03-16T10:59:04.277","lastModified":"2026-06-17T00:44:34.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a \"user program block\" protection mechanism via unspecified vectors."},{"lang":"es","value":"Dispositivos Siemens SIMATIC S7-1200 CPU en versiones anteriores a 4.0 permiten a atancantes remotos eludir un mecanismo de protección de \"bloqueo de programa de usuario\" a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7_1200_cpu:-:*:*:*:*:*:*:*","matchCriteriaId":"79270F18-B58F-4F16-ACAD-297AE91F27EB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7_cpu_1200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2","matchCriteriaId":"5BCF4722-1850-48CD-9BCA-6EBD9EFF8147"}]}]}],"references":[{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-833048.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-833048.pdf","source":"cve@mitre.org"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-075-01","source":"cve@mitre.org"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-833048.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-833048.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-075-01","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1992","sourceIdentifier":"cve@mitre.org","published":"2016-03-17T14:59:00.123","lastModified":"2026-06-17T00:43:02.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"HPE ArcSight ESM en versiones anterioes a 6.8c y ArcSight ESM Express en versiones anteriores a 6.9.1, permiten a usuarios remotos autenticados obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_security_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"6.8","matchCriteriaId":"5AD88A86-B77F-4F07-A301-E020D7E8AD56"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_security_manager_express:*:*:*:*:*:*:*:*","versionEndIncluding":"6.9.0","matchCriteriaId":"12FD39F2-8209-40B7-B3BB-047C8F3D6F9E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035307","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048753","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5968","sourceIdentifier":"security@opentext.com","published":"2016-03-18T10:59:00.113","lastModified":"2026-06-17T00:30:12.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en Novell Filr 1.2 en versiones anteriores a Hot Patch 4 permite a atacantes remotos inyectar código web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:filr:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"019EB889-531E-49DB-82BA-2719ADF1960D"}]}]}],"references":[{"url":"https://www.novell.com/support/kb/doc.php?id=7017078","source":"security@opentext.com"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1994","sourceIdentifier":"cve@mitre.org","published":"2016-03-18T10:59:02.910","lastModified":"2026-06-17T00:43:03.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"HPE System Management Homepage en versiones anteriores a 7.5.4 permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.3.1","matchCriteriaId":"D06BF4CE-299F-42E4-BA0A-5D68788C92DF"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035325","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-2286","sourceIdentifier":"cve@mitre.org","published":"2016-03-19T10:59:00.283","lastModified":"2026-06-17T00:23:52.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page, which allows user-assisted remote attackers to discover password-reset tokens by reading a referer log after a victim navigates from this page to a social-sharing site."},{"lang":"es","value":"lms/templates/footer-edx-new.html en Open edX edx-platform en versiones anteriores a 2015-01-29 no restringe adecuadamente enlaces en la página de restablecimiento de contraseña, lo que permite a atacantes remotos asistidos por usuario descubrir los tokens de restablecimiento de contraseña mediante la lectura de un registro de referencia tras la navegación de una víctima desde esta página hacia un sitio de compartición social."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edx:open_edx:*:*:*:*:*:*:*:*","versionEndIncluding":"2015-01-27","matchCriteriaId":"778A1402-E839-44EA-BECA-2A1B7AE4560A"}]}]}],"references":[{"url":"https://github.com/edx/edx-platform/commit/a1ffcc52594b1e7240501aab0ea145f1da3edb5a","source":"cve@mitre.org"},{"url":"https://open.edx.org/CVE-2015-2286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/edx/edx-platform/commit/a1ffcc52594b1e7240501aab0ea145f1da3edb5a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://open.edx.org/CVE-2015-2286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2287","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-03-19T10:59:01.707","lastModified":"2026-06-17T00:43:45.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en XZERES 442SR OS en turbinas de viento 442SR permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xzeres:442sr_os:-:*:*:*:*:*:*:*","matchCriteriaId":"F2082DA4-5E54-4FF3-AD40-CAB7B2243A34"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:xzeres:442sr:-:*:*:*:*:*:*:*","matchCriteriaId":"42EED661-E9F1-4FC4-98EA-4E54433CDFEA"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-342-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-342-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-0283","sourceIdentifier":"psirt@us.ibm.com","published":"2016-03-19T15:59:00.127","lastModified":"2026-06-17T00:37:15.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en la aplicación web del cliente OpenID Connect (OIDC) en IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5 en versiones anteriores a 8.5.5.9 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.0:*:*:*:liberty:*:*:*","matchCriteriaId":"A045E423-6B2A-42D6-BD75-CB7429128B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.1:*:*:*:liberty:*:*:*","matchCriteriaId":"95FA47C1-0AC6-4186-B563-CC0CA58DD85A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.2:*:*:*:liberty:*:*:*","matchCriteriaId":"04599812-6515-48A0-A9C9-0A3B30689D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.3:*:*:*:liberty:*:*:*","matchCriteriaId":"5701BCC0-9E93-41E5-8DC4-EA26C95148D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.4:*:*:*:liberty:*:*:*","matchCriteriaId":"B0ECF4C0-B755-4221-A074-15A775FB452E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.5:*:*:*:liberty:*:*:*","matchCriteriaId":"3029A691-2288-453A-8FC0-7598EF60357C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.6:*:*:*:liberty:*:*:*","matchCriteriaId":"03ED302A-CCAB-400F-8525-C69BF05CD4B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.7:*:*:*:liberty:*:*:*","matchCriteriaId":"14095436-08EA-4DE2-8C4E-8D7380316065"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.8:*:*:*:liberty:*:*:*","matchCriteriaId":"759D5AD7-4EC7-4308-8ACA-16D3C6EEF883"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI58003","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21978293","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035330","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI58003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21978293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7454","sourceIdentifier":"psirt@us.ibm.com","published":"2016-03-21T14:59:00.120","lastModified":"2026-06-17T00:32:34.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors."},{"lang":"es","value":"Business Space en IBM WebSphere Process Server 6.1.2.0 hasta la versión 7.0.0.5 y Business Process Manager Advanced 7.5.x hasta la versión 7.5.1.2, 8.0.x hasta la versión 8.0.1.3, 8.5.0.x hasta la versión 8.5.0.2, 8.5.5.x hasta la versión 8.5.5.0 y 8.5.6.x hasta la versión 8.5.6.2 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y crear una página o un espacio arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"07586269-73DA-4189-B0BD-95D4B0091FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D43CB11-E506-4014-899E-417BDF7E0929"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2B0F3654-3197-4C88-A7B0-F0A7DBF9A9DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"25634A4E-722F-4AC4-AB42-9C50FE5DD093"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B834408E-3838-4473-806C-84A4E3AAB638"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"45F5BEC8-746C-4AF4-99B4-39298CED51A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"744AF0AC-C99F-4D83-85BE-949C3CC58C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F8D07878-33BE-40B8-A6DA-BD5B2BDF6CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"116EA95E-3845-4045-9E9D-F370D6D48A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1278C0A9-D694-4E1A-8C58-E22995B346B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"98B87B46-4C5C-4894-A840-D5354E0519B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"18B56787-8A91-46DD-ACAB-59C8439A2815"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"68E45D5B-C0AE-41CB-BF07-B4692F0062D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DF76BE59-BBBD-42D9-96EA-5974CC489F8F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*","matchCriteriaId":"91BDDE54-95C6-4E95-9427-D83E61355E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*","matchCriteriaId":"8057C7D0-978D-490B-BE80-597A2CB27A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*","matchCriteriaId":"3DEBE193-CDE1-406C-9042-4085AA0EED8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*","matchCriteriaId":"EF781F2F-05FB-4DBD-8BC1-98A630CD375A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*","matchCriteriaId":"0F1442C9-ED96-40C5-BE20-987C928BAD9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*","matchCriteriaId":"E71AC948-9F71-403E-8035-172D5F667B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*","matchCriteriaId":"E77872E9-D66C-47FF-AA1D-7764D65997A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*","matchCriteriaId":"7B3D03C8-B7F4-43AF-9270-555507AAC527"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*","matchCriteriaId":"E69BBEFA-B321-4085-AEA1-BAE2B0B54524"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*","matchCriteriaId":"BE4F0900-83C3-4228-9F3B-2664C1C816F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*","matchCriteriaId":"9942841D-3E36-4159-AA5A-B534CB701B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*","matchCriteriaId":"7A1FCB4E-DC46-4780-9017-1E8E789E785F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*","matchCriteriaId":"19B921EC-DE16-4A2B-BB29-B02A9B416470"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*","matchCriteriaId":"00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*","matchCriteriaId":"66A4A455-A75B-4363-AC6D-DAD50287EB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*","matchCriteriaId":"240E404A-0420-4731-8DFE-076746B14807"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*","matchCriteriaId":"66327978-D257-4ADE-8AEA-22547B0E4541"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54678","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972005","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85089","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1035319","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR54678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3115","sourceIdentifier":"cve@mitre.org","published":"2016-03-22T10:59:02.917","lastModified":"2026-06-17T00:44:59.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección CRLF en session.c en sshd en OpenSSH en versiones anteriores a 7.2p2 permite a usuarios remotos autenticados eludir las restricciones de comandos de shell previstas a través del redireccionamiento de datos X11 manipulados, relacionadas con las funciones (1) do_authenticated1 y (2) session_x11_req."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-29T20:26:37.501191Z","id":"CVE-2016-3115","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-93"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:p1:*:*:*:*:*:*","versionEndIncluding":"7.2","matchCriteriaId":"0CA7032F-2B28-4AF4-B32B-910FE289A845"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"5FEC7F7E-AA94-4405-93D6-D0194A37D3C9"}]}]}],"references":[{"url":"http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c","source":"cve@mitre.org"},{"url":"http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c.diff?r1=1.281&r2=1.282&f=h","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183101.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183122.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178838.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179924.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180491.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184264.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/136234/OpenSSH-7.2p1-xauth-Command-Injection-Bypass.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0465.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0466.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Mar/46","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Mar/47","source":"cve@mitre.org"},{"url":"http://www.openssh.com/txt/x11fwd.adv","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84314","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035249","source":"cve@mitre.org"},{"url":"https://bto.bluecoat.com/security-advisory/sa121","source":"cve@mitre.org"},{"url":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201612-18","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/39569/","source":"cve@mitre.org"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:14.openssh.asc","source":"cve@mitre.org"},{"url":"http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c.diff?r1=1.281&r2=1.282&f=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183122.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178838.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179924.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180491.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/136234/OpenSSH-7.2p1-xauth-Command-Injection-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0465.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Mar/46","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Mar/47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssh.com/txt/x11fwd.adv","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/84314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39569/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:14.openssh.asc","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/93.html\">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>"}},{"cve":{"id":"CVE-2016-3116","sourceIdentifier":"cve@mitre.org","published":"2016-03-22T10:59:03.980","lastModified":"2026-06-17T00:45:00.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Dropbear SSH en versiones anteriores a 2016.72 permite a usuarios remotos autenticados eludir las restricciones de comandos de shell previstas a través del redireccionamiento de datos X11 manipulados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*","versionEndIncluding":"2015.71","matchCriteriaId":"A9EAA4E0-ACE7-43B0-B554-26CDA79D6340"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179261.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179269.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179870.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00105.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00113.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/136251/Dropbear-SSHD-xauth-Command-Injection-Bypass.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Mar/47","source":"cve@mitre.org"},{"url":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115","source":"cve@mitre.org"},{"url":"https://matt.ucc.asn.au/dropbear/CHANGES","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201607-08","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179269.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179870.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00113.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/136251/Dropbear-SSHD-xauth-Command-Injection-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Mar/47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://matt.ucc.asn.au/dropbear/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-08","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/93.html\">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>"}},{"cve":{"id":"CVE-2009-2197","sourceIdentifier":"cve@mitre.org","published":"2016-03-24T01:59:00.353","lastModified":"2026-06-16T23:08:59.083","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to unintended use of that text within a Safari dialog."},{"lang":"es","value":"Apple Safari en versiones anteriores a 9.1 permite a atacantes remotos suplantar la interfaz de usuario a través de una página web que introduce texto en un contexto manipulado, conduciendo al uso no intencionado de ese texto dentro de un diálogo de Safari."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"F39FC2FB-375B-4129-A37F-BC749F8A9648"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85055","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035354","source":"cve@mitre.org"},{"url":"https://support.apple.com/HT206171","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1599","sourceIdentifier":"security@opentext.com","published":"2016-03-24T01:59:04.370","lastModified":"2026-06-17T00:42:14.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en NetIQ Self Service Password Reset (SSPR) 2.x y 3.x en versiones anteriores a 3.3.1 HF2 permite a atacantes remotos inyectar texto web arbitrario o HTML a través de una URL manipulada."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:self_service_password_reset:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1920EF32-30AB-4515-B455-4B24C33A4B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:self_service_password_reset:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CC4ECB5D-4DC6-497D-A051-D48F22E54A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:self_service_password_reset:3.1:*:*:*:*:*:*:*","matchCriteriaId":"6ABCD7C5-CC40-474F-BC43-6719E202B99D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:self_service_password_reset:3.2:*:*:*:*:*:*:*","matchCriteriaId":"131BD0F1-0BBE-4086-B63B-3A6B7BECDF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:self_service_password_reset:3.3:*:*:*:*:*:*:*","matchCriteriaId":"18D790BB-2BAF-4F09-ABC9-6A549443D219"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:self_service_password_reset:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"41AD519C-CA7F-41F8-9BA5-2B1A3D69FCF7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/96837","source":"security@opentext.com"},{"url":"https://bugzilla.netiq.com/show_bug.cgi?id=967461","source":"security@opentext.com"},{"url":"https://www.netiq.com/support/kb/doc.php?id=7017399","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/96837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.netiq.com/show_bug.cgi?id=967461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.netiq.com/support/kb/doc.php?id=7017399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1732","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:05.357","lastModified":"2026-06-17T00:42:31.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors."},{"lang":"es","value":"AppleRAID en Apple OS X en versiones anteriores a 10.11.4 permite a usuarios locales obtener información sensible de la estructura de memoria del kernel o causar una denegación de servicio (lectura fuera de rango) a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.3","matchCriteriaId":"D3C6DA6A-9C87-4B7B-A52D-A66276B5DE82"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035363","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206167","source":"product-security@apple.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1734","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:07.090","lastModified":"2026-06-17T00:42:31.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted USB device."},{"lang":"es","value":"AppleUSBNetworking en Apple iOS en versiones anteriores a 9.3 y OS X en versiones anteriores a 10.11.4 permite a atacantes físicamente próximos ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) a través de un dispositivo USB manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.3","matchCriteriaId":"D3C6DA6A-9C87-4B7B-A52D-A66276B5DE82"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206167","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1737","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:09.903","lastModified":"2026-06-17T00:42:31.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dfont file."},{"lang":"es","value":"Carbon en Apple OS X en versiones anteriores a 10.11.4 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) a través de un archivo .dfont manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.3","matchCriteriaId":"D3C6DA6A-9C87-4B7B-A52D-A66276B5DE82"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035363","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206167","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1745","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:15.543","lastModified":"2026-06-17T00:42:32.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors."},{"lang":"es","value":"IOFireWireFamily in Apple OS X en versiones anteriores a 10.11.4 permite a usuarios locales causar una denegación de servicio (referencia a puntero NULL) a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.3","matchCriteriaId":"D3C6DA6A-9C87-4B7B-A52D-A66276B5DE82"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035363","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206167","source":"product-security@apple.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-1752","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:22.170","lastModified":"2026-06-17T00:42:33.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app."},{"lang":"es","value":"El kernel en Apple iOS en versiones anteriores a 9.3, OS X en versiones anteriores a 10.11.4, tvOS en versiones anteriores a 9.2 y watchOS en versiones anteriores a 2.2 permite a atacantes causar una denegación de servicio a través de una app manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3","matchCriteriaId":"47CB33C1-BF7C-4849-98AD-AD081916E64B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.4","matchCriteriaId":"7A594A00-699D-4899-AEE5-E6B9B948FB62"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2","matchCriteriaId":"6FD4B60C-8B13-49B2-8464-3393F8DC249D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2","matchCriteriaId":"997E9415-9AC2-4E44-88D8-BF9CC554580C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206167","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206168","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206169","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1764","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:32.750","lastModified":"2026-06-17T00:42:34.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL."},{"lang":"es","value":"La implementación de Content Security Policy (CSP) en Mensajes en Apple OS X en versiones anteriores a 10.11.4 permite a atacantes remotos obtener información sensibles a través de una URL javascript:."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.3","matchCriteriaId":"D3C6DA6A-9C87-4B7B-A52D-A66276B5DE82"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035363","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206167","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1770","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:38.123","lastModified":"2026-06-17T00:42:35.560","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL."},{"lang":"es","value":"El componente Reminders en Apple OS X en versiones anteriores a 10.11.4 permite a atacantes eludir un requisito destinado a la confirmación de usuario y desencadenar una acción de llamada a través de una URL tel:."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.3","matchCriteriaId":"D3C6DA6A-9C87-4B7B-A52D-A66276B5DE82"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035363","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206167","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1771","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:39.187","lastModified":"2026-06-17T00:42:35.667","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a denial of service via a crafted web site."},{"lang":"es","value":"La funcionalidad Downloads en Apple Safari en versiones anteriores a 9.1 no gestiona correctamente la expansión de archivo, lo que permite a atacantes remotos causar un denegación de servicio a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"F39FC2FB-375B-4129-A37F-BC749F8A9648"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035354","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206171","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1772","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:40.187","lastModified":"2026-06-17T00:42:35.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors."},{"lang":"es","value":"La funcionalidad Top Sites en Apple Safari en versiones anteriores a 9.1 no gestiona correctamente el almacenamiento de cookies, lo que facilita a servidores web remotos rastrear usuarios a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"F39FC2FB-375B-4129-A37F-BC749F8A9648"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035354","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206171","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1774","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:42.000","lastModified":"2026-06-17T00:42:35.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading backup data that lacks intended restrictions."},{"lang":"es","value":"El servidor Time Machine en Server App en Apple OS X Server en versiones anteriores a 5.1 no notifica al usuario sobre los permisos ignorados durante la realización de una copia de seguridad, lo que facilita a atacantes remotos obtener información sensible en circunstancias oportunistas leyendo los datos de la copia de seguridad que carecen de las restricciones previstas."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.15","matchCriteriaId":"B549527C-F0D8-49B7-846A-822381DBA317"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85054","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035342","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206173","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1776","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:43.780","lastModified":"2026-06-17T00:42:36.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request."},{"lang":"es","value":"Web Server en Apple OS X Server en versiones anteriores a 5.1 no restringe correctamente el acceso a archivos .DS_Store y .htaccess, lo que permite a atacantes remotos obtener información de configuración sensible a través de una petición HTTP."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.15","matchCriteriaId":"B549527C-F0D8-49B7-846A-822381DBA317"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85054","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035342","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206173","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1779","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:46.547","lastModified":"2026-06-17T00:42:36.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain physical-location data via a crafted geolocation request."},{"lang":"es","value":"WebKit en Apple iOS en versiones anteriores a 9.3 y Safari en versiones anteriores a 9.1 permite a atacantes remotos eludir la Same Origin Policy y obtener datos de localización física a través de una petición de geolocalización manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"F39FC2FB-375B-4129-A37F-BC749F8A9648"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1780","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:47.517","lastModified":"2026-06-17T00:42:36.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site."},{"lang":"es","value":"WebKit en Apple iOS en versiones anteriores a 9.3 no impide a vistas de web ocultas la lectura de datos de orientación y movimiento, lo que permite a atacantes remotos obtener información sensible sobre el entorno físico del dispositivo a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1781","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:48.487","lastModified":"2026-06-17T00:42:36.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors."},{"lang":"es","value":"WebKit en Apple iOS en versiones anteriores a 9.3 y Safari en versiones anteriores a 9.1 no gestiona correctamente las URLs adjuntadas, lo que facilita a servidores web remotos rastrear a usuarios a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"F39FC2FB-375B-4129-A37F-BC749F8A9648"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT205635","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205639","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT205639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1782","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:49.360","lastModified":"2026-06-17T00:42:36.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site."},{"lang":"es","value":"WebKit en Apple iOS en versiones anteriores a 9.3 y Safari en versiones anteriores a 9.1 no restringe correctamente los redireccionamientos que especifican un número de puerto TCP, lo que permite a atacantes remotos eludir las restricciones de puerto previstas a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"F39FC2FB-375B-4129-A37F-BC749F8A9648"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1784","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:51.237","lastModified":"2026-06-17T00:42:37.017","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service (resource consumption and application crash) via a crafted web site."},{"lang":"es","value":"La implementación History en WebKit en Apple iOS en versiones anteriores a 9.3, Safari en versiones anteriores a 9.1 y tvOS en versiones anteriores a 9.2 permite a atacantes remotos causar una denegación de servicio (consumo de recurso y caída de aplicación) a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"9.1","matchCriteriaId":"BD845EB8-5280-477C-963C-BA7FFBB775F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3","matchCriteriaId":"47CB33C1-BF7C-4849-98AD-AD081916E64B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2","matchCriteriaId":"6FD4B60C-8B13-49B2-8464-3393F8DC249D"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206169","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1785","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:52.360","lastModified":"2026-06-17T00:42:37.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site."},{"lang":"es","value":"La implementación Page Loading en WebKit en Apple iOS en versiones anteriores a 9.3 y Safari en versiones anteriores a 9.1 no gestiona correctamente el codificado de caracteres durante el acceso a los datos cacheados, lo que permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"F39FC2FB-375B-4129-A37F-BC749F8A9648"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1786","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:53.330","lastModified":"2026-06-17T00:42:37.247","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx (aka redirection) status code, which allows remote attackers to spoof the displayed URL, bypass the Same Origin Policy, and obtain sensitive cached information via a crafted web site."},{"lang":"es","value":"La implementación Page Loading en WebKit en Apple iOS en versiones anteriores a 9.3 y Safari en versiones anteriores a 9.1 no gestiona correctamente las respuestas HTTP con un código de estado 3xx (también conocido como redireccionamiento), lo que permite a atacantes remotos suplantar la URL visualizada, eludir la Same Origin Policy y obtener información sensible de la cache a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"F39FC2FB-375B-4129-A37F-BC749F8A9648"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537948/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1787","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:54.267","lastModified":"2026-06-17T00:42:37.360","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors."},{"lang":"es","value":"Wiki Server en Apple OS X Server en versiones anteriores a 5.1 permite a atacantes remotos obtener información sensible de páginas Wiki a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.15","matchCriteriaId":"B549527C-F0D8-49B7-846A-822381DBA317"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/85054","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1035342","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206173","source":"product-security@apple.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/85054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1788","sourceIdentifier":"product-security@apple.com","published":"2016-03-24T01:59:55.330","lastModified":"2026-06-17T00:42:37.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages."},{"lang":"es","value":"Messages en Apple iOS en versiones anteriores a 9.3, OS X en versiones anteriores a 10.11.4 y watchOS en versiones anteriores a 2.2 no implementa correctamente un mecanismo de protección criptográfico, lo que permite a atacantes remotos leer contenidos adjuntos de los mensajes a través de vectores relacionados con mensajes duplicados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.3","matchCriteriaId":"D3C6DA6A-9C87-4B7B-A52D-A66276B5DE82"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"FBF14807-BA21-480B-9ED0-A6D53352E87F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206167","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206168","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1366","sourceIdentifier":"psirt@cisco.com","published":"2016-03-24T22:59:00.953","lastModified":"2026-06-17T00:41:48.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service (overwrite) via unspecified vectors, aka Bug ID CSCuw75848."},{"lang":"es","value":"Los módulos SCP y SFTP en Cisco IOS XR 5.0.0 hasta la versión 5.2.5 en dispositivos Network Convergence System 6000 utilizan permisos débiles para archivos de sistema, lo que permite a usuarios remotos autenticados causar una denegación de servicio (sobrescritura) a través de vectores no especificados, también conocida como Bug ID CSCuw75848."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:C/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F7620A88-C4B3-4184-846F-1E3FD8A751EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"96BFB5A5-EF04-4334-9A62-558A375DE768"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"95175A2E-14DB-4730-93EA-2291ED7E0DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E5EFC65A-C469-4267-9C0B-DD25E2E8C0F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7DABC2A4-B161-4597-B053-0ECEFCCDD89F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"A0B5C0F4-1BEC-4B54-ABF0-948CFF80E5E0"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035407","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2340","sourceIdentifier":"cret@cert.org","published":"2016-03-25T21:59:00.127","lastModified":"2026-06-17T00:43:51.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The AMF framework in Granite Data Services 3.1.1-SNAPSHOT allows remote authenticated users to read arbitrary files, send TCP requests to intranet servers, or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue."},{"lang":"es","value":"El framework AMF en Granite Data Services 3.1.1-SNAPSHOT permite a usuarios remotos autenticados leer archivos arbitrarios, enviar peticiones TCP a servidores de la intranet o provocar una denegación de servicio a través de una declaración de entidad externa XML en conjunción con una referencia de entidad, relacionada con un problema XML External Entity (XXE)."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graniteds:granite_data_services:3.1.1-snapshot:*:*:*:*:*:*:*","matchCriteriaId":"0DED98FF-5A3B-4F01-A41B-E298AEE5825A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/279472","source":"cret@cert.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/85426","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/279472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/85426","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/611.html\">CWE-611: Improper Restriction of XML External Entity Reference ('XXE')</a>"}},{"cve":{"id":"CVE-2016-1160","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-03-26T01:59:00.120","lastModified":"2026-06-17T00:41:23.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el plugin WP Favorite Posts en versiones anteriores a 1.6.6 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wp_favorite_posts_project:wp_favorite_posts:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"F9D68A68-ED6A-418D-AB1E-786EC6A055AE"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN86517621/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000034","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://wordpress.org/plugins/wp-favorite-posts/changelog/","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN86517621/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://wordpress.org/plugins/wp-favorite-posts/changelog/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1344","sourceIdentifier":"psirt@cisco.com","published":"2016-03-26T01:59:01.247","lastModified":"2026-06-17T00:41:45.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets, aka Bug ID CSCux38417."},{"lang":"es","value":"La implementación de IKEv2 en Cisco IOS hasta la versión 15.6 y IOS XE 3.3 hasta la versión 3.17 permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de paquetes fragmentados, también conocido como Bug ID CSCux38417."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.3s_3.3.0s:*:*:*:*:*:*:*","matchCriteriaId":"4AA80081-3BF8-4597-9815-7D8E65995341"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.3s_3.3.1s:*:*:*:*:*:*:*","matchCriteriaId":"F0CBBF2F-A0B8-4E13-A6FA-08C2598761B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.3s_3.3.2s:*:*:*:*:*:*:*","matchCriteriaId":"D7B194EA-312F-4DA7-9AF8-BC442D231421"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.3sg_3.3.0sg:*:*:*:*:*:*:*","matchCriteriaId":"60648A1F-00D2-4C9D-A9D0-2DA0C032D610"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.3sg_3.3.1sg:*:*:*:*:*:*:*","matchCriteriaId":"6F6A2321-0266-4396-8DBC-AE2A33D951F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.3sg_3.3.2sg:*:*:*:*:*:*:*","matchCriteriaId":"FE7BCA91-7AB6-4467-811E-D47120950F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.3xo_3.3.0xo:*:*:*:*:*:*:*","matchCriteriaId":"1048CA2D-FFA2-4D44-8F2E-3ECFD7A97E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.3xo_3.3.1xo:*:*:*:*:*:*:*","matchCriteriaId":"BFCA15E2-9FBC-49C7-BF47-7B749A11914B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.3xo_3.3.2xo:*:*:*:*:*:*:*","matchCriteriaId":"F01AADBF-D870-4B75-9C34-82B534995C47"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4s_3.4.0as:*:*:*:*:*:*:*","matchCriteriaId":"18C4FC67-6B33-44EA-86BA-5064160D6863"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4s_3.4.0s:*:*:*:*:*:*:*","matchCriteriaId":"BEF19888-9CDE-4677-B65E-BF63BEC1FA16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4s_3.4.1s:*:*:*:*:*:*:*","matchCriteriaId":"1ACFC93D-CF49-45C6-8331-0BC8ACAE42E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4s_3.4.2s:*:*:*:*:*:*:*","matchCriteriaId":"5A71947E-5405-435F-8974-88619239715B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4s_3.4.3s:*:*:*:*:*:*:*","matchCriteriaId":"7A890C08-C3D4-4BDE-9528-03A09F92E69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4s_3.4.4s:*:*:*:*:*:*:*","matchCriteriaId":"A5D100D8-4B49-472A-95FC-54C84B0D5353"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4s_3.4.5s:*:*:*:*:*:*:*","matchCriteriaId":"BEDD36A8-E92E-433E-A63A-80DE5204D29B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4s_3.4.6s:*:*:*:*:*:*:*","matchCriteriaId":"B92B67BE-FFB0-4621-B7DB-81B574734C13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4sg_3.4.0sg:*:*:*:*:*:*:*","matchCriteriaId":"01851517-4ABD-4E4D-9A82-33DE7EDA323E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4sg_3.4.1sg:*:*:*:*:*:*:*","matchCriteriaId":"674C1E76-1C84-4595-97C2-B75D6656EDC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4sg_3.4.2sg:*:*:*:*:*:*:*","matchCriteriaId":"88DA0F1D-31AC-4E99-B268-7F8D62B525F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4sg_3.4.3sg:*:*:*:*:*:*:*","matchCriteriaId":"10205CB9-78AB-4AE5-9838-712F1B7A6DA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4sg_3.4.4sg:*:*:*:*:*:*:*","matchCriteriaId":"424C9ED4-D693-497F-A4BF-2DA878DC2F16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4sg_3.4.5sg:*:*:*:*:*:*:*","matchCriteriaId":"A00F31FD-CCA2-4896-AFD1-324315B8A1DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4sg_3.4.6sg:*:*:*:*:*:*:*","matchCriteriaId":"91CBDE34-E903-42E7-8250-F9C464FF9358"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.4sg_3.4.7sg:*:*:*:*:*:*:*","matchCriteriaId":"7085BDF4-E515-4A97-8537-F2DF7F0313B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.5e_3.5.0e:*:*:*:*:*:*:*","matchCriteriaId":"34C96C5E-C67E-42DB-A400-872C72723397"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.5e_3.5.1e:*:*:*:*:*:*:*","matchCriteriaId":"036EB6B4-3EBA-4AC2-A182-9402257E7D85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.5e_3.5.2e:*:*:*:*:*:*:*","matchCriteriaId":"2AB451EE-C76B-405A-9AEF-28420E9D964D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.5e_3.5.3e:*:*:*:*:*:*:*","matchCriteriaId":"9D070F4E-0539-45C2-B5FC-486135DCA5B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.5s_3.5.0s:*:*:*:*:*:*:*","matchCriteriaId":"D03DF484-5044-40A0-90D5-010A4EACB884"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.5s_3.5.1s:*:*:*:*:*:*:*","matchCriteriaId":"C06826A5-1E47-43F8-BA06-DCEE41B1D298"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.5s_3.5.2s:*:*:*:*:*:*:*","matchCriteriaId":"EF975D9D-126B-4E0B-BA5E-7E4A429275F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.6e_3.6.0e:*:*:*:*:*:*:*","matchCriteriaId":"46D09504-050B-477B-A77C-DC6FB356573C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.6e_3.6.1e:*:*:*:*:*:*:*","matchCriteriaId":"E7515382-E7F8-4309-89F7-D2A0CDBCFE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.6e_3.6.2ae:*:*:*:*:*:*:*","matchCriteriaId":"4849EC40-FC9C-48A6-B0E1-F084737DC860"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.6e_3.6.2e:*:*:*:*:*:*:*","matchCriteriaId":"1B217689-9550-4465-9252-95BB53B3165E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.6e_3.6.3e:*:*:*:*:*:*:*","matchCriteriaId":"5B662063-15FE-46A0-97D5-A10A8C44D2A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.6s_3.6.0s:*:*:*:*:*:*:*","matchCriteriaId":"33FADC21-F6C7-4D97-94C7-3552C3A5830E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.6s_3.6.1s:*:*:*:*:*:*:*","matchCriteriaId":"39FA1C3D-01CB-4E26-9F81-6F53B6195083"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.6s_3.6.2s:*:*:*:*:*:*:*","matchCriteriaId":"65CB65CA-4427-491D-BB64-A4D9D9EAE8D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7e_3.7.0e:*:*:*:*:*:*:*","matchCriteriaId":"B5141179-58CC-42CC-B7C3-881E452BAF0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7e_3.7.1e:*:*:*:*:*:*:*","matchCriteriaId":"0F4F220A-ADA8-4D51-A41F-DC9607285940"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7e_3.7.2e:*:*:*:*:*:*:*","matchCriteriaId":"21577E9B-D717-43EA-AB71-533BCDD1379D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7e_3.7.3e:*:*:*:*:*:*:*","matchCriteriaId":"5925E09E-891F-468C-B7BA-42F2CC83003D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.0s:*:*:*:*:*:*:*","matchCriteriaId":"E677D95D-14DC-475D-978D-6E2A11FD7F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.1s:*:*:*:*:*:*:*","matchCriteriaId":"5CE969A4-9810-42DF-A92C-CD488CEB1150"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.2s:*:*:*:*:*:*:*","matchCriteriaId":"C2CEB4AE-C963-4E8D-923D-8940E93BE51C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.2ts:*:*:*:*:*:*:*","matchCriteriaId":"61E4FE90-CADD-4A39-A343-8C688FA4EDE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.3s:*:*:*:*:*:*:*","matchCriteriaId":"48F5CB41-DC88-42D0-A7AD-F8DAA5386554"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.4as:*:*:*:*:*:*:*","matchCriteriaId":"97399C68-252F-4B89-A20F-A15C5BC51DDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.4s:*:*:*:*:*:*:*","matchCriteriaId":"6B648A93-E55B-487F-B6EE-2E97ED21BED7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.5s:*:*:*:*:*:*:*","matchCriteriaId":"287DE66C-0EA8-4404-A42E-11776B3D7852"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.6s:*:*:*:*:*:*:*","matchCriteriaId":"8D3F59AE-7E69-4694-AFBF-CE278B3BE32F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.7s_3.7.7s:*:*:*:*:*:*:*","matchCriteriaId":"A95E7272-57D4-4DCC-A3B1-82C477439177"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.8e_3.8.0e:*:*:*:*:*:*:*","matchCriteriaId":"0FFE5D14-0382-4BEB-988C-AC9982F8798F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.8e_3.8.1e:*:*:*:*:*:*:*","matchCriteriaId":"7C380CD5-653F-44D9-AE61-576C4B5C50C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.8s_3.8.0s:*:*:*:*:*:*:*","matchCriteriaId":"532A0CC6-614F-4690-A845-E4CB2C05AEE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.8s_3.8.1s:*:*:*:*:*:*:*","matchCriteriaId":"ED4A9A0A-3DB5-4BE4-B6F7-3BE491C4F973"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.8s_3.8.2s:*:*:*:*:*:*:*","matchCriteriaId":"23A5201B-747B-4525-8707-F097051AD0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.9s_3.9.0as:*:*:*:*:*:*:*","matchCriteriaId":"3F66E1DA-94E4-4AEE-BCF6-022B8E966C65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.9s_3.9.0s:*:*:*:*:*:*:*","matchCriteriaId":"43082336-50F9-49D2-91EF-823249F2366B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.9s_3.9.1as:*:*:*:*:*:*:*","matchCriteriaId":"FBD67821-EEBE-49D4-8AAB-4FF81370A976"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.9s_3.9.1s:*:*:*:*:*:*:*","matchCriteriaId":"7F2B3E54-746F-48B7-8DA4-4827BC450841"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.9s_3.9.2s:*:*:*:*:*:*:*","matchCriteriaId":"FE4657ED-003D-48C1-9744-56AA825C96AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.10s_3.10.0s:*:*:*:*:*:*:*","matchCriteriaId":"E659A9C2-4E00-45F3-8F70-D9E18CDEE8D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.10s_3.10.1s:*:*:*:*:*:*:*","matchCriteriaId":"4B359E9A-65D2-447D-AA44-BEA158622923"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.10s_3.10.1xbs:*:*:*:*:*:*:*","matchCriteriaId":"B217F6BD-D867-459A-AC5E-760F0BD36602"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.10s_3.10.2s:*:*:*:*:*:*:*","matchCriteriaId":"8E1B040D-CE1A-41A3-B0E9-1AA0CFC29899"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.10s_3.10.3s:*:*:*:*:*:*:*","matchCriteriaId":"C2CE31EB-5B95-49EC-8955-0D47DDA344CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.10s_3.10.4s:*:*:*:*:*:*:*","matchCriteriaId":"FD279792-84E4-4E9C-9DBD-2E0689279981"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.10s_3.10.5s:*:*:*:*:*:*:*","matchCriteriaId":"67CF54E1-2890-4F70-81A1-04AFB98CC2BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.10s_3.10.6s:*:*:*:*:*:*:*","matchCriteriaId":"137FCB00-9FD5-4C45-9DE4-EC4BB2679049"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.11s_3.11.0s:*:*:*:*:*:*:*","matchCriteriaId":"186A4D4A-5977-45BC-A054-72B20FA574FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.11s_3.11.1s:*:*:*:*:*:*:*","matchCriteriaId":"4DEF72D7-D889-4197-8469-A849050DE808"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.11s_3.11.2s:*:*:*:*:*:*:*","matchCriteriaId":"737754AA-C961-433E-B9D0-7C7ED0310F0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.11s_3.11.3s:*:*:*:*:*:*:*","matchCriteriaId":"AFCFC44D-F618-457B-BD53-F09224F1C599"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.11s_3.11.4s:*:*:*:*:*:*:*","matchCriteriaId":"8BC5C495-4CFE-4126-A358-5E4B40D17CC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.12s_3.12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C2BB58F-437A-4051-8FC4-C16CFD99AC12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.12s_3.12.1s:*:*:*:*:*:*:*","matchCriteriaId":"348B6EB5-4DCF-41EA-BD36-C2A150F0F55C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.12s_3.12.2s:*:*:*:*:*:*:*","matchCriteriaId":"588F5074-C8F3-4D62-89BF-EE0E3945921E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.12s_3.12.3s:*:*:*:*:*:*:*","matchCriteriaId":"42D06EFA-5E74-4868-99DE-81278EA12119"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.12s_3.12.4s:*:*:*:*:*:*:*","matchCriteriaId":"7F16B0E5-30F9-4C2A-A492-F0EF522843A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13s_3.13.0as:*:*:*:*:*:*:*","matchCriteriaId":"73D0F3A6-14D7-4E83-A2E2-2D0FD545DD6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13s_3.13.0s:*:*:*:*:*:*:*","matchCriteriaId":"663B2239-BC08-4C0C-A16C-FA7CFD0B1F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13s_3.13.1s:*:*:*:*:*:*:*","matchCriteriaId":"27806BF7-0971-4F71-A0CC-A9FADEF40F22"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13s_3.13.2as:*:*:*:*:*:*:*","matchCriteriaId":"B6D9A836-B48E-4961-B51C-2014D2859922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13s_3.13.2s:*:*:*:*:*:*:*","matchCriteriaId":"AF0A7ED7-901B-4382-8666-E65A6880C756"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13s_3.13.3s:*:*:*:*:*:*:*","matchCriteriaId":"DC8FBD67-6D74-44EB-A86D-DD8C98DA4998"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13s_3.13.4s:*:*:*:*:*:*:*","matchCriteriaId":"42425169-F2EE-4157-9AA6-CF1B4FD12B72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.14s_3.14.0s:*:*:*:*:*:*:*","matchCriteriaId":"3E1BE381-4C2A-45B1-9647-FB1581BF687A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.14s_3.14.1s:*:*:*:*:*:*:*","matchCriteriaId":"398B04EF-01AD-4C91-B141-0266886AEED2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.14s_3.14.2s:*:*:*:*:*:*:*","matchCriteriaId":"F103A8AB-E32B-487D-9640-5CBB33E0FF5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.14s_3.14.3s:*:*:*:*:*:*:*","matchCriteriaId":"FDA1DC5E-8504-4617-A1FC-86B3F912D556"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15s_3.15.0s:*:*:*:*:*:*:*","matchCriteriaId":"26E62379-6C6E-4B50-97FF-6183F048750F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15s_3.15.1cs:*:*:*:*:*:*:*","matchCriteriaId":"6BEB3538-C2E0-4C44-ACE2-A022A118105F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15s_3.15.1s:*:*:*:*:*:*:*","matchCriteriaId":"FD1C0761-BC14-4FD7-B852-88EAB4E78F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15s_3.15.2s:*:*:*:*:*:*:*","matchCriteriaId":"D9C5187C-C7E0-4446-B528-C5DE1AAB90ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16s_3.16.0cs:*:*:*:*:*:*:*","matchCriteriaId":"70C6DF0C-DC72-43FD-AD44-563075885D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16s_3.16.0s:*:*:*:*:*:*:*","matchCriteriaId":"6CB7CB45-0D3C-450F-A4F4-048D4266693B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16s_3.16.1as:*:*:*:*:*:*:*","matchCriteriaId":"ACDEE8CE-B4E5-4E2F-81D9-3CCECAB234E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16s_3.16.1s:*:*:*:*:*:*:*","matchCriteriaId":"13282A28-8990-4585-93E4-38384E1D174D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.17s_3.17.0s:*:*:*:*:*:*:*","matchCriteriaId":"749C67DC-E456-4230-A011-98E1E24BC1BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:lenovo:thinkcentre_e75s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"m16kt61a","matchCriteriaId":"3AB40F09-336C-4FBB-9A58-9B4033FCE7B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2017-01-06","matchCriteriaId":"0AF8ACF6-2BDF-49C2-B92F-2207D83664BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*","matchCriteriaId":"3A5867B4-EC19-45D4-87BE-867E1D41ECD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*","matchCriteriaId":"09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.50\\(aazi.0\\)c0","matchCriteriaId":"21D9999F-C55E-4BAB-A401-007FB34B2A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:zzinc:keymouse_firmware:3.08:*:*:*:*:windows:*:*","matchCriteriaId":"83223AC7-22F3-4FCA-B11B-B769086DCF04"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ios-ikev2","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85311","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1035382","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ios-ikev2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3119","sourceIdentifier":"cve@mitre.org","published":"2016-03-26T01:59:05.997","lastModified":"2026-06-17T00:45:00.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal."},{"lang":"es","value":"La función process_db_args en plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c en el módulo LDAP KDB en kadmind en MIT Kerberos 5 (también conocido como krb5) hasta la versión 1.13.4 y 1.14.x hasta la versión 1.14.1 no maneja adecuadamente el argumento DB, lo que permite a usuarios remotros autenticados provocar una denegación de servicio (referencia a puntero NULL y caída de demonio) a través de una petición manipulada para modificar una principal."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08FA60A9-10E1-4ACD-819C-17801FAD7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E8973E93-0BBE-4BD3-9983-F6480FFEA228"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A37987D-22F9-47AC-A07A-380F7E509BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8C0C82-749E-4837-88F8-FB56A753B094"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2:beta1:*:*:*:*:*:*","matchCriteriaId":"4EA5E4B3-AD02-4E87-822B-8A6C91DA65FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2:beta2:*:*:*:*:*:*","matchCriteriaId":"1A0B70C1-476D-4FAF-BA96-CB3EB32B7BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8AD672FA-918D-48CB-BC03-4E412AF0DCCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D0B363A4-BB7A-48A2-AE6B-BD2DDD46E7CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"74EF42A5-EC47-4475-81D6-FD1E9C2B8A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"30F2CBEF-6FA1-4E07-8163-6AFEDC93FCE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D133CB0D-8A54-4DAA-9FE8-0B367544DE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7B2C23BD-1995-4F09-B444-87DDDE21817E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"EEF118BE-6351-4768-A3F0-DFE0065273D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2574FC48-C80A-427A-AD12-42676D125D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F01A83F-3BD1-4DED-979A-B4B6B23039FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"6B1422F8-CC87-46EA-8649-A12D6E47335D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ACEB5A36-8F72-417A-AC92-149612EC7BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7B8704B5-F37B-4C61-A924-3774A29BFEB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F953CEBA-BAC0-48DF-A3D0-1FABCC9963E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ED81A044-8A7B-4EEF-A4B3-EA49D76FAAED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"30AA5727-BD83-45CF-B308-BA5F8A577B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"0E088E64-6FBD-4148-8F78-506364B7BB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*","matchCriteriaId":"52F0EECF-7787-442B-9888-D22F7D36C3DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EF344AED-BE00-4A9B-A9DE-C6FB0BEE4617"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"567406CA-58D8-453E-B36E-6D1D2EFC8EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"7830E03F-A813-4E35-893E-BF27395CEFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7764411E-C056-4696-822E-235F2620FAC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4DD315AE-868B-4061-BF01-CDBF59B02499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B639DD5F-71C7-4D9B-BA5C-51CAF64140B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2B904DCE-D59F-45C7-A814-DE42CF02792D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9957FE9E-1E89-4C27-852C-44F866A1834E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6:*:*:*:*:*:*:*","matchCriteriaId":"2C382DAA-68D2-4DD9-BE29-8EEB0BAF1A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"73BB258E-51CF-4D12-836B-BCEA587A3F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"F81DE01C-BA3B-40B4-BD85-17692F0AF8A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.7:*:*:*:*:*:*:*","matchCriteriaId":"DFB1190E-BE7A-4C6B-862D-D5747C64E980"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4B09C090-B842-43C7-B8A6-DBF63D80FEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8:*:*:*:*:*:*:*","matchCriteriaId":"36823B2B-5C72-4FF3-9301-FB263EB8CE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"59AFA33E-FEBC-45F5-9EC6-8AA363163FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"04D83332-B2FD-4E86-A76C-C3F1CD3B3A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"758A0011-20ED-414A-9DF3-50A161DF8BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7768AED0-AE4C-4D4E-8D5D-5B618AB82966"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"534104C5-966E-4740-A354-4F6C210FF25B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"78AF5659-C0E3-49C4-9CA7-FC3917C8AC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.9:*:*:*:*:*:*:*","matchCriteriaId":"86738633-C081-4440-9F75-A775D6DF2228"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7BCFFEE-EA7A-4F26-97AA-31128A179745"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"91A2D7F5-EBDE-4000-AC78-8DD6472E685A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"8E92BFA5-723E-4843-A8D8-BC1D32F34569"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"34C27198-9B55-42FB-AA21-D8B4EB60D926"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.10:*:*:*:*:*:*:*","matchCriteriaId":"FC504264-A9E9-4433-B7AA-6D5015A93FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"77FA352F-520C-4C05-AD52-FC8586DB16B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"9FFB18F7-CB08-4AE4-9DEC-55D047819A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"637E858A-7C16-490C-99A8-F46440E5F504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.10.4:*:*:*:*:*:*:*","matchCriteriaId":"22840B84-2EA4-4E96-A8D8-154AAEADB806"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.11:*:*:*:*:*:*:*","matchCriteriaId":"2D554BDC-CD7D-4572-B1E8-5F627F2C5916"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"65BCD38A-33AD-4FD7-AF5B-8470B24C4139"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"E11F9209-799A-428B-9513-DBD0F19C7BF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"1DA40FAA-B858-4282-8438-247E99FBB002"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.11.4:*:*:*:*:*:*:*","matchCriteriaId":"65795542-D886-46C4-8ECB-4630078DF66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.11.5:*:*:*:*:*:*:*","matchCriteriaId":"D0A4C436-C3D7-469E-8895-8EEC9569EE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.12:*:*:*:*:*:*:*","matchCriteriaId":"79A9FAE9-7219-4D6A-9E94-FFE20223537D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"EA68BC90-FCFC-4C9B-8574-9029DB2358E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"9D0A28CB-173D-4676-B083-E3718213B840"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"AA3D2861-7EB7-4984-AC92-989B427BDB58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13:*:*:*:*:*:*:*","matchCriteriaId":"169D00BD-344F-453C-BE7C-9DF0740080BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.1:*:*:*:*:*:*:*","matchCriteriaId":"765B3248-A524-4A79-858C-E787C1C1599E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.2:*:*:*:*:*:*:*","matchCriteriaId":"BF1BB0AB-2C22-49F9-9D2A-074D2F711BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.3:*:*:*:*:*:*:*","matchCriteriaId":"C8EC001E-9507-410D-836F-93002789D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.4:*:*:*:*:*:*:*","matchCriteriaId":"CC0939BF-9ACB-41A7-9B48-0FBF1176C8CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.14:alpha1:*:*:*:*:*:*","matchCriteriaId":"EC81822F-DC8C-4889-AD53-33216B66A109"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.14:beta1:*:*:*:*:*:*","matchCriteriaId":"C1B23EE0-35EB-46FC-8620-AC0059498D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.14:beta2:*:*:*:*:*:*","matchCriteriaId":"70831CB8-695D-45E8-A829-2E888823E8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.14.0:*:*:*:*:*:*:*","matchCriteriaId":"94DADC6D-0449-40C1-85C6-109CFB8EDFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.14.1:*:*:*:*:*:*:*","matchCriteriaId":"E650B5A3-99CA-491B-A1FB-259EF548D92E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00007.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00055.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2591.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/85392","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035399","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/krb5/krb5/commit/08c642c09c38a9c6454ab43a9b53b2a89b9eef99","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2591.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/85392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/krb5/krb5/commit/08c642c09c38a9c6454ab43a9b53b2a89b9eef99","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-1314","sourceIdentifier":"psirt@cisco.com","published":"2016-03-28T23:59:01.517","lastModified":"2026-06-17T00:41:41.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux80760."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Unified Communications Domain Manager (CDM) 8.1(1) permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocida como Bug ID CSCux80760."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*","matchCriteriaId":"09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160328-ucdm","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035425","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160328-ucdm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1760","sourceIdentifier":"product-security@apple.com","published":"2016-03-29T15:59:00.183","lastModified":"2026-06-17T00:42:34.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app."},{"lang":"es","value":"La API XPC Services en LaunchServices en Apple iOS en versiones anteriores a 9.3 permite a atacantes eludir las restricciones destinadas al manejador de eventos y modificar un events de app arbitrario a través de una app manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0289","sourceIdentifier":"psirt@us.ibm.com","published":"2016-04-05T17:59:06.677","lastModified":"2026-06-17T00:37:15.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors."},{"lang":"es","value":"shiprec.xml en la aplicación SHIPREC en IBM Maximo Asset Management 7.1 y 7.5 en versiones anteriores a 7.5.0.10 y 7.6 en versiones anteriores a 7.6.0.4 permite a usuarios remotos autenticados eludir las restricciones destinadas a la selección de elemento a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*","matchCriteriaId":"DE721CF9-0F75-410B-A0F4-542041E25925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4B590C42-21A1-4C62-8293-5A0D7AD628E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"01604919-877F-4BDF-A137-C1A54E04BEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4577B9CD-45CA-4D01-B99D-7C39131C9C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBB734EA-42EE-4BE0-934E-9E783BCDA31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"16981EC3-76AE-441B-92C4-8DD6E6A1EA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"36BB996E-17BC-4E35-97A0-142946F6B2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BA8B991C-2AE4-499D-B173-BF016D7F78F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"804A2AD3-94FB-4085-AE08-F7120EDDEFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D2659CCD-6D04-4479-BA93-B906DC200424"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C47DB9B3-C8CD-45E9-9F53-617354F3A339"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*","matchCriteriaId":"58B773C7-9386-4704-B85F-748578DBC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B028794E-5FA0-4E3D-AC4D-A2826DD6282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"050D798F-F9CC-447B-94F4-81A893349695"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"948B518D-129E-42E7-B07F-5E1CA5056DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7038EBF6-E527-492B-A6A5-14F9A2F79BDF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21979519","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21979519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1175","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-05T17:59:07.737","lastModified":"2026-06-17T00:41:25.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hijack the authentication of arbitrary users."},{"lang":"es","value":"Vulnerabilidad de CSRF en AQUOS Photo Player HN-PP150 1.02.00.04 hasta la versión 1.03.01.04 permite a atacantes remotos secuestrar la autenticación de usuarios arbitrarios."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sharp:aquos_hn-pp150:-:*:*:*:*:*:*:*","matchCriteriaId":"2065E6AC-3C5D-4C5B-A410-FE72E372C7DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sharp:aquos_hn-pp150_firmware:1.02.00.04:*:*:*:*:*:*:*","matchCriteriaId":"9A0B1E79-4B65-4176-B672-9D69A6FF7281"},{"vulnerable":true,"criteria":"cpe:2.3:o:sharp:aquos_hn-pp150_firmware:1.03.01.04:*:*:*:*:*:*:*","matchCriteriaId":"088E998B-E882-41FA-83DF-2C59A2654593"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN47164236/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000039","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.sharp.co.jp/support/photoplayer/fw_update.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN47164236/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.sharp.co.jp/support/photoplayer/fw_update.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1176","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-05T17:59:08.830","lastModified":"2026-06-17T00:41:25.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page."},{"lang":"es","value":"Desbordamiento de buffer en el control ActiveX en Sharp EVA Animeter permite a atacantes remotos ejecutar código arbitrario a través de una página web manipulada."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sharp:eva_animator:-:*:*:*:*:*:*:*","matchCriteriaId":"1E4B44E6-0051-4699-9853-7496C82CB28B"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN41875357/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000038","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN41875357/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1789","sourceIdentifier":"product-security@apple.com","published":"2016-04-05T17:59:09.817","lastModified":"2026-06-17T00:42:37.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue."},{"lang":"es","value":"Apple iBooks Author en versiones anteriores a 2.4.1 permite a atacantes remotos leer archivos arbitrarios a través de un archivo iBooks Author que contiene una declaración de entidad externa XML en conjunción con una referencia de entidad, relacionada con un problema XML External Entity (XXE)"}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:ibooks_author:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.0","matchCriteriaId":"350C92F5-41AA-4C8E-A8CD-049E1D834B1F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00008.html","source":"product-security@apple.com"},{"url":"https://support.apple.com/kb/HT206224","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT206224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/611.html\">CWE-611: Improper Restriction of XML External Entity Reference ('XXE')</a>"}},{"cve":{"id":"CVE-2016-1177","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-05T18:59:00.117","lastModified":"2026-06-17T00:41:25.253","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors."},{"lang":"es","value":"La pantalla de administración en Falcon WisePoint 4.3.1 y versiones anteriores y WisePoint Authenticator 4.1.19.22 y versiones anteriores permite a atacantes remotos llevar a cabo ataques de secuestro de clic a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:falconsc:wisepoint:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.1","matchCriteriaId":"862AB2D6-D086-44D2-B6E0-0220062705EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:falconsc:wisepoint_authenticator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.19.22","matchCriteriaId":"728F8C29-5F88-4B8D-B5F3-FD4B61026A46"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN28480773/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000037","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://service.falconsc.com/","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN28480773/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://service.falconsc.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3118","sourceIdentifier":"cve@mitre.org","published":"2016-04-06T01:59:28.840","lastModified":"2026-06-17T00:45:00.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en CA API Gateway (anteriormente Layer7 API Gateway) 7.1 en versiones anteriores a 7.1.04, 8.0 hasta la versión 8.3 en versiones anteriores a 8.3.01 y 8.4 en versiones anteriores a 8.4.01 permite a atacantes remotos causar un impacto no especificado a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:api_gateway:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7D1A83AF-E209-4242-82A9-334D7A5859AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:api_gateway:8.0:*:*:*:*:*:*:*","matchCriteriaId":"85A4F8B6-6299-4E98-B643-4BFBAC81C2C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:api_gateway:8.1:*:*:*:*:*:*:*","matchCriteriaId":"05AA0421-CB13-403C-BF9F-F423F47761C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:api_gateway:8.2:*:*:*:*:*:*:*","matchCriteriaId":"371FD974-2C83-4639-B517-4C1F47AD5F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:api_gateway:8.3:*:*:*:*:*:*:*","matchCriteriaId":"82E2C040-0EDF-48DE-997D-1E069AA82002"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:api_gateway:8.4:*:*:*:*:*:*:*","matchCriteriaId":"2559E997-8C81-4CF8-A0A1-36D40E775BD8"}]}]}],"references":[{"url":"http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160405-01-security-notice-for-ca-api-gateway.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160405-01-security-notice-for-ca-api-gateway.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/93.html\">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>"}},{"cve":{"id":"CVE-2016-3968","sourceIdentifier":"cve@mitre.org","published":"2016-04-06T18:59:00.120","lastModified":"2026-06-17T00:46:39.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web script or HTML via the (1) ipFamily parameter to corporate/webpages/trafficdiscovery/LiveConnections.jsp; the (2) ipFamily, (3) applicationname, or (4) username parameter to corporate/webpages/trafficdiscovery/LiveConnectionDetail.jsp; or the (5) X-Forwarded-For HTTP header."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en dispositivos Sophos Cyberoam CR100iNG UTM con firmware 10.6.3 MR-1 build 503, dispositivos CR35iNG UTM con firmware 10.6.2 MR-1 build 383 y dispositivos CR35iNG UTM con firmware 10.6.2 Build 378 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro (1) ipFamily en corporate/webpages/trafficdiscovery/LiveConnections.jsp; el parámetro (2) ipFamily, (3) applicationname o (4) username en corporate/webpages/trafficdiscovery/LiveConnectionDetail.jsp; o (5) la cabecera X-Forwarded-For HTTP."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:cyberoam_cr100ing_utm:-:*:*:*:*:*:*:*","matchCriteriaId":"AA5F8E8C-782B-4A5A-A42A-37C6FFDA0F64"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sophos:cyberoam_cr100ing_utm_firmware:10.6.3_mr-1_build_503:*:*:*:*:*:*:*","matchCriteriaId":"E1815694-3DBE-409D-9500-F03F6A9C8E93"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:cyberoam_cr35ing_utm:-:*:*:*:*:*:*:*","matchCriteriaId":"66ADACF6-69F0-4266-AEB5-1C3527028629"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sophos:cyberoam_cr35ing_utm_firmware:10.6.2_build_378:*:*:*:*:*:*:*","matchCriteriaId":"2DC9F6ED-B657-4FD9-BB1A-840B01A8E006"},{"vulnerable":true,"criteria":"cpe:2.3:o:sophos:cyberoam_cr35ing_utm_firmware:10.6.2_mr-1_build_383:*:*:*:*:*:*:*","matchCriteriaId":"3A26058D-1707-4487-AF46-C0F8EC959368"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136561/Sophos-Cyberoam-NG-Series-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5313.php","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/136561/Sophos-Cyberoam-NG-Series-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5313.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3969","sourceIdentifier":"cve@mitre.org","published":"2016-04-06T18:59:01.277","lastModified":"2026-06-17T00:46:39.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote attackers to inject arbitrary web script or HTML via an attachment in a blocked email."},{"lang":"es","value":"Vulnerabilidad de XSS en McAfee Email Gateway (MEG) 7.6.x en versiones anteriores a 7.6.404, cuando File Filtering está habilitado con la acción establecida a ESERVICES:REPLACE, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un archivo adjunto en un correo electrónico bloqueado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:email_gateway:7.6:*:*:*:*:*:*:*","matchCriteriaId":"FFD702F1-1034-4601-8091-087ABD185BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:email_gateway:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"1032A4FB-7E53-42E2-BEE8-A090990445EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:email_gateway:7.6.2:*:*:*:*:*:*:*","matchCriteriaId":"FB02BDD4-8E02-4821-B7C8-CDDF1B421C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:email_gateway:7.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F3AC8D63-097E-42A2-B21A-48D1AFB00AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:email_gateway:7.6.4:*:*:*:*:*:*:*","matchCriteriaId":"337C230B-36E9-4F5A-8D51-A3C13E787995"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035470","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10153","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1169","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-06T23:59:04.597","lastModified":"2026-06-17T00:41:24.457","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el plugin Casebook en versiones anteriores a 0.9.4 para baserCMS permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hiniarata:casebook_plugin:*:*:*:*:*:basercms:*:*","versionEndIncluding":"0.9.3","matchCriteriaId":"11CFA96B-329E-44C9-9922-21CFC8596D0A"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN55801246/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000044","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://hiniarata.jp/news/archives/55","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN55801246/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://hiniarata.jp/news/archives/55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1171","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-06T23:59:06.737","lastModified":"2026-06-17T00:41:24.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el plugin Recruit en versiones anteriores a 0.9.3 para baserCMS permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hiniarata:casebook_plugin:*:*:*:*:*:basercms:*:*","versionEndIncluding":"0.9.2","matchCriteriaId":"23B127F7-D398-4CE3-BBB0-E94E34F5AEB0"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN13288761/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000040","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://hiniarata.jp/news/archives/55","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN13288761/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://hiniarata.jp/news/archives/55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1173","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-06T23:59:08.630","lastModified":"2026-06-17T00:41:24.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el plugin Menubook en versiones anteriores a 0.9.3 para baserCMS permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hiniarata:casebook_plugin:*:*:*:*:*:basercms:*:*","versionEndIncluding":"0.9.2","matchCriteriaId":"23B127F7-D398-4CE3-BBB0-E94E34F5AEB0"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN26627848/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000042","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://hiniarata.jp/news/archives/55","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN26627848/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://hiniarata.jp/news/archives/55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1346","sourceIdentifier":"psirt@cisco.com","published":"2016-04-06T23:59:13.740","lastModified":"2026-06-17T00:41:45.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service (panic and reboot) via a crafted sequence of IPv6 packets, aka Bug ID CSCuu46673."},{"lang":"es","value":"El kernel en Cisco TelePresence Server 3.0 hasta la versión 4.2(4.18) en dispositivos Mobility Services Engine (MSE) 8710 permite a atacantes remotos causar una denegación de servicio (pánico y reinicio) a través de una secuencia de paquetes IPv6 manipulada, también conocido como Bug ID CSCuu46673."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:emc_powerscale_onefs:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FF89B320-6D5A-4E46-A1FA-FCDB31F325C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2017-01-06","matchCriteriaId":"0AF8ACF6-2BDF-49C2-B92F-2207D83664BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*","matchCriteriaId":"3A5867B4-EC19-45D4-87BE-867E1D41ECD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.50\\(aazi.0\\)c0","matchCriteriaId":"21D9999F-C55E-4BAB-A401-007FB34B2A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:zzinc:keymouse_firmware:3.08:*:*:*:*:windows:*:*","matchCriteriaId":"83223AC7-22F3-4FCA-B11B-B769086DCF04"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:telepresence_server_mse_8710:-:*:*:*:*:*:*:*","matchCriteriaId":"411829A8-56C6-4851-8063-97F03C7B66B2"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-cts","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035499","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-cts","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2277","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-06T23:59:15.897","lastModified":"2026-06-17T00:43:44.560","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file."},{"lang":"es","value":"IAB.exe en Rockwell Automation Integrated Architecture Builder (IAB) en versiones anteriores a 9.6.0.8 y 9.7.x en versiones anteriores a 9.7.0.2 permite a atacantes remotos ejecutar código arbitrario a través de un archivo project manipulado."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.3,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rockwellautomation:integrated_architecture_builder:*:*:*:*:*:*:*:*","versionEndIncluding":"9.6.0.7","matchCriteriaId":"8233CD4B-EFC7-444E-8A14-6BA2F0E84028"},{"vulnerable":true,"criteria":"cpe:2.3:a:rockwellautomation:integrated_architecture_builder:9.7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6888DBC2-2D7D-4724-8F2C-343BF20E5B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:rockwellautomation:integrated_architecture_builder:9.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6D2E7F5D-21F9-4BC0-9C2A-FEF646E275E5"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-056-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-056-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-2291","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-06T23:59:17.663","lastModified":"2026-06-17T00:43:46.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors."},{"lang":"es","value":"Pro-face GP-Pro EX EX-ED en versiones anteriores a 4.05.000, PFXEXEDV en versiones anteriores a 4.05.000, PFXEXEDLS en versiones anteriores a 4.05.000 y PFXEXGRPLS en versiones anteriores a 4.05.000 permite a atacantes remotos ejecutar código arbitrario o causar denegación de servicio (lectura fuera de rango) a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:proface_gp-pro_ex_ex-ed:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"A2514428-2463-432A-940A-5C46E56B1989"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedls:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"5337F7BF-3352-456A-B11D-F481874B4CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedv:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"D3FF0F1A-D633-40D7-8AE4-0F36419113FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexgrpls:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"4EF38666-B916-410C-993C-5386186CCDCE"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-2292","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-06T23:59:18.537","lastModified":"2026-06-17T00:43:46.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de buffer basado en pila en Pro-face GP-Pro EX EX-ED en versiones anteriores a 4.05.000, PFXEXEDV en versiones anteriores a 4.05.000, PFXEXEDLS en versiones anteriores a 4.05.000 y PFXEXGRPLS en versiones anteriores a 4.05.000 permite a atacantes remotos ejecutar código arbitrario a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:proface_gp-pro_ex_ex-ed:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"A2514428-2463-432A-940A-5C46E56B1989"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedls:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"5337F7BF-3352-456A-B11D-F481874B4CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedv:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"D3FF0F1A-D633-40D7-8AE4-0F36419113FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexgrpls:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"4EF38666-B916-410C-993C-5386186CCDCE"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-1563","sourceIdentifier":"cve@mitre.org","published":"2016-04-07T10:59:02.383","lastModified":"2026-06-17T00:42:10.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."},{"lang":"es","value":"NetApp Clustered Data ONTAP 8.3.1 no verifica correctamente los certificados X.509 de servidores TLS, lo que permite a atacantes man-in-the-middle suplantar servidores y obtener información sensible a través de un certificado manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:clustered_data_ontap:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"0BF6074B-1FE8-400E-8ACA-58AE9CDA19F4"}]}]}],"references":[{"url":"https://kb.netapp.com/support/index?page=content&id=9010064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160310-0002/","source":"cve@mitre.org"},{"url":"https://kb.netapp.com/support/index?page=content&id=9010064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160310-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8305","sourceIdentifier":"cve@mitre.org","published":"2016-04-07T19:59:00.110","lastModified":"2026-06-17T00:34:17.097","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege."},{"lang":"es","value":"Smarphones Huawei Sophia-L10 con software anterior a P7-L10C900B852 permiten a atacantes provocar una denegación de servicio (pánico del sistema) a través de una aplicación manipulada con privilegios de system o camera."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:p7:-:*:*:*:*:*:*:*","matchCriteriaId":"1ADB732B-F79A-4692-A1A6-117522D84CCF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p7_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"p7-l10c900b852","matchCriteriaId":"1DCB9104-DFC7-4A81-8D2E-89FF349E989E"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0734","sourceIdentifier":"secalert@redhat.com","published":"2016-04-07T19:59:01.367","lastModified":"2026-06-17T00:38:07.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element."},{"lang":"es","value":"La consola de administración basada en web en Apache ActiveMQ 5.x en versiones anteriores a 5.13.2 no envía una cabecera X-Frame-Options HTTP, lo que facilita a atacantes remotos llevar a cabo ataques de secuestro de clic a través de una página web manipulada que contiene un elemento (1) FRAME o (2) IFRAME."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"436F59B9-507A-4B4E-A9F3-022616866151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F58D9E69-CBF2-4FB6-B062-ED21F83CBCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"05D6EC30-88DC-4424-BF86-D9C0DA5E191C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"82ACD6BA-257F-49D0-8944-0991FB038533"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C43FD7A1-FC03-47BC-B6C6-02C0F1466762"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A7A8D571-2925-4F61-B3F0-8F4A3776F6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"47B31CD9-A3BB-427C-A631-2E8168DD1985"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B904806-6796-4947-BDF4-EEA5681147E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"61B4A1EE-7F62-4602-A102-8AD8E9FD528F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"6075BF1D-AC7C-46E3-A730-4E9A98856520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"623530FC-12E9-480B-AFA0-C19FCFFA5D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5755A41-0DBE-4F54-A1C1-4F65DCC6ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"11AADFBF-AC60-4535-892C-BE90BE858172"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"AC5143E8-B392-4954-9C0D-DD39388B669F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.8.0:*:*:*:*:*:*:*","matchCriteriaId":"F4C0A644-8667-4ABD-8BB3-46289DCD3A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"607B6541-973A-4FF5-8106-A30076CA353C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.9.1:*:*:*:*:*:*:*","matchCriteriaId":"08310F87-4C45-436F-A707-A22A4ACB1587"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.10.0:*:*:*:*:*:*:*","matchCriteriaId":"4243B47C-26B9-45BE-B66A-F1534D18A265"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.10.1:*:*:*:*:*:*:*","matchCriteriaId":"26258CBF-39D0-45FD-AC6B-3D9840CB88EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"532FC7B8-31FD-459C-B757-4D17D4E6ED63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.11.0:*:*:*:*:*:*:*","matchCriteriaId":"36710BEE-E9B8-4979-BB75-6CEF7836268B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.11.1:*:*:*:*:*:*:*","matchCriteriaId":"F15DF0DF-FDBD-4196-88DE-023CF90AA0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.11.2:*:*:*:*:*:*:*","matchCriteriaId":"0E1A027B-EDBB-4305-BCE2-5DA862F9A3A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.12.0:*:*:*:*:*:*:*","matchCriteriaId":"1DA90EA1-64F2-44DD-86A8-E35191C79446"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.12.1:*:*:*:*:*:*:*","matchCriteriaId":"8E7D827D-8180-4605-98CB-03436F916B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.12.2:*:*:*:*:*:*:*","matchCriteriaId":"7D2FC821-2FFF-4710-92CF-FEB74C1A9CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.13.0:*:*:*:*:*:*:*","matchCriteriaId":"D00022D7-5D5E-460D-8A82-20E35DB290BC"}]}]}],"references":[{"url":"http://activemq.apache.org/security-advisories.data/CVE-2016-0734-announcement.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/10/11","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/84321","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035327","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1424","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","source":"secalert@redhat.com"},{"url":"http://activemq.apache.org/security-advisories.data/CVE-2016-0734-announcement.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/10/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2858","sourceIdentifier":"secalert@redhat.com","published":"2016-04-07T19:59:03.483","lastModified":"2026-06-17T00:44:36.423","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption."},{"lang":"es","value":"QEMU, cuando está construido con el soporte back-end Pseudo Random Number Generator (PRNG), permite a usuarios locales del SO invitado provocar una denegación de servicio (caída del proceso) a través una petición de entropía, lo que desencadena una asignación arbitraria basada en asignación y corrupción de memoria."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-331"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1.1","matchCriteriaId":"1E0091D0-CCD9-4017-A266-32576814AE63"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=60253ed1e6ec6d8e5ef2efe7bf755f475dce9956","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/04/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/07/4","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84134","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314676","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=60253ed1e6ec6d8e5ef2efe7bf755f475dce9956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/04/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/07/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3973","sourceIdentifier":"cve@mitre.org","published":"2016-04-07T19:59:04.377","lastModified":"2026-06-17T00:46:39.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tc~rtc~coll.appl.rtc~wd_chat/Chat#, pressing \"Add users\", and doing a search, aka SAP Security Note 2255990."},{"lang":"es","value":"La característica de chat en los servicios Real-Time Collaboration (RTC) 7.3 y 7.4 en SAP NetWeaver Java AS 7.1 hasta la versión 7.5 permite a atacantes remotos obtener información sensible de usuario visitando webdynpro/resources/sap.com/tc~rtc~coll.appl.rtc~wd_chat/Chat#, presionando \"Add users\" y haciendo una búsqueda, también conocido como SAP Security Note 2255990."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_java:*:*:*:*:*:*:*:*","versionStartIncluding":"7.10","versionEndIncluding":"7.50","matchCriteriaId":"70F75AAE-5A52-4B9A-B8E8-8E1BE573B21D"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137579/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jun/46","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://erpscan.io/advisories/erpscan-16-016-sap-netweaver-7-4-information-disclosure-wd_chat/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/137579/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jun/46","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://erpscan.io/advisories/erpscan-16-016-sap-netweaver-7-4-information-disclosure-wd_chat/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3975","sourceIdentifier":"cve@mitre.org","published":"2016-04-07T19:59:06.087","lastModified":"2026-06-17T00:46:39.833","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to inject arbitrary web script or HTML via the navigationTarget parameter to irj/servlet/prt/portal/prteventname/XXX/prtroot/com.sapportals.navigation.testComponent.NavigationURLTester, aka SAP Security Note 2238375."},{"lang":"es","value":"Vulnerabilidad de XSS en SAP NetWeaver AS Java 7.1 hasta la versión 7.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro navigationTarget para irj/servlet/prt/portal/prteventname/XXX/prtroot/com.sapportals.navigation.testComponent.NavigationURLTester, también conocida como SAP Security Note 2238375."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver_application_server_java:*:*:*:*:*:*:*:*","versionStartIncluding":"7.10","versionEndIncluding":"7.50","matchCriteriaId":"70F75AAE-5A52-4B9A-B8E8-8E1BE573B21D"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137529/SAP-NetWeaver-AS-JAVA-7.5-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jun/42","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://erpscan.io/advisories/erpscan-16-014-sap-netweaver-7-4-navigationurltester/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/137529/SAP-NetWeaver-AS-JAVA-7.5-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jun/42","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://erpscan.io/advisories/erpscan-16-014-sap-netweaver-7-4-navigationurltester/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8679","sourceIdentifier":"cve@mitre.org","published":"2016-04-07T20:59:02.787","lastModified":"2026-06-17T00:35:01.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Maxim_smartpa_dev driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allow attackers to cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access."},{"lang":"es","value":"El controlador Maxim_smartpa_dev en smartphones Huawei P8 con software GRA-TL00 en versiones anteriores a GRA-TL00C01B230, GRA-CL00 en versiones anteriores a GRA-CL00C92B230, GRA-CL10 en versiones anteriores a GRA-CL10C92B230, GRA-UL00 en versiones anteriores a GRA-UL00C00B230 y GRA-UL10 en versiones anteriores a GRA-UL10C00B230 y smartphones Mate S con software CRR-TL00 en versiones anteriores a CRR-TL00C01B160SP01, CRR-UL00 en versiones anteriores a CRR-UL00C00B160 y CRR-CL00 en versiones anteriores a CRR-CL00C92B161 permiten a atacantes provocar una denegación de servicio (caída del sistema) a través de una aplicación manipulada, lo que desencadena en un acceso a memoria no válido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*","matchCriteriaId":"B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_s_firmware:crr-cl00:*:*:*:*:*:*:*","matchCriteriaId":"3017EDB7-E50F-4663-9C9B-C0CF00A98354"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_s_firmware:crr-tl00:*:*:*:*:*:*:*","matchCriteriaId":"16EF3947-D9E7-4187-9B8B-A4C9F4A56E66"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_s_firmware:crr-ul00:*:*:*:*:*:*:*","matchCriteriaId":"0944C26D-11E5-4AD4-8182-8F23B0F8F580"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*","matchCriteriaId":"F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-cl00:*:*:*:*:*:*:*","matchCriteriaId":"A775C9F6-D759-4022-A499-FDABD19A0B18"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-cl10:*:*:*:*:*:*:*","matchCriteriaId":"95A2D1FD-3FCB-484B-A995-3FC0732ECFE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-tl00:*:*:*:*:*:*:*","matchCriteriaId":"2019AC75-E9C6-4AD0-B95F-2C4D03CCBBEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-ul00:*:*:*:*:*:*:*","matchCriteriaId":"8DE91607-4815-4460-8616-8C175981BC13"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-ul10:*:*:*:*:*:*:*","matchCriteriaId":"4E8D0A98-4F0D-485F-97B9-252C3A198659"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160105-01-smartphone-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160105-01-smartphone-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-2774","sourceIdentifier":"cve@mitre.org","published":"2016-04-07T21:59:00.120","lastModified":"2026-06-17T00:24:43.757","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE)."},{"lang":"es","value":"Erlang/OTP en versiones anteriores a 18.0-rc1 no comprueba correctamente los bytes de relleno CBC cuando finaliza las conexiones, lo que hace más fácil para atacantes man-in-the-middle obtener datos en texto plano a través de un ataque padding-oracle, una variante de CVE-2014-3566 (también conocida como POODLE)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*","versionEndIncluding":"18.0","matchCriteriaId":"AAC7FB85-64C2-446F-AF0C-1593AD331F90"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00124.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2015/03/27/6","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2015/03/27/9","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73398","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/3571-1/","source":"cve@mitre.org"},{"url":"https://web.archive.org/web/20150905124006/http://www.erlang.org/news/85","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://www.imperialviolet.org/2014/12/08/poodleagain.html","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00124.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2015/03/27/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2015/03/27/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3571-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://web.archive.org/web/20150905124006/http://www.erlang.org/news/85","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://www.imperialviolet.org/2014/12/08/poodleagain.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]}]}},{"cve":{"id":"CVE-2016-2511","sourceIdentifier":"cve@mitre.org","published":"2016-04-07T21:59:03.637","lastModified":"2026-06-17T00:44:11.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php."},{"lang":"es","value":"Vulnerabilidad de XXS en WebSVN 2.3.3 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro path a log.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:websvn:websvn:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.3","matchCriteriaId":"0DC8DA06-6B9D-4CC6-863C-A4961A0AECDE"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179168.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/135886/WebSVN-2.3.3-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/99","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2016/dsa-3490","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179168.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/135886/WebSVN-2.3.3-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/99","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2016/dsa-3490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0789","sourceIdentifier":"secalert@redhat.com","published":"2016-04-07T23:59:01.050","lastModified":"2026-06-17T00:38:14.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en la documentación de comando de la CLI en Jenkins en versiones anteriores a 1.650 y LTS en versiones anteriores a 1.642.2 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de separación de respuesta HTTP a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","versionEndIncluding":"1.642.1","matchCriteriaId":"4203742F-66F7-4877-ABF8-EB304E114191"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"1.649","matchCriteriaId":"18F2C087-76F7-40F2-83DA-4C643363629C"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:0711","source":"secalert@redhat.com"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:0711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0790","sourceIdentifier":"secalert@redhat.com","published":"2016-04-07T23:59:01.927","lastModified":"2026-06-17T00:38:14.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach."},{"lang":"es","value":"Jenkins en versiones anteriores a 1.650 y LTS en versiones anteriores a 1.642.2 no utiliza un algoritmo de tiempo constante para verificar tokens API, lo que hace más fácil para atacantes remotos determinar tokens API a través de una aproximación por fuerza bruta."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","versionEndIncluding":"1.642.1","matchCriteriaId":"4203742F-66F7-4877-ABF8-EB304E114191"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"1.649","matchCriteriaId":"18F2C087-76F7-40F2-83DA-4C643363629C"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:0711","source":"secalert@redhat.com"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:0711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2097","sourceIdentifier":"secalert@redhat.com","published":"2016-04-07T23:59:05.800","lastModified":"2026-06-17T00:43:25.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0752."},{"lang":"es","value":"Vulnerabilidad de salto directorio en Action View en Ruby on Rails en versiones anteriores a 3.2.22.2 y 4.x en versiones anteriores a 4.1.14.2 permite a atacantes remotos leer archivos arbitrarios aprovechando el uso no restringido del método render de una aplicación y proporcionando un .. (punto punto) en un nombre de ruta. NOTA: esta vulnerabilidad existe por una solución incompleta para CVE-2016-0752."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"2E950E33-CD03-45F5-83F9-F106060B4A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"547C62C8-4B3E-431B-AA73-5C42ED884671"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"4CDAD329-35F7-4C82-8019-A0CF6D069059"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"56D3858B-0FEE-4E8D-83C2-68AF0431F478"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*","matchCriteriaId":"254884EE-EBA4-45D0-9704-B5CB22569668"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"35FC7015-267C-403B-A23D-EDA6223D2104"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"5C913A56-959D-44F1-BD89-D246C66D1F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*","matchCriteriaId":"5D5BA926-38EE-47BE-9D16-FDCF360A503B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*","matchCriteriaId":"18EA25F1-279A-4F1A-883D-C064369F592E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FD794856-6F30-4ABF-8AE4-720BB75E6F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B4199B8B-A6F9-4BFD-8D27-0E663D8C579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F11E76A3-FA5B-4038-AB52-3D7D5E54D8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"C583ACDE-55D5-4D2F-838F-BEC5BDCDE3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"767C481D-6616-4CA9-9A9B-C994D9121796"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D5496953-0C5E-45F8-A7FB-240CEC2CCEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*","matchCriteriaId":"CA46B621-125E-497F-B2DE-91C989B25936"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*","matchCriteriaId":"B3239443-2E19-4540-BA0C-05A27E44CB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*","matchCriteriaId":"104AC9CF-6611-4469-9852-7FDAF4EC7638"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DC9E1864-B1E5-42C3-B4AF-9A002916B66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"31AC91AA-6A9A-43B4-B3E9-A66A34B6E612"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A462C151-982E-4A83-A376-025015F40645"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*","matchCriteriaId":"578CC013-776B-4868-B448-B7ACAF3AF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*","matchCriteriaId":"C310EA3E-399A-48FD-8DE9-6950E328CF23"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"293B2998-5169-4960-BEC4-21DAC837E32B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FB42A8E7-D273-4CE2-9182-D831D8089BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DB757DFD-BF47-4483-A2C0-DF37F7D10989"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B6C375F2-5027-4B55-9112-C5DD2F787E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EAB8D57F-9849-428C-B8E9-D0A1020728BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B0359DA8-6B41-46C5-AA95-41B1B366DD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"0965BDB6-9644-465C-AA32-9278B2D53197"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"7F6B15CF-37C1-4C9B-8457-4A8C9A480188"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"072EB16D-1325-4869-B156-65E786A834C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"847B3C3D-8656-404D-A954-09C159EDC8E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65CA2D50-B33C-4088-BDDF-EB964C9A092C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"CADB5989-5260-4F60-ACF2-BEB6D7F97654"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*","matchCriteriaId":"509597D0-22E1-4BE8-95AD-C54FE4D15FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.6:rc2:*:*:*:*:*:*","matchCriteriaId":"B86E26CB-2376-4EBC-913C-B354E2D6711B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"539C550D-FEDD-415E-95AE-40E1AE2BAF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D5150753-E86D-4859-A046-97B83EAE2C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"59C5B869-74FC-4051-A103-A721332B3CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.9:rc1:*:*:*:*:*:*","matchCriteriaId":"F11E9791-7BCE-43E5-A4BA-6449623FE4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc1:*:*:*:*:*:*","matchCriteriaId":"CE521626-2876-455C-9D99-DB74726DC724"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc2:*:*:*:*:*:*","matchCriteriaId":"2DFDD32E-F49E-47F7-B033-B6C3C0E07FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc3:*:*:*:*:*:*","matchCriteriaId":"DCBA26F1-FBBA-444D-9C14-F15AB14A4FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc4:*:*:*:*:*:*","matchCriteriaId":"16D3B0EA-49F7-401A-A1D9-437429D33EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.12:rc1:*:*:*:*:*:*","matchCriteriaId":"17EBD8B4-C4D3-44A6-9DC1-89D948F126A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.13:rc1:*:*:*:*:*:*","matchCriteriaId":"FCB08CD7-E9B9-454F-BAF7-96162D177677"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.14:rc1:*:*:*:*:*:*","matchCriteriaId":"0D3DA0B4-E374-4ED4-8C3B-F723C968666F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.14:rc2:*:*:*:*:*:*","matchCriteriaId":"B1730A9A-6810-4470-AE6C-A5356D5BFF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.22.1","matchCriteriaId":"DBD4FBDC-F05B-4CDD-8928-7122397A7651"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.1.14.1:*:*:*:*:*:*:*","matchCriteriaId":"91AB2B26-A6F1-44D2-92EB-8078DD6FD63A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html","source":"secalert@redhat.com"},{"url":"http://weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3509","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83726","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035122","source":"secalert@redhat.com"},{"url":"https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2789","sourceIdentifier":"cve@mitre.org","published":"2016-04-07T23:59:08.893","lastModified":"2026-06-17T00:44:24.263","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web User Interface en Citrix XenMobile Server 10.0, 10.1 en versiones anteriores a Rolling Patch 4 y 10.3 en versiones anteriores a Rolling Patch 1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenmobile_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"32730AFA-91E0-4D94-9FA6-32E4C36ECDF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenmobile_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"FC3C3D0C-5D36-4292-A007-9AD42D4C1A3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenmobile_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"DF648C17-10B1-49C1-9573-575ED79B8007"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX207499","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035265","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX207499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3978","sourceIdentifier":"cve@mitre.org","published":"2016-04-08T14:59:07.913","lastModified":"2026-06-17T00:46:40.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting (XSS) attacks via the \"redirect\" parameter to \"login.\""},{"lang":"es","value":"La Web User Interface (WebUI) en FortiOS 5.0.x en versiones anteriores a 5.0.13, 5.2.x en versiones anteriores a 5.2.3 y 5.4.x en versiones anteriores a 5.4.0 permite a atacantes remotos redirigir a usuarios a sitios web arbitrarios y llevar a cabo ataques de phishing o ataques de XSS a través del parámetro \"redirect\" en \"login\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1E542BE2-14FC-4BA8-890C-7DA81F33F032"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D8A5EC4-CE2C-4174-9F09-361B8D153AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C3BABC91-F9BF-4B52-BDBF-F9617ABCAC9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9C172379-F6BA-4343-831A-62004E742C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"516597D9-086E-4668-A40B-473F38125F92"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D62F480B-D8CA-4F5C-8034-C0AE73F26B67"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F435F408-EC5B-42A0-9E3C-4DE5D702ACAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"823C8357-E638-4EAE-B231-3B60263FFE52"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1C6615C7-C6F8-4E42-BA09-5A29A0B68E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B24C5917-BBC0-4924-9FB0-49E141DC9D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"513A1CAA-9B87-4CF5-9513-396E2E686CDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"62CD94B3-C430-4672-BBEA-B8A542944F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"91AA2061-5D28-4DCF-9126-8D5CE57D96F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E627C59-7C16-44F0-800D-A2E8A766B26D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"233236FA-BB13-4261-BE2E-3E617406DC53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27844CC9-498B-4A65-91AC-AC130222EE5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4:*:*:*:*:*:*:*","matchCriteriaId":"0E953F20-9598-4074-BC65-2FEA3ED2ECF1"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2016/Mar/68","source":"cve@mitre.org"},{"url":"http://www.fortiguard.com/advisory/fortios-open-redirect-vulnerability","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035332","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Mar/68","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/fortios-open-redirect-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5969","sourceIdentifier":"security@opentext.com","published":"2016-04-08T15:59:01.463","lastModified":"2026-06-17T00:30:12.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments."},{"lang":"es","value":"La secuencia de comandos mysql-systemd-helper en el paquete mysql-community-server en versiones anteriores a 5.6.28-2.17.1 en openSUSE 13.2 y en versiones anteriores a 5.6.28-13.1 en openSUSE Leap 42.1 y el paquete mariadb en versiones anteriores a 10.0.22-2.21.2 en openSUSE 13.2 y en versiones anteriores a 10.0.22-3.1 en SUSE Linux Enterprise (SLE) 12.1 y openSUSE Leap 42.1 permite a usuarios locales descubrir las credenciales de la base de datos listando un proceso y sus argumentos."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"ED540469-C4DD-485D-9B89-6877B2A74217"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00050.html","source":"security@opentext.com"},{"url":"https://bugzilla.suse.com/957174","source":"security@opentext.com"},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-02/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.suse.com/957174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1180","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-08T15:59:02.730","lastModified":"2026-06-17T00:41:25.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el plugin Cyber-Will Social-button Premium en versiones anteriores a 1.1 para EC-CUBE 2.13.x permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyber-will:social-button_premium:*:*:*:*:*:ec-cube:*:*","versionEndIncluding":"1.0","matchCriteriaId":"BE3E35F1-EDD2-435B-B064-5A854A517C48"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ec-cube:ec-cube:2.13.0:*:*:*:*:*:*:*","matchCriteriaId":"8FDF15D9-17EE-4899-B273-15E967582DD8"},{"vulnerable":false,"criteria":"cpe:2.3:a:ec-cube:ec-cube:2.13.1:*:*:*:*:*:*:*","matchCriteriaId":"88A25DC8-4C2B-4ECC-A64D-7DF23F5B7015"},{"vulnerable":false,"criteria":"cpe:2.3:a:ec-cube:ec-cube:2.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7D2A21A5-272B-4ACE-B4B6-B19CBBF8F33F"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN78482127/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000048","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.cyber-will.co.jp/SA_JVN_78482127","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://www.ec-cube.net/products/detail.php?product_id=799","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN78482127/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.cyber-will.co.jp/SA_JVN_78482127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.ec-cube.net/products/detail.php?product_id=799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1375","sourceIdentifier":"psirt@cisco.com","published":"2016-04-08T15:59:04.247","lastModified":"2026-06-17T00:41:49.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy12339."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco IP Interoperability y Collaboration System 4.10(1) permite atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocido como Bug ID CSCuy12339."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ip_interoperability_and_collaboration_system:4.10:*:*:*:*:*:*:*","matchCriteriaId":"E3376A5B-4B8C-472F-A56F-09B5B6188B4D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160407-cic","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160407-cic","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3963","sourceIdentifier":"cve@mitre.org","published":"2016-04-08T15:59:08.183","lastModified":"2026-06-17T00:46:39.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens SCALANCE S613 allows remote attackers to cause a denial of service (web-server outage) via traffic to TCP port 443."},{"lang":"es","value":"Siemens SCALANCE S613 permite a atacantes remotos provocar una denegación de servicio (interrupción del servidor web) a través de tráfico en el puerto TCP 443."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:scalance_s613:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A9E194-88AD-4576-AADD-0012AA76AC88"}]}]}],"references":[{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-751155.pdf","source":"cve@mitre.org"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-103-02","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/44721/","source":"cve@mitre.org"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-751155.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-103-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/44721/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3984","sourceIdentifier":"cve@mitre.org","published":"2016-04-08T15:59:10.107","lastModified":"2026-06-17T00:46:40.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) before 2.0.1.140.1, Data Loss Prevention Endpoint (DLPe) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control (MDC) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Endpoint Security (ENS) 10.x before 10.1, Host Intrusion Prevention Service (IPS) 8.0 before 8.0.0.3624, and VirusScan Enterprise (VSE) 8.8 before P7 (8.8.0.1528) on Windows allows local administrators to bypass intended self-protection rules and disable the antivirus engine by modifying registry keys."},{"lang":"es","value":"El McAfee VirusScan Console (mcconsol.exe) en McAfee Active Response (MAR) en versiones anteriores a 1.1.0.161, Agent (MA) 5.x en versiones anteriores a 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) en versiones anteriores a 2.0.1.140.1, Data Loss Prevention Endpoint (DLPe) 9.3 en versiones anteriores a Patch 6 y 9.4 en versiones anteriores a Patch 1 HF3, Device Control (MDC) 9.3 en versiones anteriores a Patch 6 y 9.4 en versiones anteriores a Patch 1 HF3, Endpoint Security (ENS) 10.x en versiones anteriores a 10.1, Host Intrusion Prevention Service (IPS) 8.0 en versiones anteriores a 8.0.0.3624 y VirusScan Enterprise (VSE) 8.8 en versiones anteriores a P7 (8.8.0.1528) en Windows permite a administradores locales eludir las reglas destinadas a la autoprotección y desactivar el motor del antivirus modificando claves de registro."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:active_response:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0.158","matchCriteriaId":"543B3BBE-A5D5-4EC9-BBDE-646EC654CB43"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.2.285","matchCriteriaId":"988ACD16-D8B6-4934-9653-4E10857BFA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.430.1","matchCriteriaId":"2CBBB9A7-B7D6-4A59-85CA-A4C840BB9B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:p5:*:*:*:*:*:*","versionEndIncluding":"9.3.0","matchCriteriaId":"BC49C347-3C2B-4A2B-BA39-22E70ED3F835"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:p1_hf2:*:*:*:*:*:*","versionEndIncluding":"9.4.0","matchCriteriaId":"68E9052A-ACB0-4791-AFEB-98DBBF537A5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.1","matchCriteriaId":"997552D0-C322-4E13-8944-C6E56428EE33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:host_intrusion_prevention:*:p6:*:*:*:*:*:*","versionEndIncluding":"8.0.0","matchCriteriaId":"EED9A958-538B-4B25-9696-6850508D8D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan_enterprise:*:p6:*:*:*:*:*:*","versionEndIncluding":"8.8.0","matchCriteriaId":"EDF04428-E664-4922-B950-DB61BE5AD13F"}]}]}],"references":[{"url":"http://lab.mediaservice.net/advisory/2016-01-mcafee.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Mar/13","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035130","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10151","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39531/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lab.mediaservice.net/advisory/2016-01-mcafee.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Mar/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39531/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2016-0711","sourceIdentifier":"secalert@redhat.com","published":"2016-04-11T14:59:04.253","lastModified":"2026-06-17T00:38:04.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Apache Jetspeed en versiones anteriores a 2.3.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro title cuando se añade un recurso (1) link, (2) page o (3) folder."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:jetspeed:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0","matchCriteriaId":"3B7DAFB8-85FD-462F-A9A3-AD76C62557F7"}]}]}],"references":[{"url":"https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C73AC0763-D44B-4BDF-867C-05AD4674A62F%40bluesunrise.com%3E","source":"secalert@redhat.com"},{"url":"https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0711","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C73AC0763-D44B-4BDF-867C-05AD4674A62F%40bluesunrise.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0712","sourceIdentifier":"secalert@redhat.com","published":"2016-04-11T14:59:05.363","lastModified":"2026-06-17T00:38:04.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal."},{"lang":"es","value":"Vulnerabilidad de XSS en Apache Jetspeed en versiones anteriores a 2.3.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del PATH_INFO a portal."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:jetspeed:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0","matchCriteriaId":"3B7DAFB8-85FD-462F-A9A3-AD76C62557F7"}]}]}],"references":[{"url":"https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CF868DBFC-A05C-4ABB-8B91-17CA54C174B9%40bluesunrise.com%3E","source":"secalert@redhat.com"},{"url":"https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0712","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CF868DBFC-A05C-4ABB-8B91-17CA54C174B9%40bluesunrise.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0784","sourceIdentifier":"secalert@redhat.com","published":"2016-04-11T14:59:07.347","lastModified":"2026-06-17T00:38:13.553","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la funcionalidad Import/Export System Backups en Apache OpenMeetings en versiones anteriores a 3.1.1 permite a administradores remotos autenticados escribir en archivos arbitrarios través de un .. (punto punto) en una entrada de archivo comprimido ZIP."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:openmeetings:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0","matchCriteriaId":"01C6A9F0-E6EE-4084-8DCD-F445AD181210"}]}]}],"references":[{"url":"http://haxx.ml/post/141655340521/all-your-meetings-are-belong-to-us-remote-code","source":"secalert@redhat.com"},{"url":"http://openmeetings.apache.org/security.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136484/Apache-OpenMeetings-3.1.0-Path-Traversal.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/25/2","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/537929/100/0/threaded","source":"secalert@redhat.com"},{"url":"https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39642/","source":"secalert@redhat.com"},{"url":"http://haxx.ml/post/141655340521/all-your-meetings-are-belong-to-us-remote-code","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openmeetings.apache.org/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136484/Apache-OpenMeetings-3.1.0-Path-Traversal.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/25/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537929/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39642/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2163","sourceIdentifier":"secalert@redhat.com","published":"2016-04-11T14:59:08.457","lastModified":"2026-06-17T00:43:33.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event."},{"lang":"es","value":"Vulnerabilidad de XSS en Apache OpenMeetings en versiones anteriores a 3.1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de la descripción de evento cuando se crea un evento."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:openmeetings:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0","matchCriteriaId":"01C6A9F0-E6EE-4084-8DCD-F445AD181210"}]}]}],"references":[{"url":"http://openmeetings.apache.org/security.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136433/Apache-OpenMeetings-3.0.7-Cross-Site-Scripting.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/537888/100/0/threaded","source":"secalert@redhat.com"},{"url":"https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG","source":"secalert@redhat.com"},{"url":"http://openmeetings.apache.org/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136433/Apache-OpenMeetings-3.0.7-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537888/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3676","sourceIdentifier":"cve@mitre.org","published":"2016-04-11T15:59:09.627","lastModified":"2026-06-17T00:46:10.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei E3276s USB modems with software before E3276s-150TCPU-V200R002B436D09SP00C00 allow man-in-the-middle attackers to intercept, spoof, or modify network traffic via unspecified vectors related to a fake network."},{"lang":"es","value":"Módems Huawei E3276s USB con software en versiones anteriores a E3276s-150TCPU-V200R002B436D09SP00C00 permite a atacantes man-in-the-middle interceptar, suplantar o modificar el tráfico de red a través de vectores no especificados relacionados con una red falsa."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","baseScore":5.8,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:e3276s:-:*:*:*:*:*:*:*","matchCriteriaId":"82E403D0-3CDD-4EEA-8D63-B9368EE621C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:e3276s_firmware:e3276s-150tcpu-v200r002b250d04sp00c00:*:*:*:*:*:*:*","matchCriteriaId":"E5C03F54-0F8F-42B1-9720-CA0218EF8798"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-dongle-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-dongle-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0265","sourceIdentifier":"secalert@redhat.com","published":"2016-04-11T19:59:00.117","lastModified":"2026-06-17T00:19:52.213","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header."},{"lang":"es","value":"Vulnerabilidad de XSS en la Policy Admin Tool en Apache Ranger en versiones anteriores a 0.5.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de la cabecera HTTP User-Agent."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ranger:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.0","matchCriteriaId":"4696EE22-EADF-459A-9AD6-F45F0E10D89C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/76208","source":"secalert@redhat.com"},{"url":"http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel%40apache.org%3E","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/76208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel%40apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9759","sourceIdentifier":"cve@mitre.org","published":"2016-04-11T21:59:00.163","lastModified":"2026-06-17T00:18:56.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en la función config_is_private en config_api.php en MantisBT 1.3.x en versiones anteriores a 1.3.0 permite a atacantes remotos obtener información sensible de la configuración de la salt maestra a través de una petición API SOAP."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C22EBC7C-093F-4641-A5DE-E63DD9C0F2BD"}]}]}],"references":[{"url":"http://sourceforge.net/p/mantisbt/mailman/message/32948048/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/02/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/03/2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035518","source":"cve@mitre.org"},{"url":"https://mantisbt.org/bugs/view.php?id=20277","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/p/mantisbt/mailman/message/32948048/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/02/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/03/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://mantisbt.org/bugs/view.php?id=20277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2015-5233","sourceIdentifier":"secalert@redhat.com","published":"2016-04-11T21:59:01.913","lastModified":"2026-06-17T00:28:43.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to delete reports from arbitrary hosts via direct access to the (a) individual report show/delete pages or (b) APIs."},{"lang":"es","value":"Foreman en versiones anteriores a 1.8.4 y 1.9.x en versiones anteriores a 1.9.1 no aplica correctamente los permisos view_hosts, lo que permite (1) a usuarios remotos autenticados con el permiso view_reports leer informes desde hosts arbitrarios o (2) a usuarios remotos autenticados con el permiso destroy_reports borrar informes desde hosts arbitrarios a través del acceso directo a (a) las páginas show/delete del informe individual o (b) APIs."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.3","matchCriteriaId":"278FCFFF-B5C7-4817-9935-6D3BCE017661"},{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"F1825F24-09E5-4AC4-845B-C9D113372B05"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:6.1:*:*:*:*:*:*:*","matchCriteriaId":"0697265D-69BB-4AB2-963A-A495B7D66EB7"}]}]}],"references":[{"url":"http://projects.theforeman.org/issues/11579","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://theforeman.org/security.html#CVE-2015-5233:reportsshow/destroynotrestrictedbyhostauthorization","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2622","source":"secalert@redhat.com"},{"url":"http://projects.theforeman.org/issues/11579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://theforeman.org/security.html#CVE-2015-5233:reportsshow/destroynotrestrictedbyhostauthorization","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7502","sourceIdentifier":"secalert@redhat.com","published":"2016-04-11T21:59:08.320","lastModified":"2026-06-17T00:32:39.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME) 5.5.0 do not properly encrypt data in the backend PostgreSQL database, which might allow local users to obtain sensitive data and consequently gain privileges by leveraging access to (1) database exports or (2) log files."},{"lang":"es","value":"Red Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 y CloudForms 4.0 Management Engine (CFME) 5.5.0 no cifra correctamente datos en el backend de base de datos PostgreSQL, lo que podría permitir a usuarios locales obtener datos sensibles y consecuentemente obtener privilegios aprovechándose del acceso a (1) exportaciones de base de datos o (2) archivos de registro."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cloudforms_management_engine:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CA61A252-C006-4BA4-9A8E-38E20B82051E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cloudforms:3.2:*:*:*:*:*:*:*","matchCriteriaId":"71552F24-6547-47DD-9EB1-D72135022146"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cloudforms:4.0:*:*:*:*:*:*:*","matchCriteriaId":"63A33B0C-3E14-4EF0-A321-EA5AABBB05B0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cloudforms_management_engine:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C03978EE-E7BC-409C-BF88-A76C541025AD"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-2620.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2551","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283019","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2620.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7528","sourceIdentifier":"secalert@redhat.com","published":"2016-04-11T21:59:09.337","lastModified":"2026-06-17T00:32:41.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name."},{"lang":"es","value":"Kubernetes en versiones anteriores a 1.2.0-alpha.5 permite a atacantes remotos leer logs de pod arbitrarios a través de un nombre de contenedor."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kubernetes:kubernetes:*:alpha.4:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"EE0A7C28-C2DF-4AFE-9F81-BA38AC6ADA9B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"45690263-84D9-45A1-8C30-3ED2F0F11F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-2615.html","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2015:2544","source":"secalert@redhat.com"},{"url":"https://github.com/kubernetes/kubernetes/pull/17886","source":"secalert@redhat.com"},{"url":"https://github.com/kubernetes/kubernetes/releases/tag/v1.2.0-alpha.5","source":"secalert@redhat.com"},{"url":"https://github.com/openshift/origin/pull/6113","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2615.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2015:2544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/kubernetes/kubernetes/pull/17886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/kubernetes/kubernetes/releases/tag/v1.2.0-alpha.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openshift/origin/pull/6113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8398","sourceIdentifier":"cve@mitre.org","published":"2016-04-11T21:59:10.367","lastModified":"2026-06-17T00:34:27.560","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest/prototype/1/session/check."},{"lang":"es","value":"Vulnerabilidad de XSS en Atlassian Confluence en versiones anteriores a 5.8.17 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de PATH_INFO a rest/prototype/1/session/check."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*","versionEndIncluding":"5.8.16","matchCriteriaId":"DC937A18-D1F3-417E-8B40-E604D57E0B42"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/537232/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/39170/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/537232/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39170/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8399","sourceIdentifier":"cve@mitre.org","published":"2016-04-11T21:59:11.320","lastModified":"2026-06-17T00:34:27.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action."},{"lang":"es","value":"Atlassian Confluence en versiones anteriores a 5.8.17 permite a usuarios remotos autenticados leer archivos de configuración a través del parámetro decoratorName en (1) spaces/viewdefaultdecorator.action o (2) admin/viewdefaultdecorator.action."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*","versionEndIncluding":"5.8.16","matchCriteriaId":"DC937A18-D1F3-417E-8B40-E604D57E0B42"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/537232/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/39170/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/537232/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39170/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5158","sourceIdentifier":"secalert@redhat.com","published":"2016-04-12T01:59:20.737","lastModified":"2026-06-17T00:28:34.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAP_SYS_RAWIO permissions to cause a denial of service (instance crash) via an invalid opcode in a SCSI command descriptor block."},{"lang":"es","value":"Desbordamiento de buffer basado en pila en hw/scsi/scsi-bus.c en QEMU, cuando se construye con soporte de emulación SCSI-device, permite a usuarios del SO invitado con permisos CAP_SYS_RAWIO provocar una denegación de servicio (caída de instancia) a través de un opcode no válido opcode en un bloque descriptor de comandos SCSI."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.4.0","matchCriteriaId":"BAE931FF-11AF-47F9-92FA-BAC493FDA285"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.4.0:-:*:*:*:*:*:*","matchCriteriaId":"016BA7D9-7A36-45C9-83E7-9944E1C1D2A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C688B5BA-D202-4B43-98F3-E9C54289700B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6090D404-74A8-4335-9A9B-F2BCDFF8E6B1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/76016","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1033095","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.nongnu.org/archive/html/qemu-devel/2015-07/msg04558.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201510-02","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/76016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1033095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.nongnu.org/archive/html/qemu-devel/2015-07/msg04558.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201510-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8108","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T01:59:25.160","lastModified":"2026-06-17T00:34:03.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors."},{"lang":"es","value":"La interfaz de gestión en dispositivos NAS LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r y px4-300d con firmware en versiones anteriores a 4.1.204.33661 permite a atacantes remotos obtener información sensible del dispositivo a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:emc_firmware:4.1.204.33661:*:*:*:*:*:*:*","matchCriteriaId":"CA7D8F99-65F6-454C-BEF5-D619007E712A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_ez_media_\\&_backup_\\(hm3\\):-:*:*:*:*:*:*:*","matchCriteriaId":"FEAD1158-A066-4490-B39A-F6623F2674C8"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_ix2\\/ix2-dl:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BF51FD-5561-4AD3-A0EB-B15D3205E259"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_ix4-300d_\\(inc_dl\\):-:*:*:*:*:*:*:*","matchCriteriaId":"87D7A2AB-1E0D-4551-AA87-CA59768A3CB7"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_px12-400r\\/450r:-:*:*:*:*:*:*:*","matchCriteriaId":"C4DFA8E5-6398-4C0E-9028-9BC7315DA6AE"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_px2-300d:-:*:*:*:*:*:*:*","matchCriteriaId":"10BF8F59-83EF-472A-854C-91B99F49945C"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_px4-300d:-:*:*:*:*:*:*:*","matchCriteriaId":"D592F80E-F531-46E6-8D95-62EF9909AE3D"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_px4-300r:-:*:*:*:*:*:*:*","matchCriteriaId":"99A24BDF-3D2D-4038-ACEF-B75A141FFF75"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_px4-400d:-:*:*:*:*:*:*:*","matchCriteriaId":"D842ECFE-E141-4623-A9D6-C74502167270"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_px4-400r:-:*:*:*:*:*:*:*","matchCriteriaId":"0733ED12-467A-484F-949A-E963C4C586E3"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:emc_px6-300d:-:*:*:*:*:*:*:*","matchCriteriaId":"82AC7528-B18B-447E-9ADC-37CB0593184F"}]}]}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/len_3846","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.lenovo.com/us/en/product_security/len_3846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1885","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T02:00:06.243","lastModified":"2026-06-17T00:42:47.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service (kernel panic) via an i386_set_ldt system call, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Error de entero sin signo en la función amd64_set_ldt en sys/amd64/amd64/sys_machdep.c en FreeBSD 9.3 en versiones anteriores a p39, 10.1 en versiones anteriores a p31 y 10.2 en versiones anteriores a p14 permite a usuarios locales provocar una denegación de servicio (pánico en el kernel) a través de una llamada i386_set_ldt system, lo que desencadena un desbordamiento de buffer basado en memoria dinámica."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:9.3:*:*:*:*:*:*:*","matchCriteriaId":"57052F01-8695-4C63-A947-7671375B9312"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:10.1:*:*:*:*:*:*:*","matchCriteriaId":"F6D63B21-9D2E-4B15-9E60-6181D44B1F55"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:10.2:*:*:*:*:*:*:*","matchCriteriaId":"21EFF723-7B5A-4712-8A6B-56CADAA4BFD5"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136276/FreeBSD-Kernel-amd64_set_ldt-Heap-Overflow.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Mar/56","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Mar/67","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/advisories/freebsd-kernel-amd64setldt-heap-overflow","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/537812/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/537813/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035309","source":"cve@mitre.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:15.sysarch.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39570/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/136276/FreeBSD-Kernel-amd64_set_ldt-Heap-Overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Mar/56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Mar/67","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/advisories/freebsd-kernel-amd64setldt-heap-overflow","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537812/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537813/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:15.sysarch.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39570/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2016-3985","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T02:00:08.227","lastModified":"2026-06-17T00:46:41.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PCS) 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors."},{"lang":"es","value":"La funcionalidad de restricciones de sesión de cliente Terminal Services Remote Desktop Protocol (RDP) en Pulse Connect Secure (también conocido como PCS) 8.1R7 y 8.2R1 permite a usuarios remotos autenticados eludir las restricciones de acceso previstas a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:M/C:N/I:P/A:N","baseScore":3.3,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"MULTIPLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.4,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r7:*:*:*:*:*:*:*","matchCriteriaId":"B8484AC7-3971-4B26-A4DB-246E59F4E21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1:*:*:*:*:*:*:*","matchCriteriaId":"0C5C11F7-602E-4CB9-B173-EF4157BC2F81"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035129","source":"cve@mitre.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40166","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-3268","sourceIdentifier":"secalert@redhat.com","published":"2016-04-12T14:59:00.130","lastModified":"2026-06-17T00:25:38.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the DisplayEntityField.getDescription method in ModelFormField.java in Apache OFBiz before 12.04.06 and 13.07.x before 13.07.03 allows remote attackers to inject arbitrary web script or HTML via the description attribute of a display-entity element."},{"lang":"es","value":"Vulnerabilidad de XSS en el método DisplayEntityField.getDescription en ModelFormField.java en Apache OFBiz en versiones anteriores a 12.04.06 y 13.07.x en versiones anteriores a 13.07.03 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del atributo de descripción de un elemento de entidad-demostración."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ofbiz:12.04.01:*:*:*:*:*:*:*","matchCriteriaId":"7A557337-D8FD-47F4-9E66-9A642B834E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ofbiz:12.04.02:*:*:*:*:*:*:*","matchCriteriaId":"50FFA2EC-0680-4ECA-BFCA-CE6EAF5611F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ofbiz:12.04.03:*:*:*:*:*:*:*","matchCriteriaId":"4BB02CEF-3431-4138-AC3D-27363073C29C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ofbiz:12.04.04:*:*:*:*:*:*:*","matchCriteriaId":"BFDA615A-5A77-4F1B-881B-B3B675082CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ofbiz:12.04.05:*:*:*:*:*:*:*","matchCriteriaId":"C0442A7B-10C0-4C74-9C61-BAEDA6404D73"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ofbiz:13.07.01:*:*:*:*:*:*:*","matchCriteriaId":"A5435A8B-111C-4512-ABAB-9B89503C12E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ofbiz:13.07.02:*:*:*:*:*:*:*","matchCriteriaId":"F6E714B9-7B4D-4CC9-8280-1573D82E293A"}]}]}],"references":[{"url":"http://ofbiz.apache.org/download.html#vulnerabilities","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136638/Apache-OFBiz-13.07.02-13.07.01-Information-Disclosure.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/538033/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035514","source":"secalert@redhat.com"},{"url":"https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_12_04","source":"secalert@redhat.com"},{"url":"https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_13_07","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://issues.apache.org/jira/browse/OFBIZ-6506","source":"secalert@redhat.com"},{"url":"http://ofbiz.apache.org/download.html#vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136638/Apache-OFBiz-13.07.02-13.07.01-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538033/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_12_04","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_13_07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://issues.apache.org/jira/browse/OFBIZ-6506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5167","sourceIdentifier":"secalert@redhat.com","published":"2016-04-12T14:59:01.177","lastModified":"2026-06-17T00:28:35.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API."},{"lang":"es","value":"La Policy Admin Tool in Apache Ranger en versiones anteriores a 0.5.1 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso a través de la API REST."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ranger:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.0","matchCriteriaId":"5D3EE296-72E0-4D7A-8A3D-EED6D30FB55B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/82871","source":"secalert@redhat.com"},{"url":"https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel%40apache.org%3E","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/82871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel%40apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8021","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T14:59:02.177","lastModified":"2026-06-17T00:33:52.813","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, Link Controller, and PSM 11.x before 11.2.1 HF11, 11.3.x, 11.4.0 before HF8, and 11.4.1 before HF6; BIG-IP AAM 11.4.0 before HF8 and 11.4.1 before HF6; BIG-IP AFM and PEM 11.3.x, 11.4.0 before HF8, and 11.4.1 before HF6; and BIG-IP Edge Gateway, WebAccelerator, and WOM 11.x before 11.2.1 HF11 and 11.3.0 allows remote authenticated users to upload files via uploadImage.php."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en la utilidad Configuration en F5 BIG-IP LTM, Analytics, APM, ASM, GTM, Link Controller y PSM 11.x en versiones anteriores a 11.2.1 HF11, 11.3.x, 11.4.0 en versiones anteriores a HF8 y 11.4.1 en versiones anteriores a HF6; BIG-IP AAM 11.4.0 en versiones anteriores a HF8 y 11.4.1 en versiones anteriores a HF6; BIG-IP AFM y PEM 11.3.x, 11.4.0 en versiones anteriores a HF8 y 11.4.1 en versiones anteriores a HF6 y BIG-IP Edge Gateway, WebAccelerator y WOM 11.x en versiones anteriores a 11.2.1 HF11 y 11.3.0 permite a usuarios remotos autenticados cargar archivos a través de uploadImage.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DD575B3E-FBA9-443A-9B52-49766DBE40C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8F3BF3A-DC42-45F4-99C0-DF71DB1A9E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"002333F5-2864-434F-AC94-9C644098F95C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FB630A86-FB84-4199-9E4D-38EB620806CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"ABF47456-CCA0-4817-9AEF-631DC152174E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FB5F9107-549C-40EF-B355-C7E93A979CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B1A1C200-30B2-4B38-BC74-D11E54530A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7507BDFF-5B52-4A06-9F8C-2B6F3958162A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6E0141FA-44E9-460E-B175-29A7FA251301"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8DD27EF7-3329-4009-959F-D2E4D5935E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8FA5C323-7247-42B5-AF3E-F7E8A18932CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF199950-9564-4CF2-BC74-F9E1C28AC377"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A613D29A-9C7F-49A5-98E4-8477A1FF7C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"867B2CA9-DAE5-4070-B8E6-F624C59F5054"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"52CD200C-1D14-471F-93C1-027CC676C26C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1850CE-D20D-4677-8CF2-1DB3A4EB33F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0A70B1E2-0B3D-4DE9-8ED9-777F73D0B750"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"974C5213-99F7-4E8A-AC6A-8759697F19C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E288D50B-7EFA-4FC8-938B-EE3765FFA24D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"094BD2B6-E269-4647-A77C-B584805B6203"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"45C31572-6C40-4621-AB57-6768DE0D59A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4617DC7B-07BA-4805-9789-CFDBA8535214"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A635FEC4-4F52-4971-A67D-47E68108E4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC69B41E-C22D-48D2-8609-60C018F1F48D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"270EEBF6-46FA-48FC-BEC9-9C0838A86BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"93310708-E1FE-445A-BB1F-7D1F553AEC65"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"53531CA7-5E47-4C46-BDA5-3B4710085078"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A085285-329B-4EF0-ABFB-238655E9E82D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1591F627-3C86-4904-9236-6936D533ED75"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3136A8D1-3D0D-46B3-9A3A-737074864F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"96673865-3D37-4562-831E-3ACE9DFB471E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9AA7DCB7-D01E-492A-A810-01B15F03A783"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E7F8D9A5-0C91-4458-8554-13947FD8B116"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B171AA24-6500-43D8-9167-BA9BA57682E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"84452450-77FA-4708-9C86-5464D541C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A49B1D82-3EC2-4E20-8FF5-58248905E964"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7E4CC3E0-F9B8-433F-A2B0-2306144F9B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4C2FFC93-7053-441C-AD96-ED57F97E9A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"792625FF-276B-4972-8915-4571C9E26BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE20D0B7-E96B-448E-B80D-0D596248B410"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2DD53088-3BD4-4AF9-8934-4905231A75E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C4CB61D3-DF59-4EE0-A0F0-5899850496B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FF646EF0-56C8-492E-A78D-B00ECAA8D851"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0D42B922-A5F7-41FC-A361-BA0E065B5B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C72FF118-E7A5-42DE-A9A0-703E71615045"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"45A53EC8-8E16-42DC-9FD8-58493C5D1EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DDB299B4-5893-4D91-8E5B-09BDFDB86FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9EA336A-8055-4DA8-8F79-07C4ADE83E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"624EFAEB-15C2-422F-BAD1-D0BC37878349"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"76C1525D-46DE-4362-BBAD-095BBF718990"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"259C05BB-6349-4005-9372-21623DC5002D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA52816-C4B7-4B1E-A950-EE9B571CB06B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F2AA5127-5314-4026-905D-937B7B62473F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"09E42DAA-700D-487C-9238-F7F3D75A8C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3251DB7F-0436-48D5-AF7B-F812237DB926"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8600FF27-4407-4755-A1E3-5648D9ACCB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D3A84AF1-A18E-4AFD-B85E-49CE46A548D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BA54B88F-4A16-4F40-8A3B-B107F0CA2334"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"17C28542-51A4-4464-ADF9-C6376F829F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"584853F9-644F-40B2-A28F-1CE9B51F84F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFE665CF-A633-474E-9519-D20E3D3958CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C14D0DD3-E6A9-43C8-85D7-6DBB16E30DD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2B59396A-EAFF-41D4-874F-4CA91D901807"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4C9C14C5-B23C-4CE3-8FF0-52741CBB602E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7FBA20ED-08F5-4C35-991A-0DBC6BEAECC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D94751C-A340-4DE7-821A-5143FA0011E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E5E8E654-DA20-45F9-A25E-44D1E31F64C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C8FCFDA-703B-42DC-91FF-00066E88E49D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA49611-A8E4-454E-98AD-B64C0202838F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FF7FCC81-2F1D-4EF5-956B-085FB7FEFAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"200A9CE9-E56D-4EFA-AC8A-954F945DDDBB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/82340","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1034781","source":"cve@mitre.org"},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/49/sol49580002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/82340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/49/sol49580002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8346","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T14:59:03.147","lastModified":"2026-06-17T00:34:21.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form."},{"lang":"es","value":"app/views/timelog/_form.html.erb en Redmine en versiones anteriores a 2.6.8, 3.0.x en versiones anteriores a 3.0.6 y 3.1.x en versiones anteriores a 3.1.2 permite a atacantes remotos obtener información sensible sobre temas de problemas visualizando el formulario de tiempo de acceso."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-199"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.7","matchCriteriaId":"8759A6B4-7D3F-4337-B8E7-49E4D98BB632"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ABA423C8-BBDF-4241-BF9C-5D787B8D5D6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"181CE1D0-046D-4BF6-8ED1-A246D277EF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D29032E5-7A51-464C-A88D-A46AA41D7A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B342C54A-29D4-45BD-A602-8C79C691E071"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B3FF043B-EBE7-468C-AF1D-D65ACF9AFA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"086B834B-6585-4CF8-A268-FC4299577676"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DDBF1967-2317-4888-9A18-097384C40DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0B66CA0-3E2B-43BA-8A00-25E4EF8C4661"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3529","source":"cve@mitre.org"},{"url":"http://www.redmine.org/news/102","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/redmine/redmine/commit/c096dde88ff02872ba35edc4dc403c80a7867b5c","source":"cve@mitre.org"},{"url":"https://www.redmine.org/issues/21150","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redmine.org/news/102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/redmine/redmine/commit/c096dde88ff02872ba35edc4dc403c80a7867b5c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redmine.org/issues/21150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8473","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T14:59:04.193","lastModified":"2026-06-17T00:34:37.760","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote authenticated users to obtain sensitive information in changeset messages by leveraging permission to read issues with related changesets from other projects."},{"lang":"es","value":"La API Issues en Redmine en versiones anteriores a 2.6.8, 3.0.x en versiones anteriores a 3.0.6 y 3.1.x en versiones anteriores a 3.1.2 permite a usuarios remotos autenticados obtener información sensible de mensajes changeset aprovechando el permiso para leer problemas en relación con changesets de otros proyectos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.7","matchCriteriaId":"8759A6B4-7D3F-4337-B8E7-49E4D98BB632"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ABA423C8-BBDF-4241-BF9C-5D787B8D5D6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"181CE1D0-046D-4BF6-8ED1-A246D277EF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D29032E5-7A51-464C-A88D-A46AA41D7A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B342C54A-29D4-45BD-A602-8C79C691E071"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B3FF043B-EBE7-468C-AF1D-D65ACF9AFA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"086B834B-6585-4CF8-A268-FC4299577676"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DDBF1967-2317-4888-9A18-097384C40DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0B66CA0-3E2B-43BA-8A00-25E4EF8C4661"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3529","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/78621","source":"cve@mitre.org"},{"url":"https://github.com/redmine/redmine/commit/8d8f612fa368a72c56b63f7ce6b7e98cab9feb22","source":"cve@mitre.org"},{"url":"https://www.redmine.org/issues/21136","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redmine.org/projects/redmine/wiki/Changelog_3_0","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redmine.org/projects/redmine/wiki/Changelog_3_1","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redmine.org/versions/105","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/78621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/redmine/redmine/commit/8d8f612fa368a72c56b63f7ce6b7e98cab9feb22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redmine.org/issues/21136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redmine.org/projects/redmine/wiki/Changelog_3_0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redmine.org/projects/redmine/wiki/Changelog_3_1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redmine.org/versions/105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8537","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T14:59:06.210","lastModified":"2026-06-17T00:34:42.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed."},{"lang":"es","value":"app/views/journals/index.builder en Redmine en versiones anteriores a 2.6.9, 3.0.x en versiones anteriores a 3.0.7 y 3.1.x en versiones anteriores a 3.1.3 permite a atacantes remotos obtener información sensible visualizando un feed Atom."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.8","matchCriteriaId":"E9CDB9B4-C1A9-4BA6-A994-F6A47A6A1674"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ABA423C8-BBDF-4241-BF9C-5D787B8D5D6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"181CE1D0-046D-4BF6-8ED1-A246D277EF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D29032E5-7A51-464C-A88D-A46AA41D7A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B342C54A-29D4-45BD-A602-8C79C691E071"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B3FF043B-EBE7-468C-AF1D-D65ACF9AFA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"086B834B-6585-4CF8-A268-FC4299577676"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E818E816-8883-47DD-AADD-8258605AB5BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DDBF1967-2317-4888-9A18-097384C40DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0B66CA0-3E2B-43BA-8A00-25E4EF8C4661"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"905A5D43-A980-40F2-A2B5-A2FB1FA3A4A3"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3529","source":"cve@mitre.org"},{"url":"http://www.redmine.org/news/103","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/redmine/redmine/commit/7e423fb4538247d59e01958c48b491f196a1de56","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redmine.org/news/103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/redmine/redmine/commit/7e423fb4538247d59e01958c48b491f196a1de56","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2140","sourceIdentifier":"secalert@redhat.com","published":"2016-04-12T14:59:10.120","lastModified":"2026-06-17T00:43:31.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk."},{"lang":"es","value":"El controlador libvirt en OpenStack Compute (Nova) en versiones anteriores a 2015.1.4 (kilo) y 12.0.x en versiones anteriores a 12.0.3 (liberty), cuando usa almacenamiento en bruto y use_cow_images está establecido a false, permite a usuarios remotos autenticados leer archivos arbitrarios a través de una cabecera qcow2 manipulada en un disco efímero o root."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.0.3","matchCriteriaId":"142529AB-F3CF-465C-9CB5-73882DA5F426"},{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","versionStartIncluding":"2015.1.0","versionEndExcluding":"2015.1.4","matchCriteriaId":"5F9CAA05-E091-44E1-A511-BA3BA7B3A11D"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/03/08/6","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84277","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.launchpad.net/nova/+bug/1548450","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-007.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/08/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.launchpad.net/nova/+bug/1548450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2166","sourceIdentifier":"secalert@redhat.com","published":"2016-04-12T14:59:11.183","lastModified":"2026-06-17T00:43:34.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors."},{"lang":"es","value":"Las clases (1) proton.reactor.Connector, (2) proton.reactor.Container y (3) proton.utils.BlockingConnection en Apache Qpid Proton en versiones anteriores a 0.12.1 usan de forma incorrecta una conexión cifrada para un esquema URI amqps cuando el soporte SSL no está disponible, lo que podría permitir a atacantes man-in-the-middle obtener información sensible o modificar datos a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:qpid_proton:*:*:*:*:*:*:*:*","versionEndIncluding":"0.12.0","matchCriteriaId":"69CBB899-677D-400A-B8A9-F5023E4F28CD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182414.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136403/Apache-Qpid-Proton-0.12.0-SSL-Failure.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://qpid.apache.org/releases/qpid-proton-0.12.1/release-notes.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537864/100/0/threaded","source":"secalert@redhat.com"},{"url":"https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git%3Bh=a058585","source":"secalert@redhat.com"},{"url":"https://issues.apache.org/jira/browse/PROTON-1157","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182414.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136403/Apache-Qpid-Proton-0.12.0-SSL-Failure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://qpid.apache.org/releases/qpid-proton-0.12.1/release-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git%3Bh=a058585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/jira/browse/PROTON-1157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3166","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T15:59:04.027","lastModified":"2026-06-17T00:45:13.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP headers."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en la función drupal_set_header en Drupal 6.x en versiones anteriores a 6.38, cuando se utiliza con PHP en versiones anteriores a 5.1.2, permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de división de respuesta HTTP aprovechando un módulo que permite que los datos enviados por usuraio aparezcan en las cabeceras HTTP."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4149703-F7BB-4513-9379-992C089532D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FCBC7BB8-2B50-476D-BD96-C968F105CE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"550778E2-BEE5-403D-8744-0B18C5D3AFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"31B9F954-3A10-4378-A842-4061E97056DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*","matchCriteriaId":"5BD3F6D1-2530-4B4C-86BE-DFDB886BF6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FDF535DF-2338-4BF8-A9AC-3B6C60C4D591"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"58876D53-BCE4-459E-AC75-37E4E46621CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"937F4629-2AA1-4954-BF72-8E9CAF1B67FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"6410BD0A-1B47-4EC2-8D2A-161ADBB09699"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*","matchCriteriaId":"64D0A167-BE47-4E4E-8467-0AD2F38A3431"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*","matchCriteriaId":"C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*","matchCriteriaId":"B8D25FA1-2F31-40DB-AD54-DB233E060B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*","matchCriteriaId":"7F91E944-26C4-4886-B9B9-F32BD15569BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DF00E9-3952-4D1C-8ED5-3270BD9697F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*","matchCriteriaId":"0B779FA7-E371-4111-95B7-301C804DC0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*","matchCriteriaId":"B89B2E01-DFC7-4672-85E7-3930EE653806"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*","matchCriteriaId":"39169C30-5F4D-4333-B0B9-0881811F1E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.16:*:*:*:*:*:*:*","matchCriteriaId":"A9703D3D-C2D3-4EA0-A67E-CC17B0146B10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.17:*:*:*:*:*:*:*","matchCriteriaId":"2EEDA1EF-D7DB-47B5-BF6C-A9ED84427030"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.18:*:*:*:*:*:*:*","matchCriteriaId":"6EFE9DB8-972F-4BE2-9087-ED38ACFAA822"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.19:*:*:*:*:*:*:*","matchCriteriaId":"13F27EC1-48AF-402C-A1A6-0B66E693ABD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.20:*:*:*:*:*:*:*","matchCriteriaId":"54143AC5-9F03-4BD7-8FFE-A6DAE1634504"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.21:*:*:*:*:*:*:*","matchCriteriaId":"EE98FD40-92FB-4417-85EB-FBACA56ED5BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.22:*:*:*:*:*:*:*","matchCriteriaId":"C5D7A256-8631-4AD2-8B56-89FFE46A3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.23:*:*:*:*:*:*:*","matchCriteriaId":"FF7DC189-520E-4EB4-BBEC-4EF0D13E0BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.24:*:*:*:*:*:*:*","matchCriteriaId":"11641CDE-16A3-49BF-BF2F-AC6C01DED11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.25:*:*:*:*:*:*:*","matchCriteriaId":"5F3E83BA-AA3B-4FE7-B023-DC6EAA9E18F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.26:*:*:*:*:*:*:*","matchCriteriaId":"7E51C4AA-C0D2-4D13-8EE6-8DB99FB37C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.27:*:*:*:*:*:*:*","matchCriteriaId":"6E26331F-58DD-4338-8C6B-B389107574F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.28:*:*:*:*:*:*:*","matchCriteriaId":"0A71C1B0-4ADF-4160-8C4B-88D42382046C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.29:*:*:*:*:*:*:*","matchCriteriaId":"E48D8F72-DEDD-4D40-8B97-8B59AF1E089F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.30:*:*:*:*:*:*:*","matchCriteriaId":"16D4AAB4-ED93-44F7-AA4E-0E18C6BFBD32"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.31:*:*:*:*:*:*:*","matchCriteriaId":"32AD25C6-7F0D-42CC-856A-04F8D3AF30BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.32:*:*:*:*:*:*:*","matchCriteriaId":"C886384D-F7E7-48FF-A7AF-1DE6A0A4098D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.33:*:*:*:*:*:*:*","matchCriteriaId":"7AFEAF9B-29B5-45C1-982F-BF207C7C4C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.34:*:*:*:*:*:*:*","matchCriteriaId":"6CC23FB5-BCBC-4961-AFAC-2A038A8CCA84"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.35:*:*:*:*:*:*:*","matchCriteriaId":"4D9FAB92-2E65-45CF-8ABD-4908319FF071"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.36:*:*:*:*:*:*:*","matchCriteriaId":"96D3AF1B-C00A-4BDD-8D7A-E711B7FB3FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.37:*:*:*:*:*:*:*","matchCriteriaId":"86010353-5828-4715-9524-7FD631E58D05"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3498","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/24/19","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/15/10","source":"cve@mitre.org"},{"url":"https://www.drupal.org/SA-CORE-2016-001","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/24/19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/15/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.drupal.org/SA-CORE-2016-001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/93.html\">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>"}},{"cve":{"id":"CVE-2016-3168","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T15:59:05.963","lastModified":"2026-06-17T00:45:13.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a \"reflected file download vulnerability.\""},{"lang":"es","value":"El módulo System en Drupal 6.x en versiones anteriores a 6.38 y 7.x en versiones anteriores a 7.43 podría permitir a atacantes remotos secuestrar la autenticación de los administradores del sitio para peticiones que descargan y ejecutan archivos con un contenido codificado-JSON arbitrario, también conocido como \"vulnerabilidad de descarga de archivo reflejado\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","baseScore":8.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4149703-F7BB-4513-9379-992C089532D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FCBC7BB8-2B50-476D-BD96-C968F105CE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"550778E2-BEE5-403D-8744-0B18C5D3AFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"31B9F954-3A10-4378-A842-4061E97056DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*","matchCriteriaId":"5BD3F6D1-2530-4B4C-86BE-DFDB886BF6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FDF535DF-2338-4BF8-A9AC-3B6C60C4D591"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"58876D53-BCE4-459E-AC75-37E4E46621CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"937F4629-2AA1-4954-BF72-8E9CAF1B67FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"6410BD0A-1B47-4EC2-8D2A-161ADBB09699"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*","matchCriteriaId":"64D0A167-BE47-4E4E-8467-0AD2F38A3431"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*","matchCriteriaId":"C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*","matchCriteriaId":"B8D25FA1-2F31-40DB-AD54-DB233E060B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*","matchCriteriaId":"7F91E944-26C4-4886-B9B9-F32BD15569BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DF00E9-3952-4D1C-8ED5-3270BD9697F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*","matchCriteriaId":"0B779FA7-E371-4111-95B7-301C804DC0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*","matchCriteriaId":"B89B2E01-DFC7-4672-85E7-3930EE653806"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*","matchCriteriaId":"39169C30-5F4D-4333-B0B9-0881811F1E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.16:*:*:*:*:*:*:*","matchCriteriaId":"A9703D3D-C2D3-4EA0-A67E-CC17B0146B10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.17:*:*:*:*:*:*:*","matchCriteriaId":"2EEDA1EF-D7DB-47B5-BF6C-A9ED84427030"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.18:*:*:*:*:*:*:*","matchCriteriaId":"6EFE9DB8-972F-4BE2-9087-ED38ACFAA822"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.19:*:*:*:*:*:*:*","matchCriteriaId":"13F27EC1-48AF-402C-A1A6-0B66E693ABD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.20:*:*:*:*:*:*:*","matchCriteriaId":"54143AC5-9F03-4BD7-8FFE-A6DAE1634504"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.21:*:*:*:*:*:*:*","matchCriteriaId":"EE98FD40-92FB-4417-85EB-FBACA56ED5BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.22:*:*:*:*:*:*:*","matchCriteriaId":"C5D7A256-8631-4AD2-8B56-89FFE46A3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.23:*:*:*:*:*:*:*","matchCriteriaId":"FF7DC189-520E-4EB4-BBEC-4EF0D13E0BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.24:*:*:*:*:*:*:*","matchCriteriaId":"11641CDE-16A3-49BF-BF2F-AC6C01DED11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.25:*:*:*:*:*:*:*","matchCriteriaId":"5F3E83BA-AA3B-4FE7-B023-DC6EAA9E18F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.26:*:*:*:*:*:*:*","matchCriteriaId":"7E51C4AA-C0D2-4D13-8EE6-8DB99FB37C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.27:*:*:*:*:*:*:*","matchCriteriaId":"6E26331F-58DD-4338-8C6B-B389107574F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.28:*:*:*:*:*:*:*","matchCriteriaId":"0A71C1B0-4ADF-4160-8C4B-88D42382046C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.29:*:*:*:*:*:*:*","matchCriteriaId":"E48D8F72-DEDD-4D40-8B97-8B59AF1E089F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.30:*:*:*:*:*:*:*","matchCriteriaId":"16D4AAB4-ED93-44F7-AA4E-0E18C6BFBD32"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.31:*:*:*:*:*:*:*","matchCriteriaId":"32AD25C6-7F0D-42CC-856A-04F8D3AF30BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.32:*:*:*:*:*:*:*","matchCriteriaId":"C886384D-F7E7-48FF-A7AF-1DE6A0A4098D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.33:*:*:*:*:*:*:*","matchCriteriaId":"7AFEAF9B-29B5-45C1-982F-BF207C7C4C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.34:*:*:*:*:*:*:*","matchCriteriaId":"6CC23FB5-BCBC-4961-AFAC-2A038A8CCA84"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.35:*:*:*:*:*:*:*","matchCriteriaId":"4D9FAB92-2E65-45CF-8ABD-4908319FF071"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.36:*:*:*:*:*:*:*","matchCriteriaId":"96D3AF1B-C00A-4BDD-8D7A-E711B7FB3FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.37:*:*:*:*:*:*:*","matchCriteriaId":"86010353-5828-4715-9524-7FD631E58D05"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*","matchCriteriaId":"48C33CAB-4633-418C-B162-20A2EC24E8DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"CC3B1750-17AD-4386-B6EE-1AFC9CDFB6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"9E0C1873-22A6-4CE9-853D-2A40BD3D9E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"9F6DF608-0DA2-455F-AD28-7BE4A7548E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"7BCC306D-EB5D-4784-B0B1-B4F9370796F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"5639A5F3-CD18-451C-BA5A-3336C42BED83"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"5B0A10CA-F59E-48AC-97E9-8476F63BAEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"07B7917C-5934-4AFF-B3DB-BE9B099B27FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"16731B53-3CD1-4B98-947B-7621162D8DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"BD738402-A50E-4AEB-8F42-607F52DE5540"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*","matchCriteriaId":"199AC10C-6E65-409B-8658-E26240B27E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*","matchCriteriaId":"2B378BEF-B070-4955-A6B3-8F2ACBA96832"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"19EC9A36-5EDC-4519-802E-BEA69B18800A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"8C281EA7-8AE1-4D5A-B03B-B3BE37740195"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*","matchCriteriaId":"024CF5B1-1875-4785-ACAF-35ECCC7914A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5F446903-51AC-4FA3-BA90-C2EA59BBDB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1FE86CC5-956E-4F16-BE7B-2B1CAAEB5C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F0AC1B21-D3BE-4B6A-AE40-8B395E81DD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*","matchCriteriaId":"7E5E8A73-1C02-4900-BC30-83084DC8371C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*","matchCriteriaId":"A92A41E3-BF0F-49BD-9F0F-5FDC11BF2499"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*","matchCriteriaId":"937C3149-3F34-40D8-964D-FB65EBDF0BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*","matchCriteriaId":"90CD183A-3777-44F9-8CA6-8E802058D099"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*","matchCriteriaId":"68C0CC63-558B-4750-8293-926BE9EAD42C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*","matchCriteriaId":"CA66BCA5-3934-449E-BAD3-D0DFBF4A04BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*","matchCriteriaId":"5030281C-CD4F-4106-A100-332A4C3C2AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D408134A-29E8-4D6A-9352-DB7F9CF55FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*","matchCriteriaId":"3B08C41E-2357-44D5-A3A7-75389B343B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*","matchCriteriaId":"E9F40588-308A-4BA7-AE62-5DCC7D7528EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*","matchCriteriaId":"E41BD65A-F39B-42C5-8776-CE09345A531D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*","matchCriteriaId":"CBAFBC02-38E9-41F3-8944-6F6AB0A85941"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*","matchCriteriaId":"9069C99D-C935-4272-B7F4-172CFD246835"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*","matchCriteriaId":"41BE2EAA-CC60-4EFA-9E75-61EDA0EB69B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*","matchCriteriaId":"71CABDC4-0E47-4E33-9075-79E0D59D9A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*","matchCriteriaId":"74A5893C-A855-4C49-A17A-83B6172C0496"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*","matchCriteriaId":"4048A2C7-9646-42E3-9D4B-DE9CF4AC66C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:*","matchCriteriaId":"2C915139-9B3A-4583-99A9-3447ACEF9E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:*","matchCriteriaId":"01BE6A75-15F2-416C-9EBB-6FDD995C7399"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D82630-555A-43CE-986D-2D15DD8A68F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:*","matchCriteriaId":"AB9F1B32-B3C0-47AB-96C1-0AEF7A96744A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:*","matchCriteriaId":"A23E72D9-9301-4CF8-A083-0AEC91F2845E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:*","matchCriteriaId":"983636D8-084A-40AA-8EEA-39D4D39EA056"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:*","matchCriteriaId":"5FEAA6C1-D2F5-4C7A-AEEA-FEDD52F039B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:*","matchCriteriaId":"BCAC8831-637A-49B7-9DFD-93965D0944A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:*","matchCriteriaId":"247FF6EA-E8E8-4AC9-BC03-6D8929DC60EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:*","matchCriteriaId":"73AAA716-1DB3-4D38-A52B-F579EE5627AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:*","matchCriteriaId":"18257E82-134E-4B4B-9AA4-997582A6FE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.31:*:*:*:*:*:*:*","matchCriteriaId":"C53AC67F-07A4-4DDF-9A21-AAC32E388454"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.32:*:*:*:*:*:*:*","matchCriteriaId":"E350D8C6-5618-4C7E-8D0D-D448B7B485EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:*","matchCriteriaId":"42224177-DEFC-4A23-9707-0C2A96902FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:*","matchCriteriaId":"2C0017C6-C985-4F0C-89C4-198063DAB3FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:*","matchCriteriaId":"EA2A100A-4579-4E32-9ED1-54E6063032CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:*","matchCriteriaId":"9B41BB85-CED1-4CED-A56E-A58A22AAE4CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:*","matchCriteriaId":"19437699-98F7-40EC-B0F9-502CA8126749"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:*","matchCriteriaId":"3697FD64-0D39-45E0-B91E-6190B13CE8AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.40:*:*:*:*:*:*:*","matchCriteriaId":"29B0AE8A-97A8-4105-B0E8-5CABBFD50587"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.41:*:*:*:*:*:*:*","matchCriteriaId":"AC8AB4B2-AC8C-4E15-BA79-760871794944"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.42:*:*:*:*:*:*:*","matchCriteriaId":"F0389B8B-AF62-42DE-8A3E-2FAFA39CAA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"0F860666-578F-4B48-ABCA-1B5F2697DEAB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3498","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/24/19","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/15/10","source":"cve@mitre.org"},{"url":"https://www.drupal.org/SA-CORE-2016-001","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/24/19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/15/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.drupal.org/SA-CORE-2016-001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3170","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T15:59:07.917","lastModified":"2026-06-17T00:45:13.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The \"have you forgotten your password\" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username information by leveraging a configuration that permits using an email address to login and a module that permits logging in."},{"lang":"es","value":"Los enlaces de \"has olvidado tu contraseña\" en el módulo User en Drupal 7.x en versiones anteriores a 7.43 y 8.x en versiones anteriores a 8.0.4 permiten a atacantes remotos obtener información sensible de nombre de usuario aprovechando una configuración que permite usar un dirección de correo electrónico para el inicio de sesión y un módulo que permite iniciar la sesión."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*","matchCriteriaId":"48C33CAB-4633-418C-B162-20A2EC24E8DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"CC3B1750-17AD-4386-B6EE-1AFC9CDFB6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"9E0C1873-22A6-4CE9-853D-2A40BD3D9E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"9F6DF608-0DA2-455F-AD28-7BE4A7548E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"7BCC306D-EB5D-4784-B0B1-B4F9370796F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"5639A5F3-CD18-451C-BA5A-3336C42BED83"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"5B0A10CA-F59E-48AC-97E9-8476F63BAEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"07B7917C-5934-4AFF-B3DB-BE9B099B27FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"16731B53-3CD1-4B98-947B-7621162D8DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"BD738402-A50E-4AEB-8F42-607F52DE5540"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*","matchCriteriaId":"199AC10C-6E65-409B-8658-E26240B27E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*","matchCriteriaId":"2B378BEF-B070-4955-A6B3-8F2ACBA96832"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"19EC9A36-5EDC-4519-802E-BEA69B18800A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"8C281EA7-8AE1-4D5A-B03B-B3BE37740195"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*","matchCriteriaId":"024CF5B1-1875-4785-ACAF-35ECCC7914A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5F446903-51AC-4FA3-BA90-C2EA59BBDB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1FE86CC5-956E-4F16-BE7B-2B1CAAEB5C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F0AC1B21-D3BE-4B6A-AE40-8B395E81DD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*","matchCriteriaId":"7E5E8A73-1C02-4900-BC30-83084DC8371C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*","matchCriteriaId":"A92A41E3-BF0F-49BD-9F0F-5FDC11BF2499"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*","matchCriteriaId":"937C3149-3F34-40D8-964D-FB65EBDF0BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*","matchCriteriaId":"90CD183A-3777-44F9-8CA6-8E802058D099"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*","matchCriteriaId":"68C0CC63-558B-4750-8293-926BE9EAD42C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*","matchCriteriaId":"CA66BCA5-3934-449E-BAD3-D0DFBF4A04BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*","matchCriteriaId":"5030281C-CD4F-4106-A100-332A4C3C2AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D408134A-29E8-4D6A-9352-DB7F9CF55FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*","matchCriteriaId":"3B08C41E-2357-44D5-A3A7-75389B343B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*","matchCriteriaId":"E9F40588-308A-4BA7-AE62-5DCC7D7528EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*","matchCriteriaId":"E41BD65A-F39B-42C5-8776-CE09345A531D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*","matchCriteriaId":"CBAFBC02-38E9-41F3-8944-6F6AB0A85941"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*","matchCriteriaId":"9069C99D-C935-4272-B7F4-172CFD246835"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*","matchCriteriaId":"41BE2EAA-CC60-4EFA-9E75-61EDA0EB69B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*","matchCriteriaId":"71CABDC4-0E47-4E33-9075-79E0D59D9A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*","matchCriteriaId":"74A5893C-A855-4C49-A17A-83B6172C0496"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*","matchCriteriaId":"4048A2C7-9646-42E3-9D4B-DE9CF4AC66C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:*","matchCriteriaId":"2C915139-9B3A-4583-99A9-3447ACEF9E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:*","matchCriteriaId":"01BE6A75-15F2-416C-9EBB-6FDD995C7399"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D82630-555A-43CE-986D-2D15DD8A68F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:*","matchCriteriaId":"AB9F1B32-B3C0-47AB-96C1-0AEF7A96744A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:*","matchCriteriaId":"A23E72D9-9301-4CF8-A083-0AEC91F2845E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:*","matchCriteriaId":"983636D8-084A-40AA-8EEA-39D4D39EA056"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:*","matchCriteriaId":"5FEAA6C1-D2F5-4C7A-AEEA-FEDD52F039B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:*","matchCriteriaId":"BCAC8831-637A-49B7-9DFD-93965D0944A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:*","matchCriteriaId":"247FF6EA-E8E8-4AC9-BC03-6D8929DC60EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:*","matchCriteriaId":"73AAA716-1DB3-4D38-A52B-F579EE5627AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:*","matchCriteriaId":"18257E82-134E-4B4B-9AA4-997582A6FE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:*","matchCriteriaId":"42224177-DEFC-4A23-9707-0C2A96902FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:*","matchCriteriaId":"2C0017C6-C985-4F0C-89C4-198063DAB3FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:*","matchCriteriaId":"EA2A100A-4579-4E32-9ED1-54E6063032CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:*","matchCriteriaId":"9B41BB85-CED1-4CED-A56E-A58A22AAE4CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:*","matchCriteriaId":"19437699-98F7-40EC-B0F9-502CA8126749"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:*","matchCriteriaId":"3697FD64-0D39-45E0-B91E-6190B13CE8AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.39:*:*:*:*:*:*:*","matchCriteriaId":"C6449B24-7C8B-4035-8254-5EDFBE1C3ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.40:*:*:*:*:*:*:*","matchCriteriaId":"29B0AE8A-97A8-4105-B0E8-5CABBFD50587"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.41:*:*:*:*:*:*:*","matchCriteriaId":"AC8AB4B2-AC8C-4E15-BA79-760871794944"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.42:*:*:*:*:*:*:*","matchCriteriaId":"F0389B8B-AF62-42DE-8A3E-2FAFA39CAA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"0F860666-578F-4B48-ABCA-1B5F2697DEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha10:*:*:*:*:*:*","matchCriteriaId":"897A9FBF-EB02-460C-83B6-D5D6957C2EE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha11:*:*:*:*:*:*","matchCriteriaId":"8266CF92-E131-4115-862E-BE113B1C003B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha12:*:*:*:*:*:*","matchCriteriaId":"620E13F1-96B2-4D16-9B2B-5CC4E268C9A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha13:*:*:*:*:*:*","matchCriteriaId":"A3445907-8EDE-4DFA-8BCB-38C968819D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha14:*:*:*:*:*:*","matchCriteriaId":"AF72CBEA-69AC-4E30-9AA2-3DDDAEF3EB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha15:*:*:*:*:*:*","matchCriteriaId":"3CC04EB1-B046-4525-A5E5-FDB4D7F06C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"54FB4F7A-8321-4894-BC8E-4ED3AFE291E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"037625CC-B56F-413F-A278-A58045B120E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"EA99A37D-A17E-48D9-9BE7-A78C7E3C9FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"8542BB7C-23CF-4684-8133-3325C8E632F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"194F08D9-35B6-4797-A84D-B731888587BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"D7ADF7C3-772B-446E-B2BD-E331A3DF919F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha8:*:*:*:*:*:*","matchCriteriaId":"1C09176B-7E00-4F6F-A9B8-8CEB2C958D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:alpha9:*:*:*:*:*:*","matchCriteriaId":"FDEF14CF-6851-4ED7-97AC-E6C652B5E943"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"074DDC00-1D47-406B-9FD7-DE89D9A64B16"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta10:*:*:*:*:*:*","matchCriteriaId":"B44AA863-662C-4B12-9F6F-98F9D4634598"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta11:*:*:*:*:*:*","matchCriteriaId":"8AC5AD97-5E7F-49D9-B3CD-DDA5BDF4F94D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta12:*:*:*:*:*:*","matchCriteriaId":"C3980768-7559-4CFC-B838-09CB03E04C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta13:*:*:*:*:*:*","matchCriteriaId":"0EF0CDD5-6CCA-47D8-91FA-72A0DAEC322C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta14:*:*:*:*:*:*","matchCriteriaId":"158F8798-50CD-4B0D-8A7E-0B80AC523B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta15:*:*:*:*:*:*","matchCriteriaId":"E85FCB36-54C1-46A5-BC43-0CD77DF25ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta16:*:*:*:*:*:*","matchCriteriaId":"986B87B6-021B-49CF-AFFA-F1FAC0719C6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"561BA0A2-CCE8-4D7A-A636-2D917F6068B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"4AC9BD8A-C8CC-47A8-BB3E-6437A28B5B4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta4:*:*:*:*:*:*","matchCriteriaId":"AF28042F-CFCF-47CA-8573-30748D99FA9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta6:*:*:*:*:*:*","matchCriteriaId":"C3E29A20-8505-4133-B60B-19AB67A52307"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta7:*:*:*:*:*:*","matchCriteriaId":"6BA9F4DE-84D2-454A-9470-6A08613ACE19"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:beta9:*:*:*:*:*:*","matchCriteriaId":"277EE73A-1864-421E-BE3E-F08A11B4F976"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"550268BF-4EE3-415C-ACD0-6200FBE7DDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C2F2A3D3-EF52-43FF-A89C-225BFD841E08"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1A375E15-8627-4647-AE84-7CEA98BE80AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0:rc4:*:*:*:*:*:*","matchCriteriaId":"C5EBCBCF-0489-4338-9170-1D197BE906BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"99D7F3C7-3EC6-48D2-A8D5-1F987FD74A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"434D4D80-44C0-4278-A09B-005A599F4658"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2CF1BC91-4A24-40FC-8EEC-E4FAD624C2CD"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3498","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/24/19","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/15/10","source":"cve@mitre.org"},{"url":"https://www.drupal.org/SA-CORE-2016-001","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/24/19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/15/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.drupal.org/SA-CORE-2016-001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2162","sourceIdentifier":"secalert@redhat.com","published":"2016-04-12T16:59:01.203","lastModified":"2026-06-17T00:43:33.760","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors involving language display."},{"lang":"es","value":"Apache Struts 2.x en versiones anteriores a 2.3.25 no sanitiza el texto en el objeto Locale construído por I18NInterceptor, lo que podría permitir a atacantes remotos llevar a cabo ataques de XSS a través de vectores no especificados que implican la visualización de idioma."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5CF11DCF-6F6E-4E18-988E-E43918FBB8A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE3A90B7-C632-4D3E-9A4F-21E46D273B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"386538BE-F258-4870-8E11-750ADA228026"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B4CF15B9-3714-4206-9971-1F7D59E20483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFA32D87-65C7-4589-86B7-500BE3203CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"98C3FB11-4E24-4067-A3A9-021F849DAAE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4DCF2D72-90F1-4D1B-94A2-5BB3D8C086C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"661F1610-9FCD-4FC1-BCA1-69C58E0A1389"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D9C89E22-B106-4EAB-90A1-0EA86C165737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E1BABB2-780E-47E0-87A9-A164906C8421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AC32348E-7EF4-411C-9A44-CD041ABFA0E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"94BD452B-AE41-4F7A-9DB9-4B1039582537"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"ACFDC53B-7B8E-4333-BC87-E01024EC9C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9F0818E7-B617-4C30-BFAC-9FE2F375F8BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"50F4A58E-F3D4-4711-A37E-EA538B112371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"EFFCC96F-FD87-4495-B8A5-19D7898D5662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"DEA0424E-84B4-41BD-8E6C-93E2A77DD6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1:*:*:*:*:*:*:*","matchCriteriaId":"DEE2D92E-A527-469A-89A9-9685D8E08650"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CEC53AE5-3640-4FE1-B0B1-EA26C5B9EB9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"662A2E4B-A76A-4498-98A6-F90DF65C62B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E720B3A-4CFB-47FE-B80C-67C59D4C7FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"A4275EB1-8AD1-4CB2-BC19-8F279BFA8D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CA687B56-A09B-4741-84F1-2BD9569A3F76"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"0BC0E358-8B4D-480B-BFAE-966CB697310A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2B7E8E1C-C667-4AED-86A5-2BD0C62AAD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"88B3348C-1086-4A16-97E3-52DB65FF860A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3C65711D-9C5B-4644-A12D-82243CB6FB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"FC1FA9A7-2C8E-4651-9400-190198528642"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA9093C0-AE6A-4285-B159-8FDBF37E33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"267A1C33-1C95-41DA-8A01-6F20C7BE1772"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7E4590B9-6A44-4DC6-B7DF-5E6CAAA9D25A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30860683-D403-4D24-B356-FD306AEFCA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4E3316DA-9E34-4955-91CA-E35B141A7007"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0D152B29-FAD5-4DEA-B187-278EBD37FEB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2AC68463-F500-471C-8600-8F8FD9743B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A92AAE08-4811-465A-8178-25F5F349B8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B487975D-6394-4136-B45C-C1F209465B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BDC41957-8CCA-46A6-BD31-4039EEF3C457"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"443B4E64-2A36-49C6-B09D-77B3BDF69709"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"2481505C-4FD1-4195-9E10-9DD741498FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"28ED63DB-2AAF-4BC9-A844-074EDF63C89A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*","matchCriteriaId":"38A6CEED-6C43-4325-B36C-9F254CCDFDC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*","matchCriteriaId":"41F43088-26AA-4890-A9D6-1B9B48D5F02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*","matchCriteriaId":"BE6820E3-8FDF-4BDF-8B62-E604A91F1280"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D25ED06A-F12C-443E-9B3F-FDDF52FE9D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*","matchCriteriaId":"44527919-8403-42A8-9CE1-3B4F58630F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB91D8A-14B8-4263-B90D-F776535F9B8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*","matchCriteriaId":"FB525941-7175-43C1-9F17-814F5F7C72CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*","matchCriteriaId":"F10D559E-04A0-4002-947C-D3902138795B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*","matchCriteriaId":"89203DD8-2C95-4546-9504-83654FFA5DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*","matchCriteriaId":"EB3D5644-CFAC-4FB5-A1FB-387F97876098"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*","matchCriteriaId":"1225A0B0-C3F2-4579-BFE9-F8DB2CF596F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*","matchCriteriaId":"8DC883A7-0766-4857-ABC8-9DB4BA713650"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*","matchCriteriaId":"22FF6282-0BCA-46EB-9648-6EE3EDA189F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*","matchCriteriaId":"524C5119-416D-413B-BF1D-29291E23FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*","matchCriteriaId":"45446B16-F531-4C6D-B889-A8A6622C70A2"}]}]}],"references":[{"url":"http://struts.apache.org/docs/s2-030.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85070","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035272","source":"secalert@redhat.com"},{"url":"http://struts.apache.org/docs/s2-030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035272","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4003","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T16:59:04.313","lastModified":"2026-06-17T00:46:43.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the URLDecoder function in JRE before 1.8, as used in Apache Struts 2.x before 2.3.28, when using a single byte page encoding, allows remote attackers to inject arbitrary web script or HTML via multi-byte characters in a url-encoded parameter."},{"lang":"es","value":"Vulnerabilidad de XSS en la función URLDecoder en JRE en versiones anteriores a 1.8, tal y como se utiliza en Apache Struts 2.x en versiones anteriores a 2.3.28, cuando utiliza una codificación de página de un solo byte, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de caracteres multi-byte en un parámetro con codificación url."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.3.24.1","matchCriteriaId":"E1F46D0C-BEAD-4CF3-827F-28D3BFD0A4AB"}]}]}],"references":[{"url":"http://struts.apache.org/docs/s2-028.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86311","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035268","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/jira/browse/WW-4507","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://struts.apache.org/docs/s2-028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/jira/browse/WW-4507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5347","sourceIdentifier":"secalert@redhat.com","published":"2016-04-12T17:59:00.153","lastModified":"2026-06-17T00:28:58.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.markup.html.modal.ModalWindow in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 might allow remote attackers to inject arbitrary web script or HTML via a ModalWindow title."},{"lang":"es","value":"Vulnerabilidad de XSS en la función getWindowOpenJavaScript en org.apache.wicket.extensions.ajax.markup.html.modal.ModalWindow en Apache Wicket 1.5.x en versiones anteriores a 1.5.15, 6.x en versiones anteriores a 6.22.0 y 7.x en versiones anteriores a 7.2.0 podría permitir a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un título ModalWindow."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:wicket:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndExcluding":"1.5.15","matchCriteriaId":"0D81734E-4BD5-45D5-80AD-B6411A070A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:wicket:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.22.0","matchCriteriaId":"BC5AB86D-30D8-431A-AF00-496C5E5248ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:wicket:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.2.0","matchCriteriaId":"EF392957-7CBF-45C3-A6D1-21B193B608DE"}]}]}],"references":[{"url":"http://wicket.apache.org/news/2016/03/01/cve-2015-5347.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035165","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/jira/browse/WICKET-6037","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"http://wicket.apache.org/news/2016/03/01/cve-2015-5347.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/jira/browse/WICKET-6037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7520","sourceIdentifier":"secalert@redhat.com","published":"2016-04-12T17:59:01.217","lastModified":"2026-06-17T00:32:41.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow remote attackers to inject arbitrary web script or HTML via a crafted \"value\" attribute in a <input> element."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en las clases (1) RadioGroup y (2) CheckBoxMultipleChoice en Apache Wicket 1.5.x en versiones anteriores a 1.5.15, 6.x en versiones anteriores a 6.22.0 y 7.x en versiones anteriores a 7.2.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un atributo \"valor\" manipulado en un elemento ."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:wicket:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndExcluding":"1.5.15","matchCriteriaId":"0D81734E-4BD5-45D5-80AD-B6411A070A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:wicket:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.22.0","matchCriteriaId":"BC5AB86D-30D8-431A-AF00-496C5E5248ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:wicket:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.0","matchCriteriaId":"AB23C89B-AFA2-4556-B0C0-2D12ED25E6D7"}]}]}],"references":[{"url":"http://wicket.apache.org/news/2016/03/02/cve-2015-7520.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035166","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://wicket.apache.org/news/2016/03/02/cve-2015-7520.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-4004","sourceIdentifier":"cve@mitre.org","published":"2016-04-12T17:59:06.937","lastModified":"2026-06-17T00:46:43.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated administrators to read arbitrary files via a ..\\ (dot dot backslash) in the file parameter to ViewFile."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Dell OpenManage Server Administrator (OMSA) 8.2 permite a administradores remotos autenticados leer archivos arbitrarios a través de un ..\\ (punto punto barra invertida) en el parámetro file en ViewFile."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dell:openmanage_server_administrator:8.2:*:*:*:*:*:*:*","matchCriteriaId":"784D04A9-DBE6-4102-850D-4F6639ED8E23"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035564","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/39486/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id/1035564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39486/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2016-0128","sourceIdentifier":"secure@microsoft.com","published":"2016-04-12T23:59:06.587","lastModified":"2026-06-17T00:36:58.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 do not properly establish an RPC channel, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka \"Windows SAM and LSAD Downgrade Vulnerability\" or \"BADLOCK.\""},{"lang":"es","value":"Las implementaciones de protocolo SAM y LSAD en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold y 1511 no establecen correctamente un canal RPC, lo que permite a atacantes man-in-the-middle llevar a cabo ataques de desactualización de protocolo y hacerse pasar por usuarios modificando el flujo de datos cliente-servidor, también conocida como \"Windows SAM y LSAD Downgrade Vulnerability\" or \"BADLOCK\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*","matchCriteriaId":"7519928D-0FF2-4584-8058-4C7764CD5671"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://badlock.org/","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035534","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-047","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/813296","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.samba.org/samba/security/CVE-2016-2118.html","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://badlock.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/813296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.samba.org/samba/security/CVE-2016-2118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0158","sourceIdentifier":"secure@microsoft.com","published":"2016-04-12T23:59:22.080","lastModified":"2026-06-17T00:37:01.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka \"Microsoft Edge Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-0161."},{"lang":"es","value":"Microsoft Edge permite a atacantes remotos eludir la Same Origin Policy a través de vectores no especificados, también conocida como \"Microsoft Edge Elevation of Privilege Vulnerability\", una vulnerabilidad diferente a CVE-2016-0161."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035522","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-233","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-038","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0161","sourceIdentifier":"secure@microsoft.com","published":"2016-04-12T23:59:25.333","lastModified":"2026-06-17T00:37:02.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka \"Microsoft Edge Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-0158."},{"lang":"es","value":"Microsoft Edge permite a atacantes remotos eludir la Same Origin Policy a través de vectores no especificados, también conocida como \"Microsoft Edge Elevation of Privilege Vulnerability\", una vulnerabilidad diferente a CVE-2016-0158."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035522","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-038","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0162","sourceIdentifier":"secure@microsoft.com","published":"2016-04-12T23:59:26.410","lastModified":"2026-06-17T00:37:02.340","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka \"Internet Explorer Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 9 hasta la versión 11 permite a atacantes remotos determinar la existencia de archivos a través código JavaScript manipulado, también conocida como \"Internet Explorer Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-10T16:52:55.329867Z","id":"CVE-2016-0162","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-05-24","cisaActionDue":"2022-06-14","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*","matchCriteriaId":"542DAEEC-73CC-46C6-A630-BF474A3446AC"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*","matchCriteriaId":"7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/85939","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035521","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-037","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0162","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2016-0887","sourceIdentifier":"security_alert@emc.com","published":"2016-04-12T23:59:31.413","lastModified":"2026-06-17T00:38:24.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before 6.2.1, and RSA BSAFE SSL-C before 2.8.9 allow remote attackers to discover a private-key prime by conducting a Lenstra side-channel attack that leverages an application's failure to detect an RSA signature failure during a TLS session."},{"lang":"es","value":"EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x y 4.1.x en versiones anteriores a 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x y 4.1.x en versiones anteriores a 4.1.3, RSA BSAFE Crypto-J en versiones anteriores a 6.2.1, RSA BSAFE SSL-J en versiones anteriores a 6.2.1 y RSA BSAFE SSL-C en versiones anteriores a 2.8.9 permiten a atacantes remotos descubrir un factor primo de clave privada llevando a cabo un ataque Lenstra de canal lateral que aprovecha el fallo de una aplicación para detectar un fallo de firma RSA durante una sesión TLS."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndIncluding":"4.0.5.3","matchCriteriaId":"673ED099-C778-4E51-89C4-369490646348"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndIncluding":"4.1.2","matchCriteriaId":"42D145F5-46EA-4198-BD59-BB296461324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.1","matchCriteriaId":"44D1B34C-998E-46E6-B7CF-EE28C8E5FBC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.11","matchCriteriaId":"5456BD00-766C-4868-9BA5-C8E82B353808"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndExcluding":"4.1.5","matchCriteriaId":"261B4766-7CD0-47F8-997E-706129AA0A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-c:*:*:*:*:*:*:*:*","versionEndExcluding":"2.8.9","matchCriteriaId":"03175755-5E21-4B3A-A329-9F1804CF98CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.1","matchCriteriaId":"36CE780D-E392-4543-A531-F6740823C53D"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136656/RSA-BSAFE-Lenstras-Attack.html","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Apr/66","source":"security_alert@emc.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538055/100/0/threaded","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035515","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035516","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035517","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/136656/RSA-BSAFE-Lenstras-Attack.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Apr/66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1376","sourceIdentifier":"psirt@cisco.com","published":"2016-04-12T23:59:34.323","lastModified":"2026-06-17T00:41:49.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors, and interface flap) via crafted bit patterns in packets, aka Bug ID CSCuv78548."},{"lang":"es","value":"Cisco IOS XR 4.2.3, 4.3.0, 4.3.4 y 5.3.1 en dispositivos ASR 9000 permite a atacantes remotos causar una denegación de servicio (CRC y errores de símbolo y parpadeo de interfaz) a través de patrones de bit manipulados en paquetes, también conocida como Bug ID CSCuv78548."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4DB87708-B088-47F7-BABA-2CD456766897"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"074571B4-65EF-451A-89DC-0797F6E4BFEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"55C35B00-49C6-4913-8673-3A1BB122A103"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"17A89483-1BC3-4F23-AEAC-C26E7E211CCE"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160412-asr","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035560","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160412-asr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1377","sourceIdentifier":"psirt@cisco.com","published":"2016-04-12T23:59:35.587","lastModified":"2026-06-17T00:41:49.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Unity Connection hasta la versión 11.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros no especificados, también conocida como Bug ID CSCus21776."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity_connection:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A49C1C0B-4B2A-4F13-996D-E3ED1F96C2A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity_connection:10.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C5CC8FF5-F0FA-41E8-AD78-D277AB9776DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity_connection:10.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"02F5AF19-C869-4A55-B4D7-38C0FFABCC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity_connection:10.5\\(2.3009\\):*:*:*:*:*:*:*","matchCriteriaId":"0C9B5432-11E5-4800-BB0F-48DFCAF409FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity_connection:11.0\\(0.98000.225\\):*:*:*:*:*:*:*","matchCriteriaId":"1961B4F5-C2E1-41C3-AD4A-F3ABA03EFD7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity_connection:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CE5AF057-C30E-4C1C-B962-505126AC52E3"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160412-unity","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035562","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160412-unity","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-6276","sourceIdentifier":"security@debian.org","published":"2016-04-13T14:59:00.140","lastModified":"2026-06-17T00:12:49.423","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details."},{"lang":"es","value":"schema.py en Roundup en versiones anteriores a 1.5.1 no limita correctamente atributos incluidos en permisos de usuario por defecto, lo que podría permitir a usuarios remotos autenticados obtener información sensible de usuario visualizando detalles de usuario."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"88E07488-2EC4-4437-B60D-C50D659C4A2A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://hg.code.sf.net/p/roundup/code/rev/a403c29ffaf9","source":"security@debian.org"},{"url":"http://www.debian.org/security/2016/dsa-3502","source":"security@debian.org"},{"url":"https://sourceforge.net/p/roundup/code/ci/tip/tree/CHANGES.txt","source":"security@debian.org","tags":["Patch"]},{"url":"http://hg.code.sf.net/p/roundup/code/rev/a403c29ffaf9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/p/roundup/code/ci/tip/tree/CHANGES.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2015-8682","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T14:59:04.923","lastModified":"2026-06-17T00:35:02.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01B350, GRA-CL00 before GRA-CL00C92B350, and GRA-CL10 before GRA-CL10C92B350 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to obtain sensitive information from stack memory or cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access."},{"lang":"es","value":"El controlador Video0 en smartphones Huawei P8 con software GRA-UL00 en versiones anteriores a GRA-UL00C00B350, GRA-UL10 en versiones anteriores a GRA-UL10C00B350, GRA-TL00 en versiones anteriores a GRA-TL00C01B350, GRA-CL00 en versiones anteriores a GRA-CL00C92B350 y GRA-CL10 en versiones anteriores a GRA-CL10C92B350 y smartphones Mate S con software CRR-TL00 en versiones anteriores a CRR-TL00C01B160SP01, CRR-UL00 en versiones anteriores a CRR-UL00C00B160 y CRR-CL00 en versiones anteriores a CRR-CL00C92B161 permite a atacantes obtener información sensible de la memoria de pila o provocar una denegación de servicio (caída de sistema) a través de una aplicación manipulada, lo que desencadena un acceso de memoria no válido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*","matchCriteriaId":"B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:mate_s_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"crr-cl00c92b153","matchCriteriaId":"CCF745F4-24D1-4319-9C4E-4967F71EE130"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:mate_s_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"crr-tl00c01b153sp01","matchCriteriaId":"24843F43-7879-4211-BAB1-F7911D8BDC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:mate_s_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"crr-ul00c00b153","matchCriteriaId":"29470554-85C1-4074-BEA8-46FB3C32AE07"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*","matchCriteriaId":"F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:p8_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"gra-cl00c92b230","matchCriteriaId":"A53A2854-71CD-41CF-A56F-92F31DDD5BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:p8_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"gra-cl10c92b230","matchCriteriaId":"8D64BE60-9809-4B23-8986-935A03EB1AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:p8_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"gra-tl00c01b230","matchCriteriaId":"8283CD77-90B3-43CB-82AF-6BEB70618289"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:p8_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"gra-ul00c00b230","matchCriteriaId":"D06BDBE6-5C3B-464F-9F76-D90FA1C3B10E"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:p8_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"gra-ul10c00b230","matchCriteriaId":"78CB750E-C642-4A4D-8724-6A15A72EE8C5"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160130-01-smartphone-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160130-01-smartphone-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1496","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T14:59:06.937","lastModified":"2026-06-17T00:42:04.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attackers to cause a denial of service (system crash) via a crafted application, aka a \"semaphore deadlock issue.\""},{"lang":"es","value":"El controlador graphics en smartphones Huawei P8 con software GRA-TL00 en versiones anteriores a GRA-TL00C01B230, GRA-CL00 en versiones anteriores a GRA-CL00C92B230, GRA-CL10 en versiones anteriores a GRA-CL10C92B230, GRA-UL00 en versiones anteriores a GRA-UL00C00B230 y GRA-UL10 en versiones anteriores a GRA-UL10C00B230 permite a atacantes provocar una denegación de servicio (caída de sistema) a través de una aplicación manipulada, también conocido como un \"problema de interbloqueo de semáforo\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*","matchCriteriaId":"F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-cl00c92b220:*:*:*:*:*:*:*","matchCriteriaId":"6F51D853-1D67-40F9-8F92-C618DEE8C397"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-cl10c92b220:*:*:*:*:*:*:*","matchCriteriaId":"0C12AC6D-6BFE-47B6-A3D3-73B39C65F3BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-tl00c01b220:*:*:*:*:*:*:*","matchCriteriaId":"4EDA07B8-5410-47C8-A58B-355018DCA6C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-ul00c00b220:*:*:*:*:*:*:*","matchCriteriaId":"9BAC84F1-2736-4599-B102-4683C0EF57E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-ul10c00b220:*:*:*:*:*:*:*","matchCriteriaId":"3C7DF023-FFAC-412F-BC63-D6B4AF91AAB8"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-01-smartphone-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-01-smartphone-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2116","sourceIdentifier":"secalert@redhat.com","published":"2016-04-13T14:59:09.173","lastModified":"2026-06-17T00:43:29.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file."},{"lang":"es","value":"Fuga de memoria en la función jas_iccprof_createfrombuf en JasPer 1.900.1 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de un perfil de color ICC en un archivo de imagen JPEG2000."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*","versionEndIncluding":"1.900.1","matchCriteriaId":"D6B12933-EE92-4DF3-9D6A-296E0FC49395"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3508","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/03/12","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/84133","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2919-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:1208","source":"secalert@redhat.com"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/03/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2919-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-0861","sourceIdentifier":"security@debian.org","published":"2016-04-13T15:59:00.133","lastModified":"2026-06-17T00:21:03.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records."},{"lang":"es","value":"model/modelstorage.py en trytond 3.2.x en versiones anteriores a 3.2.10, 3.4.x en versiones anteriores a 3.4.8, 3.6.x en versiones anteriores a 3.6.5 y 3.8.x en versiones anteriores a 3.8.1 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y escribir en campos arbitrarios a través de una secuencia de registros."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.10","matchCriteriaId":"C8421280-107C-4294-B97A-481893517B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.8","matchCriteriaId":"870AA0FF-25F7-4273-A95D-EF5B6C1485BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"982B196A-6C14-4A28-948D-46F93379326E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*","versionStartIncluding":"3.8.0","versionEndExcluding":"3.8.1","matchCriteriaId":"9C3FEAEE-A2EE-400C-9F93-09BBFF246C32"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2015/dsa-3425","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://www.tryton.org/posts/security-release-for-issue5167.html","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"https://bugs.tryton.org/issue5167","source":"security@debian.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.tryton.org/posts/security-release-for-issue5167.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.tryton.org/issue5167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7555","sourceIdentifier":"secalert@redhat.com","published":"2016-04-13T15:59:03.103","lastModified":"2026-06-17T00:32:44.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file."},{"lang":"es","value":"Desbordamiento de buffer basado en memoria dinámica en giffix.c en giffix en giflib 5.1.1 permite a atacantes provocar una denegación de servicio (caída de programa) a través de una imagen manipulada y campos de anchura de pantalla lógicos en un archivo GIF."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:giflib_project:giflib:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.1","matchCriteriaId":"353EE5CD-E87D-4286-9917-41BB7E47CE0B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174876.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135034/giflib-5.1.1-Heap-Overflow.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Dec/83","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1023474","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/537171/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/81697","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035331","source":"secalert@redhat.com"},{"url":"https://source.android.com/security/bulletin/2017-05-01","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174876.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135034/giflib-5.1.1-Heap-Overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Dec/83","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1023474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537171/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/81697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2017-05-01","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8551","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T15:59:05.257","lastModified":"2026-06-17T00:34:45.347","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka \"Linux pciback missing sanity checks.\""},{"lang":"es","value":"El controlador backend PCI en Xen, cuando se ejecuta en un sistema x86 y utiliza Linux 3.1.x hasta la versión 4.3.x como dominio de controlador, permite a administradores locales invitados alcanzar condiciones de BUG y provocar una denegación de servicio (referencia a puntero NULL y caída de SO anfitrión) aprovechando un sistema con acceso a un dispositivo físico PCI capaz de pasar a través de MSI o MSI-X y una secuencia de operaciones XEN_PCI_OP_* manipulada, también conocido como \"Linux pciback missing sanity checks\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndIncluding":"3.1.10","matchCriteriaId":"D451BD25-F504-4E3E-9AD9-C762B325BA7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3.0","versionEndIncluding":"4.3.6","matchCriteriaId":"82F7F521-5D32-49A0-9393-DD17E65EB809"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:*","matchCriteriaId":"17D4B6F2-514D-4BC2-B2C5-4E2FCCAC594C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp4:*:*:*:*:*:*","matchCriteriaId":"99A38379-DBD3-4BF6-9A8F-95A3F553AD02"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"18D823E3-E1F3-4A15-A9C7-1AB61C1B6703"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"ED540469-C4DD-485D-9B89-6877B2A74217"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79546","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034480","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-157.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-03","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/79546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8552","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T15:59:06.257","lastModified":"2026-06-17T00:34:45.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka \"Linux pciback missing sanity checks.\""},{"lang":"es","value":"El controlador backend PCI en Xen, cuando se ejecuta en un sistema x86 y utiliza Linux 3.1.x hasta la versión 4.3.x como dominio de controlador, permite a administradores locales invitados generar un flujo continuo de mensajes WARN y provocar una denegación de servicio (consumo de disco) aprovechando un sistema con acceso a un dispositivo físico PCI capaz de pasar a través de MSI o MSI-X y operaciones XEN_PCI_OP_enable_msi, también conocido como \"Lenux pciback missing sanity checks\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:P","baseScore":1.7,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7568820A-ED66-47DF-A9B0-27A474D6C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5D8C046D-BE62-43BA-9F50-B4D383475EA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B81B6EEB-D01E-432D-AEBF-707409741C0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2A4B60DE-A8C0-459E-A99C-6EF0D3264B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A83F4F7E-53CF-4066-857B-2154D25979D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"048E790E-B0A1-4504-9299-0B6D9CB0C509"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EB157D09-B91B-486A-A9F7-C9BA75AE8823"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FA95119D-EAF1-48D4-AE7C-0C4927D06CDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5D40E4E4-3FCB-4980-8DD2-49DDABCB398E"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7F7D1B7E-C30F-430F-832D-2A405DA1F2D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B7C1D0AD-B804-474C-96A3-988BADA0DAD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1DCD1F05-9F96-40DD-B506-750E87306325"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"25B6AE42-E1EB-47A8-8FAF-7A93A67EC67F"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"60BADA43-94D5-4E80-B5C8-D01A0249F13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"550223A9-B9F1-440A-8C25-9F0F76AF7301"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FC734D58-96E5-4DD2-8781-F8E0ADB96462"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"62CEC1BF-1922-410D-BCBA-C58199F574C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"923F2C2B-4A65-4823-B511-D0FEB7C7FAB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C1A24DED-B2EC-4D9C-9FA4-DD37EF3E3BFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D532B60-C8DD-4A2F-9D05-E574D23EB754"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5D83CA8B-8E49-45FA-8FAB-C15052474542"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"27537DF5-7E0F-463F-BA87-46E329EE07AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3EA4F978-9145-4FE6-B4F9-15207E52C40A"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"22A995FD-9B7F-4DF0-BECF-4B086E470F1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"219597E2-E2D7-4647-8A7C-688B96300158"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A0C59417-493C-493A-9AB2-317F240BF387"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"65E55950-EACA-4209-B2A1-E09026FC6006"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8F0AF8EF-6FF6-4E22-B16E-82C9F90C6B00"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"47640819-FC43-49ED-8A77-728C3D7255B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2448537F-87AD-45C1-9FB0-7A49CA31BD76"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E36B2265-70E1-413B-A7CF-79D39E9ADCFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"37148A72-BE20-45C5-8589-2309ED84D08C"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FB736B4C-325A-4B27-8C8A-15E60B8A8C82"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF948E6A-07BE-4C7D-8A98-002E89D35F4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C0E23B94-1726-4F63-84BB-8D83FAB156D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C76124AB-4E3D-4BE0-AAEA-7FC05868E2FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F30B5EF5-0AE8-420B-A103-B1B25A372F09"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F784EF07-DBEC-492A-A0F4-F9F7B2551A0B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"B942E0F5-7FDC-4AE5-985D-25F4EA7406F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11:sp4:*:*:*:*:*:*","matchCriteriaId":"BFF56CE7-91EF-4FF9-B306-5F00249D9FEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5AB3CAA1-C20C-4A86-841E-EC0858164D7D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79546","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034480","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-157.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8553","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T15:59:07.307","lastModified":"2026-06-17T00:34:45.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777."},{"lang":"es","value":"Xen permite a usuarios del SO invitado obtener información sensible de localizaciones no inicializadas en memoria kernel del SO anfitrión impidiendo la decodificación de bits de control de memoria y I/O. NOTA: esta vulnerabilidad existe por una solución incompleta para CVE-2015-0777."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.0,"impactScore":4.0}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.0,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-26T17:44:39.543976Z","id":"CVE-2015-8553","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:-:*:*:*:*:*:*:*","matchCriteriaId":"BFA1950D-1D9F-4401-AA86-CF3028EFD286"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"}]}]}],"references":[{"url":"http://xenbits.xen.org/xsa/advisory-120.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Aug/18","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2019/dsa-4497","source":"cve@mitre.org"},{"url":"http://xenbits.xen.org/xsa/advisory-120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Aug/18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8606","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T15:59:09.743","lastModified":"2026-06-17T00:34:50.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Locale or (2) FailedLoginCount parameter to admin/security/EditForm/field/Members/item/new/ItemEditForm."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en SilverStripe CMS & Framework en versiones anteriores a 3.1.16 y 3.2.x en versiones anteriores a 3.2.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro (1) Locale o (2) FailedLogenCount en admen/security/EditForm/field/Members/item/new/ItemEditForm."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.15","matchCriteriaId":"8192BAA8-2CE3-4EDE-B4DF-5BECD3C07DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CB4AE05A-5677-4789-B4F7-F5316D371B40"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2015/Dec/55","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/17/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/17/11","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/18/5","source":"cve@mitre.org"},{"url":"http://www.silverstripe.org/download/security-releases/ss-2015-026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://cybersecurityworks.com/zerodays/cve-2015-8606-silverstripe.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2015/Dec/55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/17/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/17/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/18/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.silverstripe.org/download/security-releases/ss-2015-026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cybersecurityworks.com/zerodays/cve-2015-8606-silverstripe.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8807","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T16:59:00.127","lastModified":"2026-06-17T00:35:17.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving numeric form fields."},{"lang":"es","value":"Vulnerabilidad de XSS en la función _renderVarenput_number en horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php en Horde Groupware en versiones anteriores a 5.2.12 y Horde Groupware Webmail Edition en versiones anteriores a 5.2.12 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores que implican campos de formulario numéricos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"2E6D8F50-BCFC-4573-84D9-4452F971FFEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:5.2.11:*:*:*:webmail:*:*:*","matchCriteriaId":"525D93F0-0B34-4696-9955-89082F78EB86"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177484.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177584.html","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2016/001148.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2016/001149.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3496","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/5","source":"cve@mitre.org"},{"url":"https://github.com/horde/horde/blob/e838d4c800b0d1ecaf8b4cc613fd3af4f994c79c/bundles/webmail/docs/CHANGES","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://github.com/horde/horde/commit/11d74fa5a22fe626c5e5a010b703cd46a136f253","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177484.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2016/001148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2016/001149.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/horde/horde/blob/e838d4c800b0d1ecaf8b4cc613fd3af4f994c79c/bundles/webmail/docs/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://github.com/horde/horde/commit/11d74fa5a22fe626c5e5a010b703cd46a136f253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0740","sourceIdentifier":"secalert@redhat.com","published":"2016-04-13T16:59:01.377","lastModified":"2026-06-17T00:38:07.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file."},{"lang":"es","value":"Desbordamiento de buffer en la función ImagengLibTiffDecode en libImageng/TiffDecode.c en Pillow en versiones anteriores a 3.1.1 permite a atacantes remotos sobrescribir memoria a través de un archivo TIFF manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0","matchCriteriaId":"2F573E4A-55AB-4868-8CA1-7C7E5EEAC905"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3499","source":"secalert@redhat.com"},{"url":"https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/python-pillow/Pillow/commit/6dcbf5bd96b717c58d7b642949da8d323099928e","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-52","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/python-pillow/Pillow/commit/6dcbf5bd96b717c58d7b642949da8d323099928e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-52","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0775","sourceIdentifier":"secalert@redhat.com","published":"2016-04-13T16:59:02.643","lastModified":"2026-06-17T00:38:12.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file."},{"lang":"es","value":"Desbordamiento de buffer en la función ImagingFliDecode en libImageng/FliDecode.c en Pillow en versiones anteriores a 3.1.1 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo FLI manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0","matchCriteriaId":"2F573E4A-55AB-4868-8CA1-7C7E5EEAC905"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3499","source":"secalert@redhat.com"},{"url":"https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst","source":"secalert@redhat.com"},{"url":"https://github.com/python-pillow/Pillow/commit/893a40850c2d5da41537958e40569c029a6e127b","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-52","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/python-pillow/Pillow/commit/893a40850c2d5da41537958e40569c029a6e127b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-52","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2058","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T16:59:08.787","lastModified":"2026-06-17T00:43:21.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the \"detailed status\" page, or (2) remote authenticated users to inject arbitrary web script or HTML via an acknowledgement message, which is not properly handled in the \"status\" page."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Xymon 4.1.x, 4.2.x y 4.3.x en versiones anteriores a 4.3.25 permiten a (1) clientes remotos Xymon inyectar secuencias de comandos web o HTML arbitrarios a través de un mensaje de estado, que no se maneja correctamente en la página \"detailed status\", o (2) usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un mensaje de reconocimiento, que no se maneja correctamente en la página \"status\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DFF9FA93-847A-4643-BB90-90AC31DE7C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F7A7DED6-B90D-4A05-ACF1-510D16B2C1F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B3EBFA2C-78A8-45BB-B6E2-F74595943813"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.1.2:p1:*:*:*:*:*:*","matchCriteriaId":"6A33AD76-55B7-42B4-997B-B4C595030AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.1.2:p2:*:*:*:*:*:*","matchCriteriaId":"DB9A6911-0622-4A71-8ADA-1BC162F12C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.2:alfa:*:*:*:*:*:*","matchCriteriaId":"DD605003-3DEC-44C3-9A61-9DAA3FFEF4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.2:beta20060605:*:*:*:*:*:*","matchCriteriaId":"6D967474-9D3D-4555-9C28-AD9F38D0F4B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.2:rc20060712:*:*:*:*:*:*","matchCriteriaId":"B0623B70-5545-4D9E-80B2-F12363933152"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B8483753-07E0-476A-8D04-85905B50CEB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1071598C-C7CC-4704-A883-7FBAE94F3573"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"2EBC151E-A02F-409B-86E1-9B3F59966F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D6C4977F-2C44-4222-BD38-266127076A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"59DEEBE8-4A76-4DF8-8DD4-0446EA6CDDAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"699A4A57-0488-43A1-9BC9-68F69326CD65"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E4BEDF60-02D7-4192-A3BE-6D35A6BAE886"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8AE0300B-8514-409A-AA89-A591918855C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"2FD5FA1D-576F-4A4F-873B-8F47BD871374"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"EB113981-5BE0-4AAC-94E3-6A2C34A5E7E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B0EA40FA-CA00-43B6-80DF-DFD2C1D77ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8785A4E4-22A1-437C-9CBB-9B141938DF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D9EF9762-78D4-4C99-B986-BDA9D8C334F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"9D161D58-6573-426B-9578-C2340280CB08"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"3148DF23-6EA1-4091-BFF0-14E33895B7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"8AD586CB-19F5-41A3-86A6-46986156DC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"3CC494B4-0A5A-4D55-B98B-D929394F7839"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D3B17CB4-E8CE-4C3E-B0D1-86FCEBA2F339"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"AA3B4A8F-D0EF-4C50-AA0E-6507F1815595"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"AD471985-1D60-4E68-B862-7DCC18A76235"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"F6E92CA4-44AB-4A95-A8D5-57F9167E4549"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.12:*:*:*:*:*:*:*","matchCriteriaId":"E7FC838D-6AA2-491C-9F1C-0B69141531CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"11DA6306-D261-459E-B311-7AD978E915A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"5E6C75E3-6935-435F-989B-811C6D9846FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"BD68AC81-36CB-493D-AB17-4C753148C04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.16:*:*:*:*:*:*:*","matchCriteriaId":"1C6A1FD6-DAB8-4A19-A279-8DD721E9BF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0D78C91F-1763-40C0-906C-9DE90E8776C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.18:*:*:*:*:*:*:*","matchCriteriaId":"2B213484-1A35-4024-96B8-B5642E7FFF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.19:*:*:*:*:*:*:*","matchCriteriaId":"AFA3F5E6-3C5C-436D-B131-AB9F328CFB28"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.19:rc1:*:*:*:*:*:*","matchCriteriaId":"2BA9B919-E977-4C76-8132-D5C72EE0ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.20:*:*:*:*:*:*:*","matchCriteriaId":"8F75C2CF-95CC-4510-AD93-7ABF8F810DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.21:*:*:*:*:*:*:*","matchCriteriaId":"20837B84-D33F-49AE-A886-53683351746D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.22:*:*:*:*:*:*:*","matchCriteriaId":"CADB87EA-D745-4776-991D-EABFD7CFD149"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.23:*:*:*:*:*:*:*","matchCriteriaId":"56394517-A9F0-4BEE-A185-0684BE30CF14"},{"vulnerable":true,"criteria":"cpe:2.3:a:xymon:xymon:4.3.24:*:*:*:*:*:*:*","matchCriteriaId":"2788A97E-E027-424B-85CF-4121CFC81671"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3495","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/537522/100/0/threaded","source":"cve@mitre.org"},{"url":"https://sourceforge.net/p/xymon/code/7892/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537522/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/p/xymon/code/7892/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-2191","sourceIdentifier":"secalert@redhat.com","published":"2016-04-13T16:59:11.130","lastModified":"2026-06-17T00:43:38.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image."},{"lang":"es","value":"La función bmp_read_rows en pngxtern/pngxrbmp.c en OptiPNG en versiones anteriores a 0.7.6 permite a atacantes remotos provocar una denegación de servicio (escritura de memoria inválida y caída) a través de una serie de escapes delta en una imagen BMP manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:optipng:optipng:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"0E03C682-9693-4959-85D4-75E00A5C5EA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00061.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00065.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136553/Optipng-Invalid-Write.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Apr/15","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3546","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/04/2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537972/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2951-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201608-01","source":"secalert@redhat.com"},{"url":"https://sourceforge.net/p/optipng/bugs/59/","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136553/Optipng-Invalid-Write.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Apr/15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/04/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/537972/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2951-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201608-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/p/optipng/bugs/59/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-2228","sourceIdentifier":"security@debian.org","published":"2016-04-13T16:59:12.207","lastModified":"2026-06-17T00:43:42.327","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in horde/templates/topbar/_menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter, as demonstrated by a request to xplorer/gollem/manager.php."},{"lang":"es","value":"Vulnerabilidad de XSS en horde/templates/topbar/_menubar.html.php en Horde Groupware en versiones anteriores a 5.2.12 y Horde Groupware Webmail Edition en versiones anteriores a 5.2.12 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro searchfield, como ha quedado demostrado por una petición a xplorer/gollem/manager.php."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.11","matchCriteriaId":"E7704728-F087-409B-81FB-B8BCB7C69FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:*:*:*:*:webmail_edition:*:*:*","versionEndIncluding":"5.2.11","matchCriteriaId":"509F0679-0B78-413E-BA9F-1CF0C06CD044"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]}],"references":[{"url":"http://bugs.horde.org/ticket/14213","source":"security@debian.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177484.html","source":"security@debian.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177584.html","source":"security@debian.org"},{"url":"http://lists.horde.org/archives/announce/2016/001148.html","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2016/001149.html","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3497","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/4","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/5","source":"security@debian.org"},{"url":"https://github.com/horde/horde/blob/e838d4c800b0d1ecaf8b4cc613fd3af4f994c79c/bundles/webmail/docs/CHANGES","source":"security@debian.org"},{"url":"https://github.com/horde/horde/commit/ab07a1b447de34e13983b4d7ceb18b58c3a358d8","source":"security@debian.org","tags":["Exploit"]},{"url":"http://bugs.horde.org/ticket/14213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177484.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2016/001148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2016/001149.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/horde/horde/blob/e838d4c800b0d1ecaf8b4cc613fd3af4f994c79c/bundles/webmail/docs/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/horde/horde/commit/ab07a1b447de34e13983b4d7ceb18b58c3a358d8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2016-2533","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T16:59:14.600","lastModified":"2026-06-17T00:44:14.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file."},{"lang":"es","value":"Desbordamiento de buffer en la función ImagengPcdDecode en PcdDecode.c en Pillow en versiones anteriores a 3.1.1 y Python Imageng Library (PIL) 1.1.7 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo PhotoCD manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0","matchCriteriaId":"2F573E4A-55AB-4868-8CA1-7C7E5EEAC905"},{"vulnerable":true,"criteria":"cpe:2.3:a:python_imaging_project:python_imaging:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"7587F262-02CB-4294-8CC3-364415D5D6B5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3499","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/02/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/22/2","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/python-pillow/Pillow/commit/5bdf54b5a76b54fb00bd05f2d733e0a4173eefc9#diff-8ff6909c159597e22288ad818938fd6b","source":"cve@mitre.org"},{"url":"https://github.com/python-pillow/Pillow/commit/ae453aa18b66af54e7ff716f4ccb33adca60afd4#diff-8ff6909c159597e22288ad818938fd6b","source":"cve@mitre.org"},{"url":"https://github.com/python-pillow/Pillow/pull/1706","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201612-52","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/02/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/22/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/python-pillow/Pillow/commit/5bdf54b5a76b54fb00bd05f2d733e0a4173eefc9#diff-8ff6909c159597e22288ad818938fd6b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/python-pillow/Pillow/commit/ae453aa18b66af54e7ff716f4ccb33adca60afd4#diff-8ff6909c159597e22288ad818938fd6b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/python-pillow/Pillow/pull/1706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-52","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3686","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T16:59:21.947","lastModified":"2026-06-17T00:46:11.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to obtain sensitive SessionId information by leveraging access to the Location HTTP header in a redirect."},{"lang":"es","value":"La característica Single Sign-On (SSO) en F5 BIG-IP APM 11.x en versiones anteriores a 11.6.0 HF6 y BIG-IP Edge Gateway 11.0.0 hasta la versión 11.3.0 podría permitir a atacantes remotos obtener información SessionId sensible aprovechando el acceso a la cabecera Location HTTP en una redirección."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"53531CA7-5E47-4C46-BDA5-3B4710085078"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A085285-329B-4EF0-ABFB-238655E9E82D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1591F627-3C86-4904-9236-6936D533ED75"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3136A8D1-3D0D-46B3-9A3A-737074864F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"96673865-3D37-4562-831E-3ACE9DFB471E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DD575B3E-FBA9-443A-9B52-49766DBE40C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8F3BF3A-DC42-45F4-99C0-DF71DB1A9E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"002333F5-2864-434F-AC94-9C644098F95C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FB630A86-FB84-4199-9E4D-38EB620806CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"ABF47456-CCA0-4817-9AEF-631DC152174E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FB5F9107-549C-40EF-B355-C7E93A979CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B1A1C200-30B2-4B38-BC74-D11E54530A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1C0312FC-8178-46DE-B4EE-00F2895073BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C9E574F6-34B6-45A6-911D-E5347DA22F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCF94129-8779-4D68-8DD4-B828CA633746"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"BA2E88AA-0523-48D0-8664-6AFDBCB6C940"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035519","source":"cve@mitre.org"},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/82/sol82679059.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/82/sol82679059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-9655","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T17:59:00.113","lastModified":"2026-06-17T00:18:43.757","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif."},{"lang":"es","value":"La función (1) putcontig8bitYCbCr21tile en tif_getimage.c o la función (2) NeXTDecode en tif_next.c in LibTIFF permite a atacantes remotos provocar una denegación de servicio (acceso a memoria no inicializada) a través de una imagen TIFF manipulada, según lo demostrado por libtiff-cvs-1.tif y libtiff-cvs-2.tif."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:remotesensing:libtiff:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.6","matchCriteriaId":"A865CB02-3874-40B0-A2DC-762E4B8AA20C"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2015/02/07/5","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3273","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2015/02/07/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-1547","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T17:59:01.800","lastModified":"2026-06-17T00:22:35.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif."},{"lang":"es","value":"La función NeXTDecode en tif_next.c en LibTIFF permite a atacantes remotos provocar una denegación de servicio (acceso a memoria no inicializada) a través de una imagen TIFF manipulada, según lo demostrado por libtiff5.tif."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.6","matchCriteriaId":"7DBB051D-E94D-4553-88A6-750BE80B7617"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2015/01/24/16","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2015/02/07/5","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/73438","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2015/01/24/16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2015/02/07/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8665","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T17:59:04.350","lastModified":"2026-06-17T00:35:00.083","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image."},{"lang":"es","value":"tif_getimage.c en LibTIFF 4.0.6 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rangos) a través de la etiqueta SamplesPerPixel en una imagen TIFF."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"33708995-494C-476D-B0E3-1E78B9328699"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/24/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/24/4","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79728","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035508","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/24/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/24/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8683","sourceIdentifier":"cve@mitre.org","published":"2016-04-13T17:59:05.523","lastModified":"2026-06-17T00:35:02.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image."},{"lang":"es","value":"La función putcontig8bitCIELab en tif_getimage.c en LibTIFF 4.0.6 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango) a través de una imagen TIFF comprimida."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"33708995-494C-476D-B0E3-1E78B9328699"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/25/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/26/1","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/79718","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035508","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/25/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/12/26/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/79718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8784","sourceIdentifier":"security@debian.org","published":"2016-04-13T17:59:06.490","lastModified":"2026-06-17T00:35:14.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif."},{"lang":"es","value":"La función NeXTDecode en tif_next.c en LibTIFF permite a atacantes remotos provocar una denegación de servicio (escritura fuera de rango) a través de una imagen TIFF manipulada, según lo demostrado por libtiff5.tif."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0.7","matchCriteriaId":"A375D786-08EE-4FE2-8C5E-7D8EC155F227"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2508","source":"security@debian.org","tags":["Issue Tracking"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/4","source":"security@debian.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/8","source":"security@debian.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81696","source":"security@debian.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"https://github.com/vadz/libtiff/commit/b18012dae552f85dcc5c57d3bf4e997a15b1cc1c","source":"security@debian.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/81696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2939-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/vadz/libtiff/commit/b18012dae552f85dcc5c57d3bf4e997a15b1cc1c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0739","sourceIdentifier":"secalert@redhat.com","published":"2016-04-13T17:59:08.413","lastModified":"2026-06-17T00:38:07.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a \"bits/bytes confusion bug.\""},{"lang":"es","value":"libssh en versiones anteriores a 0.7.3 trunca de manera incorrecta secretos efímeros generados para los métodos de intercambio de clave (1) diffie-hellman-group1 y (2) diffie-hellman-group14 a 128 bits, lo que hace más fácil a atacantes man-in-the-middle descifrar o interceptar sesiones SSH a través de vectores no especificados, también conocido como \"bits/bytes confusion bug\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.2","matchCriteriaId":"7478A2F8-96FC-4542-9130-3DDA890386BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178058.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178822.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00111.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0566.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3488","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2912-1","source":"secalert@redhat.com"},{"url":"https://puppet.com/security/cve/CVE-2016-0739","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201606-12","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.libssh.org/security/advisories/CVE-2016-0739.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178822.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00111.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0566.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2912-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://puppet.com/security/cve/CVE-2016-0739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201606-12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.libssh.org/security/advisories/CVE-2016-0739.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0757","sourceIdentifier":"secalert@redhat.com","published":"2016-04-13T17:59:09.867","lastModified":"2026-06-17T00:38:09.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image."},{"lang":"es","value":"OpenStack Image Service (Glance) en versiones anteriores a 2015.1.3 (kilo) y 11.0.x en versiones anteriores a 11.0.2 (liberty), cuando show_multiple_locations está habilitado, permiten a usuarios remotos autenticados cambiar el estado de imagen y cargar nuevos datos de imagen eliminando la última localización de una imagen."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90A838B8-A2EE-43CC-80BA-EC40B1DCF446"},{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DB67B1D1-AFF7-4541-B5EF-739AE5913D7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2015.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5B314472-86B2-4E42-B06D-4B7F2B406147"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-0309.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/82696","source":"secalert@redhat.com"},{"url":"https://security.openstack.org/ossa/OSSA-2016-006.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.openstack.org/ossa/OSSA-2016-006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0787","sourceIdentifier":"secalert@redhat.com","published":"2016-04-13T17:59:10.930","lastModified":"2026-06-17T00:38:13.797","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a \"bits/bytes confusion bug.\""},{"lang":"es","value":"La función diffie_hellman_sha256 en kex.c en libssh2 en versiones anteriores a 1.7.0 trunca de manera incorrecta secretos a 128 o 256 bits, lo que hace más fácil para atacantes man-in-the-middle descifrar o interceptar sesiones SSH a través de vectores no especificados, también conocido como \"bits/bytes confusion bug\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"D67987A0-3291-477D-B62B-31DFB7BC3E92"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177980.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178573.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00008.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3487","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/82514","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa120","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10156","source":"secalert@redhat.com"},{"url":"https://puppet.com/security/cve/CVE-2016-0787","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201606-12","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.libssh2.org/CVE-2016-0787.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://www.libssh2.org/adv_20160223.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178573.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://puppet.com/security/cve/CVE-2016-0787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201606-12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.libssh2.org/CVE-2016-0787.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.libssh2.org/adv_20160223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1378","sourceIdentifier":"psirt@cisco.com","published":"2016-04-14T01:59:04.537","lastModified":"2026-06-17T00:41:49.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol (NMSP) port, aka Bug ID CSCum62591."},{"lang":"es","value":"Cisco IOS en versiones anteriores a 15.2(2)E1 en switches Catalyst permite a atacantes remotos obtener información de la versión del software potencialmente sensible a través de una petición al puerto Network Mobility Services Protocol (NMSP), también conocida como Bug ID CSCum62591."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sg:*:*:*:*:*:*:*","matchCriteriaId":"B8A89C06-8384-4B23-8D3A-293C9035FC73"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sg1:*:*:*:*:*:*:*","matchCriteriaId":"94836415-1A1D-4DC2-BDAF-BE5B06EA5C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sg2:*:*:*:*:*:*:*","matchCriteriaId":"00B7F513-E991-47A4-A96B-2EB90B15D197"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"5AD483E0-66F9-4DD1-85FA-C125C9617E10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sy1:*:*:*:*:*:*:*","matchCriteriaId":"35C1075B-11F3-453C-957D-834C5D6D8CB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sy2:*:*:*:*:*:*:*","matchCriteriaId":"115E901C-94B4-4EC7-AA85-03A20CFA90DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sy3:*:*:*:*:*:*:*","matchCriteriaId":"C97051EE-8C42-4546-8EDC-FAD60B3EE1EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sy4:*:*:*:*:*:*:*","matchCriteriaId":"FB435D9A-FA6C-4CBD-8647-3A61B3DAB338"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sy5:*:*:*:*:*:*:*","matchCriteriaId":"14181F4B-9A5C-40B4-BD15-FED694E9AE8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(1\\)sy6:*:*:*:*:*:*:*","matchCriteriaId":"B62E402E-5D8B-4261-906C-C5668B4A12BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sg:*:*:*:*:*:*:*","matchCriteriaId":"F4E5F22B-2CD3-4A14-AB2B-E039CF001140"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sg1:*:*:*:*:*:*:*","matchCriteriaId":"15102BA5-E96F-468C-8F8E-4F8F9E947533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sg2:*:*:*:*:*:*:*","matchCriteriaId":"F1F481FC-D16B-461C-BCBB-D58B58D1647D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sg3:*:*:*:*:*:*:*","matchCriteriaId":"42D47483-F300-4224-86B2-6FBEFA35EE63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sg4:*:*:*:*:*:*:*","matchCriteriaId":"AC9E74C5-4BF5-4F29-938F-3E71784F08AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sg5:*:*:*:*:*:*:*","matchCriteriaId":"2963A4BD-1414-40CA-A949-9CE61B3C61C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sg6:*:*:*:*:*:*:*","matchCriteriaId":"DE0C7B38-F1D2-4D6F-A986-BDE58F6B7E40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sg7:*:*:*:*:*:*:*","matchCriteriaId":"2A6C5B60-9524-4A5A-A8CA-3C18730E18F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"07DCF559-9324-4CE1-A986-EF4A174DCEFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy1:*:*:*:*:*:*:*","matchCriteriaId":"38CC9728-4E4A-4536-BC81-031AFE1A74E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy2:*:*:*:*:*:*:*","matchCriteriaId":"F9DECC49-1DF8-4925-9232-04DA748428B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy3:*:*:*:*:*:*:*","matchCriteriaId":"B736A1E0-89F4-418C-BC12-7E6A7AC7891F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4:*:*:*:*:*:*:*","matchCriteriaId":"2BDC0B5A-E59C-454E-AA0E-6EB9C8888480"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4a:*:*:*:*:*:*:*","matchCriteriaId":"2363876E-0E3B-44BA-8157-FA96554302B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy5:*:*:*:*:*:*:*","matchCriteriaId":"D2D3131A-74F7-4465-826E-5F6C90240C4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy6:*:*:*:*:*:*:*","matchCriteriaId":"2E0D1E17-9A5C-4B74-B780-F31364FD9F06"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy7:*:*:*:*:*:*:*","matchCriteriaId":"F70ADF53-D937-4CB1-8D17-8B4DB9A5458C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sy8:*:*:*:*:*:*:*","matchCriteriaId":"8B0F30A4-C088-4ECC-ABE0-33D4A7BC8D1E"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035566","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-0284","sourceIdentifier":"secalert@redhat.com","published":"2016-04-14T14:59:00.147","lastModified":"2026-06-17T00:19:54.327","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7811."},{"lang":"es","value":"Vulnerabilidad de XSS en spacewalk-java en Spacewalk y Red Hat Satellite 5.7 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de datos XML manipulados en la API XMLRPC, involucrando detalles de usuario. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2014-7811."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*","matchCriteriaId":"85EA16E0-9261-45C4-840F-5366E9EAC5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spacewalk-java:-:*:*:*:*:*:*:*","matchCriteriaId":"BB6F3D1C-DDF1-49B6-8E4D-38B037F33030"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-0590.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1181152","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1181472","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314906","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315398","source":"secalert@redhat.com"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/dd418384171473c3e31386a1b4792f8c555dc744","source":"secalert@redhat.com"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/f3792c79c1c251a49cc4e382be8591636326a794","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0590.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1181152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1181472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/dd418384171473c3e31386a1b4792f8c555dc744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/f3792c79c1c251a49cc4e382be8591636326a794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2103","sourceIdentifier":"secalert@redhat.com","published":"2016-04-14T14:59:07.207","lastModified":"2026-06-17T00:43:26.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter to systems/PhysicalList.do or (2) unspecified vectors involving systems/VirtualSystemsList.do."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Red Hat Satellite 5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de (1) el parámetro list_1680466951_oldfilterval en systems/PhysicalList.do o (2) vectores no especificados que involucran a systems/VirtualSystemsList.do."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*","matchCriteriaId":"85EA16E0-9261-45C4-840F-5366E9EAC5E1"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-0590.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305681","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0590.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3079","sourceIdentifier":"secalert@redhat.com","published":"2016-04-14T14:59:08.177","lastModified":"2026-06-17T00:44:55.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to systems/SystemEntitlements.do; (2) the label parameter to admin/multiorg/EntitlementDetails.do; or the name of a (3) snapshot tag or (4) system group in System Set Manager (SSM)."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en la Web UI en Spacewalk y Red Hat Satellite 5.7 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de (1) PATH_INFO en systems/SystemEntitlements.do; (2) el parámetro label en admin/multiorg/EntitlementDetails.do; o el nombre de (3) una etiqueta snapshot o (4) un grupo de sistema en System Set Manager (SSM)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*","matchCriteriaId":"85EA16E0-9261-45C4-840F-5366E9EAC5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spacewalk-java:-:*:*:*:*:*:*:*","matchCriteriaId":"BB6F3D1C-DDF1-49B6-8E4D-38B037F33030"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-0590.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320444","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320452","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320940","source":"secalert@redhat.com"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/7920542f","source":"secalert@redhat.com"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/7b9ff9ad","source":"secalert@redhat.com"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/982b11c9","source":"secalert@redhat.com"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/b6491eba","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0590.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/7920542f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/7b9ff9ad","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/982b11c9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/spacewalkproject/spacewalk/commit/b6491eba","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4016","sourceIdentifier":"cve@mitre.org","published":"2016-04-14T14:59:11.067","lastModified":"2026-06-17T00:46:44.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attackers to inject arbitrary web script or HTML via the title parameter to webdynpro/resources/sap.com/xapps~xmii~ui~admin~navigation/NavigationApplication, aka SAP Security Note 2201295."},{"lang":"es","value":"Vulnerabilidad de XSS en SAP Manufacturing Integration y Intelligence (también conocido como MII, anteriormente xMII) 15 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro de título para webdynpro/resources/sap.com/xapps~xmii~ui~admin~navigation/NavigationApplication, también conocido como SAP Security Note 2201295."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:java_as:7.4:*:*:*:*:*:*:*","matchCriteriaId":"FA081614-95A6-4761-B653-9CA13ED9E9F4"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137920/SAP-xMII-15-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jul/46","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://erpscan.io/advisories/erpscan-16-021-sap-mii-reflected-xss-vulnerability/","source":"cve@mitre.org"},{"url":"https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137920/SAP-xMII-15-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Jul/46","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://erpscan.io/advisories/erpscan-16-021-sap-mii-reflected-xss-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-4600","sourceIdentifier":"secalert@redhat.com","published":"2016-04-14T15:59:00.120","lastModified":"2026-06-16T23:35:07.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query."},{"lang":"es","value":"La función networkReloadIptablesRules en network/bridge_driver.c en libvirt en versiones anteriores a 0.9.9 no maneja correctamente las reglas del firewall en redes puente cuando se reinicia libvirtd, lo que podría permitir a atacantes remotos eludir las restricciones de acceso previstas a través de una consulta (1) DNS o (2) DHCP."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libvirt:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"48F55C0A-3E6E-4E24-81D7-F023728E486A"}]}]}],"references":[{"url":"http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=ae1232b298323dd7bef909426e2ebafa6bca9157","source":"secalert@redhat.com"},{"url":"http://libvirt.org/news-2012.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2867-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=760442","source":"secalert@redhat.com"},{"url":"http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=ae1232b298323dd7bef909426e2ebafa6bca9157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://libvirt.org/news-2012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2867-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=760442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5247","sourceIdentifier":"secalert@redhat.com","published":"2016-04-14T15:59:01.090","lastModified":"2026-06-17T00:28:45.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool."},{"lang":"es","value":"La API virStorageVolCreateXML en libvirt 1.2.14 hasta la versión 1.2.19 permite a usuarios remotos autenticados con una conexión de lectura-escritura causar una denegación de servicio (caída de libvirtd) desencadenando una desvinculación fallida después de crear un volumen en un pool NFS root_squash."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libvirt:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"57AFB8C5-5798-4029-81CE-E56AD2DB34D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libvirt:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"FCF25808-E322-43C1-8BB4-F233787DAAF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libvirt:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"32836083-B8C3-48C3-B2BB-5C752BC048C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libvirt:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"26DF8FF3-4261-460A-81D1-D0F9CC8A1E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libvirt:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"7E6F0C3B-64A3-497D-9150-F71D499D4CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libvirt:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"7F84E1F2-52A9-43C8-A784-603CF03E0078"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://security.libvirt.org/2015/0003.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2867-1","source":"secalert@redhat.com"},{"url":"http://security.libvirt.org/2015/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2867-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8336","sourceIdentifier":"cve@mitre.org","published":"2016-04-14T15:59:02.057","lastModified":"2026-06-17T00:34:20.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive \"role and permission\" information via unspecified vectors."},{"lang":"es","value":"Huawei FusionCompute con software en versiones anteriores a V100R005C10SPC700 permite a usuarios remotos autenticados obtener información \"role and permission\" sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:fusioncompute:v100r003c00:*:*:*:*:*:*:*","matchCriteriaId":"D89B2D48-887C-445D-815C-4A02FBE6C6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:fusioncompute:v100r003c10:*:*:*:*:*:*:*","matchCriteriaId":"AA2D1382-3415-4636-8D3C-A2896F9897EB"}]}]}],"references":[{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462904.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462904.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8677","sourceIdentifier":"cve@mitre.org","published":"2016-04-14T15:59:03.857","lastModified":"2026-06-17T00:35:01.560","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information."},{"lang":"es","value":"Fuga de memoria en switches Huawei de la serie Campus S5300EI, S5300SI, S5310HI y S6300EI con software V200R003C00 en versiones anteriores a V200R003SPH011 y V200R005C00 en versiones anteriores a V200R005SPH008; switches de la serie Campus S2350EI y S5300LI con software V200R003C00 en versiones anteriores a V200R003SPH011, V200R005C00 en versiones anteriores a V200R005SPH008 y V200R006C00 en versiones anteriores a V200R006SPH002; switches de la serie Campus S9300, S7700 y S9700 con software V200R003C00 en versiones anteriores a V200R003SPH011, V200R005C00 en versiones anteriores a V200R005SPH009 y V200R006C00 en versiones anteriores a V200R006SPH003; switches de la serie Campus S5720HI y S5720EI con software V200R006C00 en versiones anteriores a V200R006SPH002; y switches de la serie Campus S2300 y S3300 con software V100R006C05 en versiones anteriores a V100R006SPH022 permite a usuarios remotos autenticados causar una denegación de servicio (consumo de memoria y reinicio de dispositivo) iniciando sesión y cerrándola en el servidor (1) HTTPS o (2) SFTP, relacionada con la información de sesión SSL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300ei_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r003c00","versionEndExcluding":"v200r003sph011","matchCriteriaId":"DD722A3F-A17A-4C2F-BF97-B4EC3E1313AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300ei_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r005c00","versionEndExcluding":"v200r005sph008","matchCriteriaId":"8A16F8DA-E9B5-4501-BD07-DCCBC998B5B8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5300ei:-:*:*:*:*:*:*:*","matchCriteriaId":"438F46FA-6373-4323-B2C6-F4D6CFABD675"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300si_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r001c00","versionEndExcluding":"v200r001sph018","matchCriteriaId":"1818A8DD-58A0-41B2-9E8B-EC1851784654"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300si_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r002c00","versionEndExcluding":"v200r003sph011","matchCriteriaId":"F77856A0-E46B-4492-8C9F-5B5FEEFEDCED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5300si:-:*:*:*:*:*:*:*","matchCriteriaId":"498B6006-41C9-4853-8CCD-1A3A122FAB51"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5310hi_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r001c00","versionEndExcluding":"v200r001sph018","matchCriteriaId":"57D589CC-550B-4C9E-827C-3F745B9E86C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5310hi_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r002c00","versionEndExcluding":"v200r003sph011","matchCriteriaId":"9932CAA1-D2DA-4DB5-9068-36A3F8B99558"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5310hi:-:*:*:*:*:*:*:*","matchCriteriaId":"D72B3B4B-1B7A-486C-A8BD-662390D585EB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s6300ei_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r001c00","versionEndExcluding":"v200r001sph018","matchCriteriaId":"13FEE8AC-82C1-45A1-AEEA-90DA113B28FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s6300ei_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r002c00","versionEndExcluding":"v200r003sph011","matchCriteriaId":"B4B767F3-90A5-4B2D-BAA1-8FA0FC0A3FA0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s6300ei:-:*:*:*:*:*:*:*","matchCriteriaId":"FC63D2FE-F8BB-4A20-8DD6-801A12C06F7C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r003c00","versionEndExcluding":"v200r003sph011","matchCriteriaId":"7B7C59A1-526B-43D1-BFF6-A78DB487B228"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r005c00","versionEndExcluding":"v200r005sph008","matchCriteriaId":"478CEF58-3701-46B7-9CB6-3AB47E502FC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r006c00","versionEndExcluding":"v200r006sph002","matchCriteriaId":"DFCF982C-559F-4074-9C74-C0C473A93262"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5300li:-:*:*:*:*:*:*:*","matchCriteriaId":"3696874A-E462-482F-8CA4-4FAC37C8641E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r003c00","versionEndExcluding":"v200r003sph011","matchCriteriaId":"BA26DEFB-04A3-41F9-A8B3-F3AC06B5EC8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r005c00","versionEndExcluding":"v200r005sph008","matchCriteriaId":"8E5D2580-1C41-4367-8A4D-298030C051F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r006c00","versionEndExcluding":"v200r006sph002","matchCriteriaId":"909F4FF5-B874-4E0B-A6F1-A2E9FE110381"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s2350ei:-:*:*:*:*:*:*:*","matchCriteriaId":"9A8844AD-71F1-4139-B6CA-5534942DA424"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r003c00","versionEndExcluding":"v200r003sph011","matchCriteriaId":"7B0F9954-F0E2-4D1A-8641-E32E424B80FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r005c00","versionEndExcluding":"v200r005sph009","matchCriteriaId":"14879FE3-07A4-4F07-9325-F153170E2017"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r006c00","versionEndExcluding":"v200r006sph003","matchCriteriaId":"614CAF39-2122-4206-905C-C6743656C73A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:*","matchCriteriaId":"AD2EC926-50C6-4CBE-BB6F-56F3A6287DEE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r003c00","versionEndExcluding":"v200r003sph011","matchCriteriaId":"E0E2E640-EC67-40CC-8EF2-3E61195E8B68"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r005c00","versionEndExcluding":"v200r005sph009","matchCriteriaId":"398CABF6-F1D2-4A66-B4EE-45CB2A0F1B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r006c00","versionEndExcluding":"v200r006sph003","matchCriteriaId":"F5F28803-5FC5-4904-9D79-0A3B15F8D1C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*","matchCriteriaId":"75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r003c00","versionEndExcluding":"v200r003sph011","matchCriteriaId":"6BCAD4F5-CA86-441B-A542-6AA797F621B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r005c00","versionEndExcluding":"v200r005sph009","matchCriteriaId":"4CA11961-ED08-4931-88F4-AC1E9D191E5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r006c00","versionEndExcluding":"v200r006sph003","matchCriteriaId":"75C05E42-CCCD-446F-BDAB-0CD8FDBEE519"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*","matchCriteriaId":"8769C2C4-E333-432B-8943-CFDFAE013379"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5720hi_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r006c00","versionEndExcluding":"v200r006sph002","matchCriteriaId":"EEF5A073-7D11-4875-A7C4-F1298AF6A86D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5720hi:-:*:*:*:*:*:*:*","matchCriteriaId":"CB64BC36-693E-4101-9C13-4A4C572A4EDE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5720ei_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v200r006c00","versionEndExcluding":"v200r006sph002","matchCriteriaId":"991916AB-5080-42CA-80CE-AFD1E69005E7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5720ei:-:*:*:*:*:*:*:*","matchCriteriaId":"D7B06975-BD37-452D-9782-B768610D3777"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s2300_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v100r006c05","versionEndExcluding":"v100r006sph022","matchCriteriaId":"B2D6DD87-D00C-4AB9-AC7F-BCF066DF6030"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s2300:-:*:*:*:*:*:*:*","matchCriteriaId":"17566603-275F-4E6B-B5D9-4A716EEC03DC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s3300_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"v100r006c05","versionEndExcluding":"v100r006sph022","matchCriteriaId":"FB47AE0C-67AA-4605-B1F2-C51065C8786F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s3300:-:*:*:*:*:*:*:*","matchCriteriaId":"1A1410A1-ADCC-474F-ABEE-F0FE48E4CD7A"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1267","sourceIdentifier":"cve@mitre.org","published":"2016-04-15T14:59:03.177","lastModified":"2026-06-17T00:41:36.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R3-S4, 15.1 before 15.1F2, or 15.1R2, 15.1X49 before 15.1X49-D20, and 16.1 before 16.1R1 allows local users to read, delete, or modify arbitrary files via unspecified vectors."},{"lang":"es","value":"Condición de carrera en la funcionalidad RPC en Juniper Junos OS en versiones anteriores a 12.1X44-D55, 12.1X46 en versiones anteriores a 12.1X46-D40, 12.1X47 en versiones anteriores a 12.1X47-D25, 12.3 en versiones anteriores a 12.3R11, 12.3X48 en versiones anteriores a 12.3X48-D20, 13.2 en versiones anteriores a 13.2R8, 13.2X51 en versiones anteriores a 13.2X51-D39, 13.3 en versiones anteriores a 13.3R7, 14.1 en versiones anteriores a 14.1R6, 14.1X53 en versiones anteriores a 14.1X53-D30, 14.2 en versiones anteriores a 14.2R3-S4, 15.1 en versiones anteriores a 15.1F2 o 15.1R2, 15.1X49 en versiones anteriores a 15.1X49-D20 y 16.1 en versiones anteriores a 16.1R1 permite a usuarios locales leer, eliminar o modificar archivos arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:*:d50:*:*:*:*:*:*","versionEndIncluding":"12.1x44","matchCriteriaId":"71CECD22-5FB3-4439-88A0-F160D29E549A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*","matchCriteriaId":"CFB89F64-16BB-4A14-9084-B338668D7FF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*","matchCriteriaId":"A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*","matchCriteriaId":"4FD4237A-C257-4D8A-ABC4-9B2160530A4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*","matchCriteriaId":"5A449C87-C5C3-48FE-9E46-64ED5DD5F193"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*","matchCriteriaId":"F4B6215F-76BF-473F-B325-0975B0EB101E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*","matchCriteriaId":"A1C4A10C-49A3-4103-9E56-F881113BC5D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*","matchCriteriaId":"50E7FD07-A309-48EC-A520-C7F0FA35865C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*","matchCriteriaId":"0BB3DE56-1B04-4A53-B4A4-93286FC98463"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*","matchCriteriaId":"181C0D30-4476-48EE-A4A4-3B2461F4AC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*","matchCriteriaId":"63F559A2-2744-4771-9420-C70AA87496A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*","matchCriteriaId":"040A6307-236E-4FAA-9A74-676F1DB0CF17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8E014A0D-0054-4EBA-BA1F-035B74BD822F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*","matchCriteriaId":"371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*","matchCriteriaId":"661B4C1E-DB85-4EB0-B26F-F6496CEF0AA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*","matchCriteriaId":"7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*","matchCriteriaId":"C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*","matchCriteriaId":"960059B5-0701-4B75-AB51-0A430247D9F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*","matchCriteriaId":"1D1DCA52-DA81-495B-B516-5571F01E3B0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*","matchCriteriaId":"05E187F6-BACD-4DD5-B393-B2FE4349053A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*","matchCriteriaId":"3C240840-A6BC-4E3D-A60D-22F08E67E2B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*","matchCriteriaId":"CC90563F-6BCB-4D77-8FD4-584E3A6C7741"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*","matchCriteriaId":"5AD03BA7-D9EC-420F-97C4-383F79D6873F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:*:*:*:*:*:*:*","matchCriteriaId":"CAB7D840-9469-4CE2-8DBF-017A44741374"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*","matchCriteriaId":"D3A0A607-7D3C-4F2A-B5F5-576A70649CB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*","matchCriteriaId":"32E9620A-7C0A-474C-919E-13609FFE580D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*","matchCriteriaId":"672D3A38-92B4-4F33-82A6-B2D3F3403AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r4:*:*:*:*:*:*","matchCriteriaId":"F5C24441-6E9D-4EF7-8903-A109A52340C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r5:*:*:*:*:*:*","matchCriteriaId":"7CB98C4F-617F-4F51-A86E-D1EBE2BDE583"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r6:*:*:*:*:*:*","matchCriteriaId":"A24E3EA6-810D-4885-8BE5-8A70E61E7589"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r7:*:*:*:*:*:*","matchCriteriaId":"767182F3-E97B-4E21-8FD5-A50C9F42ED60"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r7-s1:*:*:*:*:*:*","matchCriteriaId":"8935F46F-084A-473E-94B1-011DA15D52AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r7-s2:*:*:*:*:*:*","matchCriteriaId":"2D252DA6-1269-42A0-A6DB-070AAC8396B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*","matchCriteriaId":"3947A516-2054-48B3-ADFD-3CF88EC2288D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*","matchCriteriaId":"D0951235-4A0A-4200-A7B1-9FF4540A3755"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*","matchCriteriaId":"9E3A9AB1-202A-4480-8FFD-872C79325854"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d25:*:*:*:*:*:*","matchCriteriaId":"7478F581-8A89-49D7-B9F9-E0E90BEEAEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d26:*:*:*:*:*:*","matchCriteriaId":"28B80348-B130-4178-BFD9-4AE390E139D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d30:*:*:*:*:*:*","matchCriteriaId":"D1EE6518-C224-4019-8393-85893AC29898"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2x51:d35:*:*:*:*:*:*","matchCriteriaId":"718A304D-1DBD-4BC1-B038-2BD4755E8793"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*","matchCriteriaId":"E4AF5DAA-62F5-491F-A9CE-098970671D43"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"3FF9FF91-9184-4D18-8288-9110E35F4AE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*","matchCriteriaId":"0F2E537B-9504-4912-B231-0D83F4459469"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2-s2:*:*:*:*:*:*","matchCriteriaId":"99A946CE-FFC7-4F16-82F4-795A6E5B84C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*","matchCriteriaId":"4BCB3837-DCBC-4997-B63E-E47957584709"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*","matchCriteriaId":"6C88E2B1-469B-442B-9FC0-7C9408CE3917"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*","matchCriteriaId":"1FB5A368-E582-4DFD-87B4-C887DA908E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*","matchCriteriaId":"70ED0B93-2CFC-474F-B199-F78E1C67E8C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*","matchCriteriaId":"6237291A-B861-4D53-B7AA-C53A44B76896"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"9C778627-820A-48F5-9680-0205D6DB5EB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"FA7F03DC-73A2-4760-B386-2A57E9C97E65"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"0CA10003-D52B-4110-9D7A-F50895E6BA17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*","matchCriteriaId":"1B2D843A-8ADE-4888-8960-B48394DEA1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*","matchCriteriaId":"3BE66516-A06D-4C0F-8346-DFC8865C8FE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*","matchCriteriaId":"9C7FCCC1-B151-465A-8327-26DB5DC074F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*","matchCriteriaId":"09771B8F-8B2A-4E8B-B4D3-80677697FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*","matchCriteriaId":"55E2F909-E1CC-45AA-ABA9-58178B751808"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*","matchCriteriaId":"E1AA12C5-4520-4F79-80BE-66112F7AFC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*","matchCriteriaId":"807C8110-5CC2-45F0-B094-BBF9C0B63BDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*","matchCriteriaId":"547E5737-D385-49B9-A69F-A3B185A34116"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*","matchCriteriaId":"79149AA0-17D1-4522-894F-C025F7A30FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*","matchCriteriaId":"30726286-7CB1-4E5D-AE44-2B4D84795900"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*","matchCriteriaId":"33BE028F-2961-414A-9D42-C4861566C2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*","matchCriteriaId":"BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2AC40ABB-E364-46C9-A904-C0ED02806250"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035668","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1273","sourceIdentifier":"cve@mitre.org","published":"2016-04-15T14:59:08.160","lastModified":"2026-06-17T00:41:37.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication protection mechanisms via unspecified vectors."},{"lang":"es","value":"Juniper Junos OS en versiones anteriores a 13.2X51-D40, 14.x en versiones anteriores a 14.1X53-D30 y 15.x en versiones anteriores a 15.1X53-D20 en switches QFX5100 y QFX10002 no tienen suficiente entropía, lo que facilita a atacantes remotos romper el cifrado criptográfico y los mecanismos de protección de autenticación a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:*:d35:*:*:*:*:*:*","versionEndIncluding":"13.2x51","matchCriteriaId":"E7D89ADE-DE99-42C7-970A-7DB24EF7106B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*","matchCriteriaId":"9C7FCCC1-B151-465A-8327-26DB5DC074F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*","matchCriteriaId":"09771B8F-8B2A-4E8B-B4D3-80677697FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*","matchCriteriaId":"55E2F909-E1CC-45AA-ABA9-58178B751808"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*","matchCriteriaId":"E1AA12C5-4520-4F79-80BE-66112F7AFC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*","matchCriteriaId":"807C8110-5CC2-45F0-B094-BBF9C0B63BDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*","matchCriteriaId":"547E5737-D385-49B9-A69F-A3B185A34116"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*","matchCriteriaId":"1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*","matchCriteriaId":"AC196685-3B0C-4754-AE6A-6BE456CC6B52"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*","matchCriteriaId":"D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*","matchCriteriaId":"0E6CD065-EC06-4846-BD2A-D3CA7866070F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*","matchCriteriaId":"18468579-0195-4DDE-BAA5-4BE4068F3A69"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*","matchCriteriaId":"6E87C765-8D68-404A-AC71-3F22A7260E8C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*","matchCriteriaId":"F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*","matchCriteriaId":"E974B4BC-64C5-4BB6-AF31-D46AF3763416"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2212","sourceIdentifier":"cve@mitre.org","published":"2016-04-15T14:59:13.083","lastModified":"2026-06-17T00:43:40.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The getOrderByStatusUrlKey function in the Mage_Rss_Helper_Order class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edition before 1.14.2.3 and Magento Community Edition before 1.9.2.3 allows remote attackers to obtain sensitive order information via the order_id in a JSON object in the data parameter in an RSS feed request to index.php/rss/order/status."},{"lang":"es","value":"La función getOrderByStatusUrlKey en la clase Mage_Rss_Helper_Order en app/code/core/Mage/Rss/Helper/Order.php en Magento Enterprise Edition en versiones anteriores a 1.14.2.3 y Magento Community Edition en versiones anteriores a 1.9.2.3 permite a atacantes remotos obtener información sensible de order a través del order_id en un objeto JSON en el parámetro data en una petición de feed RSS a index.php/rss/order/status."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:magento:magento:*:*:*:*:community:*:*:*","versionEndIncluding":"1.9.2.2","matchCriteriaId":"3E3ABF70-AB2B-4FC8-8A97-E38C5AFCBEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:magento:magento:*:*:*:*:enterprise:*:*:*","versionEndIncluding":"1.14.2.2","matchCriteriaId":"94F35103-85A1-4F53-91D9-22DC8545AEFA"}]}]}],"references":[{"url":"http://karmainsecurity.com/KIS-2016-02","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/135941/Magento-1.9.2.2-RSS-Feed-Information-Disclosure.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/105","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/537601/100/0/threaded","source":"cve@mitre.org"},{"url":"https://magento.com/security/patches/supee-7405","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://karmainsecurity.com/KIS-2016-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/135941/Magento-1.9.2.2-RSS-Feed-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/537601/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://magento.com/security/patches/supee-7405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3961","sourceIdentifier":"cve@mitre.org","published":"2016-04-15T14:59:14.050","lastModified":"2026-06-17T00:46:38.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest OS users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area."},{"lang":"es","value":"Xen y el kernel de Linux hasta la versión 4.5.x no suprime adecuadamente el apoyo hugetlbfs en invitados x86 PV, lo que permite a usuarios PV locales invitados del SO provocar una denegación de servicio (caida de SO invitado) al intentar acceder a un área mapeada hugetlbfs."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.3","matchCriteriaId":"DA1EE117-3EC6-4829-9431-F90E83C0DA58"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3607","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/86068","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035569","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3004-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3005-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3006-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3007-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3049-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3050-1","source":"cve@mitre.org"},{"url":"http://xenbits.xen.org/xsa/advisory-174.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://xenbits.xen.org/xsa/xsa174.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/86068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3004-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3005-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3006-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3007-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3049-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3050-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xen.org/xsa/advisory-174.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://xenbits.xen.org/xsa/xsa174.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2015-7676","sourceIdentifier":"cve@mitre.org","published":"2016-04-15T15:59:01.080","lastModified":"2026-06-17T00:32:57.097","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading HTML files."},{"lang":"es","value":"Ipswitch MOVEit File Transfer (anteriormente DMZ) 8.1 y versiones anteriores, cuando está configurado para soportar la vista del archivo en la descarga, permite a usuarios remotos autenticados llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) subiendo archivos HTML."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:moveit_dmz:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"C8C09B13-29FD-4A22-A77F-83B9434DBE33"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135458/Ipswitch-MOVEit-DMZ-8.1-Persistent-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/90574","source":"cve@mitre.org"},{"url":"https://profundis-labs.com/advisories/CVE-2015-7676.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/135458/Ipswitch-MOVEit-DMZ-8.1-Persistent-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jan/95","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://profundis-labs.com/advisories/CVE-2015-7676.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2016-3144","sourceIdentifier":"cve@mitre.org","published":"2016-04-15T15:59:02.220","lastModified":"2026-06-17T00:45:10.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote authenticated users with the \"Administer block classes\" permission to inject arbitrary web script or HTML via a class name."},{"lang":"es","value":"Vulnerabilidad de XSS en el módulo Block Class 7.x-2.x en versiones anteriores a 7.x-2.2 para Drupal permite a usuarios remotos autenticados con el permiso \"Administer block classes\" inyectar secuencias de comandos web o HTML arbitrarios a través de un nombre de clase."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fourkitchens:block_class:7.x-2.0:*:*:*:*:drupal:*:*","matchCriteriaId":"273A6D07-C147-46DE-9F33-59BF346B298E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fourkitchens:block_class:7.x-2.1:*:*:*:*:drupal:*:*","matchCriteriaId":"7C2ADC64-B9FE-4DB3-A19E-0484D465BBBA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*","matchCriteriaId":"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182535.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182886.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182953.html","source":"cve@mitre.org"},{"url":"https://www.drupal.org/node/2636498","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.drupal.org/node/2636502","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182535.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182886.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.drupal.org/node/2636498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.drupal.org/node/2636502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2411","sourceIdentifier":"security@android.com","published":"2016-04-18T00:59:18.087","lastModified":"2026-06-17T00:44:01.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Qualcomm Power Management kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages root access, aka internal bug 26866053."},{"lang":"es","value":"Un controlador del kernel de Qualcomm Power Management en Android 6.x en versiones anteriores a 2016-04-01 permite a atacantes obtener privilegios a través de una aplicación manipulada que se aprovecha del acceso root, también conocida como error interno 26866053."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.6,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2414","sourceIdentifier":"security@android.com","published":"2016-04-18T00:59:21.010","lastModified":"2026-06-17T00:44:01.633","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data, which allows remote attackers to cause a denial of service (memory corruption and reboot loop) via a crafted font, aka internal bug 26413177."},{"lang":"es","value":"La libería Minikin en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-04-01 no considera correctamente los valores de tamaño negativos en datos de fuente, lo que permite a atacantes remotos causar una denegación de servicio (corrupción de memoria y bucle de reinicio) a través de una fuente manipulada, también conocida como error interno 26413177."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/minikin/+/ca8ac8acdad662230ae37998c6c4091bb39402b6","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/minikin/+/f4785aa1947b8d22d5b19559ef1ca526d98e0e73","source":"security@android.com"},{"url":"https://code.google.com/p/android/issues/detail?id=192618","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/minikin/+/ca8ac8acdad662230ae37998c6c4091bb39402b6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/minikin/+/f4785aa1947b8d22d5b19559ef1ca526d98e0e73","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/android/issues/detail?id=192618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2415","sourceIdentifier":"security@android.com","published":"2016-04-18T00:59:21.930","lastModified":"2026-06-17T00:44:01.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"exchange/eas/EasAutoDiscover.java in the Autodiscover implementation in Exchange ActiveSync in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to obtain sensitive information via a crafted application that triggers a spoofed response to a GET request, aka internal bug 26488455."},{"lang":"es","value":"exchange/eas/EasAutoDiscover.java en la implementación de Autodiscover en Exchange ActiveSync en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-04-01 permite a atacantes obtener información sensible a través de una aplicación manipulada que desencadena una respuesta suplantada a una petición GET, también conocida como error interno 26488455."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/apps/Exchange/+/0d1a38b1755efe7ed4e8d7302a24186616bba9b2","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/apps/Exchange/+/0d1a38b1755efe7ed4e8d7302a24186616bba9b2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2421","sourceIdentifier":"security@android.com","published":"2016-04-18T00:59:27.837","lastModified":"2026-06-17T00:44:02.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Setup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26154410."},{"lang":"es","value":"Setup Wizard en Android 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-04-01 permite a atacantes físicamente próximos eludir el mecanismo de protección Factory Reset Protection y eliminar datos a través de vectores no especificados, también conocida como error interno 26154410."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","baseScore":6.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2423","sourceIdentifier":"security@android.com","published":"2016-04-18T00:59:29.680","lastModified":"2026-06-17T00:44:02.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider whether a device is provisioned, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26303187."},{"lang":"es","value":"server/telecom/CallsManager.java en Telephony en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-04-01 no considera correctamente si un dispositivo es provisto, lo que permite a atacantes físicamente próximos eludir el mecanismo de protección Factory Reset Protection y eliminar datos a través de vectores no especificados, también conocida como error interno 26303187."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","baseScore":6.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/services/Telecomm/+/a06c9a4aef69ae27b951523cf72bf72412bf48fa","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/services/Telecomm/+/a06c9a4aef69ae27b951523cf72bf72412bf48fa","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2424","sourceIdentifier":"security@android.com","published":"2016-04-18T00:59:30.587","lastModified":"2026-06-17T00:44:02.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mismanages certain authority data, which allows attackers to cause a denial of service (reboot loop) via a crafted application, aka internal bug 26513719."},{"lang":"es","value":"server/content/SyncStorageEngine.java en SyncStorageEngine en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-04-01 no administra de forma correcta ciertos datos de autoridad, lo que permite a atacantes provocar una denegación de servicio (bucle de reinicio) a través de una aplicación manipulada, también conocida como error interno 26513719."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/base/+/d3383d5bfab296ba3adbc121ff8a7b542bde4afb","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/base/+/d3383d5bfab296ba3adbc121ff8a7b542bde4afb","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2425","sourceIdentifier":"security@android.com","published":"2016-04-18T00:59:31.510","lastModified":"2026-06-17T00:44:02.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mail/compose/ComposeActivity.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 supports file:///data attachments, which allows attackers to obtain sensitive information via a crafted application, aka internal bugs 7154234 and 26989185."},{"lang":"es","value":"mail/compose/ComposeActivity.java en AOSP Mail en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-04-01 soporta archivos adjuntos file:///data, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocida como errores internos 7154234 y 26989185."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/apps/UnifiedEmail/+/0d9dfd649bae9c181e3afc5d571903f1eb5dc46f","source":"security@android.com"},{"url":"https://code.google.com/p/android/issues/detail?id=199888","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/apps/UnifiedEmail/+/0d9dfd649bae9c181e3afc5d571903f1eb5dc46f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/android/issues/detail?id=199888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2426","sourceIdentifier":"security@android.com","published":"2016-04-18T00:59:32.477","lastModified":"2026-06-17T00:44:02.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"server/content/ContentService.java in the Framework component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a GET_ACCOUNTS permission, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 26094635."},{"lang":"es","value":"server/content/ContentService.java en el componente Framework en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-04-01 no comprueba el permiso GET_ACCOUNTS, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocida como error interno 26094635."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/base/+/63363af721650e426db5b0bdfb8b2d4fe36abdb0","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/base/+/63363af721650e426db5b0bdfb8b2d4fe36abdb0","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2427","sourceIdentifier":"security@android.com","published":"2016-04-18T00:59:33.383","lastModified":"2026-06-17T00:44:03.030","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"security@android.com","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"The AES-GCM specification in RFC 5084, as used in Android 5.x and 6.x, recommends 12 octets for the aes-ICVlen parameter field, which might make it easier for attackers to defeat a cryptographic protection mechanism and discover an authentication key via a crafted application, aka internal bug 26234568.  NOTE: The vendor disputes the existence of this potential issue in Android, stating \"This CVE was raised in error: it referred to the authentication tag size in GCM, whose default according to ASN.1 encoding (12 bytes) can lead to vulnerabilities. After careful consideration, it was decided that the insecure default value of 12 bytes was a default only for the encoding and not default anywhere else in Android, and hence no vulnerability existed."},{"lang":"es","value":"**DISPUTADA** La especificación AES-GCM en RFC 5084,como es utilizado en Android 5.x y 6.x, recomienda 12 octetos para el campo de parámetro aes-ICVlen, lo que podría facilitar a atacantes derrotar el mecanismo de protección criptográfico y descubrir una clave de autenticación a través de una aplicación manipulada, también conocido como error interno 26234568. NOTA: El vendedor disputa la existencia de este potencial problema en Android, indicando que \"Esta CVE fue levantada por error: se refería al tamaño de la etiqueta de autenticación en GCM, cuyo defecto de acuerdo con la codificación ASN.1 (12 bytes) puede llevar a vulnerabilidades. Después de una cuidadosa consideración, se decidió que el valor del defecto de seguridad de 12 bytes era sólo un fallo para la codificación y no por defecto en cualquier otro lugar en Android, y por lo tanto no existía vulnerabilidad.\""}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.54:*:*:*:*:*:*:*","matchCriteriaId":"F576A43C-711B-43A1-B0B7-44F3101F00A4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1652","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-04-18T10:59:01.093","lastModified":"2026-06-17T00:42:20.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka \"Universal XSS (UXSS).\""},{"lang":"es","value":"Vulnerabilidad de XSS en la función ModuleSystem::RequireForJsInner en extensions/renderer/module_system.cc en el subsistema Extensions en Google Chrome en versiones anteriores a 50.0.2661.75 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un sitio web manipulado, también conocida como \"Universal XSS (UXSS)\"."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"49.0.2623.112","matchCriteriaId":"981F5F4F-C676-41B5-9936-E018E5C0E493"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0638.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3549","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1748943002/","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/590275","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0638.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1748943002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/590275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1654","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-04-18T10:59:03.047","lastModified":"2026-06-17T00:42:21.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unknown vectors."},{"lang":"es","value":"El subsistema media en Google Chrome en versiones anteriores a 50.0.2661.75 no inicializa una estructura de datos no especificada, lo que permite a atacantes remotos provocar una denegación de servicio (operación de lectura no válida) a través de vectores desconocidos."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"49.0.2623.112","matchCriteriaId":"981F5F4F-C676-41B5-9936-E018E5C0E493"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0638.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3549","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2955-1","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/589512","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0638.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2955-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/589512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1657","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-04-18T10:59:06.093","lastModified":"2026-06-17T00:42:21.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL."},{"lang":"es","value":"La función WebContentsImpl::FocusLocationBarByDefault en content/browser/web_contents/web_contents_impl.cc en Google Chrome en versiones anteriores a 50.0.2661.75 no maneja correctamente el foco para ciertas páginas about:blank, lo que permite a atacantes remotos suplantar la barra de direcciones a través de una URL manipulada."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*","matchCriteriaId":"B5BEF8F1-A70F-455C-BFDD-09E0A658F702"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"49.0.2623.112","matchCriteriaId":"981F5F4F-C676-41B5-9936-E018E5C0E493"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0638.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3549","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1678233003/","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/567445","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0638.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1678233003/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/567445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1658","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-04-18T10:59:07.077","lastModified":"2026-06-17T00:42:21.580","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension."},{"lang":"es","value":"El subsistema Extensions en Google Chrome en versiones anteriores a 50.0.2661.75 confía incorrectamente en llamadas al método GetOrigin para comparaciones de origen, lo que permite a atacantes remotos eludir la Same Origin Policy y obtener información sensible a través de una extensión manipulada."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*","matchCriteriaId":"B5BEF8F1-A70F-455C-BFDD-09E0A658F702"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"49.0.2623.112","matchCriteriaId":"981F5F4F-C676-41B5-9936-E018E5C0E493"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0638.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3549","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1658913002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/573317","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0638.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1658913002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/573317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3950","sourceIdentifier":"cve@mitre.org","published":"2016-04-18T14:59:03.720","lastModified":"2026-06-17T00:46:37.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei AR3200 routers with software before V200R006C10SPC300 allow remote authenticated users to cause a denial of service (restart) via crafted packets."},{"lang":"es","value":"Routers Huawei AR3200 con software anterior a V200R006C10SPC300 permiten a usuarios remotos autenticados provocar una denegación de servicio (reinicio) a través de paquetes manipulados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*","matchCriteriaId":"9309E1AA-0C4E-422C-9307-A8DD0AE5D576"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar3200_firmware:v200r005c20:*:*:*:*:*:*:*","matchCriteriaId":"3C10C07E-5194-4EAB-9AC8-DB87CE52F5FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar3200_firmware:v200r005c30:*:*:*:*:*:*:*","matchCriteriaId":"33A23E16-0A80-46ED-A458-44B75D956F5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*","matchCriteriaId":"7FE26EE9-2331-4D72-96CF-635A0A4EBE3E"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160406-01-ar-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160406-01-ar-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4036","sourceIdentifier":"cve@mitre.org","published":"2016-04-18T14:59:04.720","lastModified":"2026-06-17T00:46:46.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory."},{"lang":"es","value":"El paquete quagga en versiones anteriores a 0.99.23-2.6.1 en openSUSE y SUSE Linux Enterprise Server 11 SP 1 utiliza permisos débiles para /etc/quagga, lo que permite a usuarios locales obtener información sensible leyendo archivos en el directorio."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00040.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3654","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/87324","source":"cve@mitre.org"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=770619","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/87324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=770619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3941","sourceIdentifier":"cve@mitre.org","published":"2016-04-18T15:59:01.190","lastModified":"2026-06-17T00:46:36.373","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to \"seek across EOF.\""},{"lang":"es","value":"Desbordamiento de buffer en la función AStreamPeekStream en input/stream.c en VideoLAN VLC media player en versiones anteriores a 2.2.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo wav manipulado, relacionado con \"buscar a través de EOF\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.6","matchCriteriaId":"264503F7-BC8A-44D9-9BFF-A6C72FAAF091"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00045.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035456","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1533633","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://mailman.videolan.org/pipermail/vlc-commits/2015-January/028938.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1533633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mailman.videolan.org/pipermail/vlc-commits/2015-January/028938.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2016-3971","sourceIdentifier":"cve@mitre.org","published":"2016-04-18T15:59:03.110","lastModified":"2026-06-17T00:46:39.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to c/portal/layout."},{"lang":"es","value":"Vulnerabilidad de XSS en lucene_search.jsp en dotCMS en versiones anteriores a 3.5.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro query a c/portal/layout."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"69935CFD-1908-4202-B7AE-836FBC34576D"}]}]}],"references":[{"url":"http://dotcms.com/security/SI-33","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Apr/37","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dotcms.com/security/SI-33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Apr/37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-5479","sourceIdentifier":"cve@mitre.org","published":"2016-04-19T14:59:00.140","lastModified":"2026-06-17T00:29:11.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a file with crafted dimensions."},{"lang":"es","value":"La función ff_h263_decode_mba en libavcodec/ituh263dec.c en Libav en versiones anteriores a 11.5 permite a atacantes remotos provocar una denegación de servicio (error de división por cero y caída de la aplicación) a través de un archivo con dimensiones manipuladas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu:12.04:*:lts:*:*:*:*:*","matchCriteriaId":"799EB7BF-2E7E-42EF-A5A8-AADE2F003B4B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*","versionEndIncluding":"11.4","matchCriteriaId":"032D8A36-9593-448C-98B1-8B55D8D712A8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00105.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/75932","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2944-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blogs.gentoo.org/ago/2015/07/16/libav-divide-by-zero-in-ff_h263_decode_mba/","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=0a49a62f998747cfa564d98d36a459fe70d3299b","source":"cve@mitre.org"},{"url":"https://libav.org/releases/libav-11.5.changelog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/75932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2944-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blogs.gentoo.org/ago/2015/07/16/libav-divide-by-zero-in-ff_h263_decode_mba/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=0a49a62f998747cfa564d98d36a459fe70d3299b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://libav.org/releases/libav-11.5.changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3186","sourceIdentifier":"cve@mitre.org","published":"2016-04-19T14:59:01.157","lastModified":"2026-06-17T00:45:15.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file."},{"lang":"es","value":"Desbordamiento de buffer en la función readextension en gif2tiff.c en LibTIFF 4.0.6 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un archivo GIF manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"33708995-494C-476D-B0E3-1E78B9328699"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00064.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00075.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035442","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:2053","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319503","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/3606-1/","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:2053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3606-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3688","sourceIdentifier":"cve@mitre.org","published":"2016-04-19T14:59:02.063","lastModified":"2026-06-17T00:46:11.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to dwr/call/plaincall/UserAjax.getUsersList.dwr."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en dotCMS en versiones anteriores a 3.5 permite a administradores remotos ejecutar comandos SQL arbitrarios a través del parámetro c0-e3 en dwr/call/plaincall/UserAjax.getUsersList.dwr."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.1","matchCriteriaId":"454DD686-FFA9-40D9-9E96-68FCE9B5557D"}]}]}],"references":[{"url":"http://dotcms.com/security/SI-32","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136548/DotCMS-3.3-SQL-Injection.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Apr/11","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Apr/5","source":"cve@mitre.org"},{"url":"http://dotcms.com/security/SI-32","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136548/DotCMS-3.3-SQL-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Apr/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Apr/5","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-1776","sourceIdentifier":"secalert@redhat.com","published":"2016-04-19T21:59:02.100","lastModified":"2026-06-17T00:22:58.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file."},{"lang":"es","value":"Apache Hadoop 2.6.x cifra los datos intermedios generados por una tarea MapReduce y los almacena junto con la clave de cifrado en un archivo de credenciales en disco cuando la funcionalidad de cifrado de datos Intermediate está habilitada, lo que permite a usuarios locales obtener información sensible mediante la lectura del archivo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:hadoop:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"25EA1A6B-46EF-4157-854A-8991158D8A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:hadoop:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"569A25D2-6BAE-4AF3-B5A4-E578F5BF4000"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:hadoop:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"0303DDA4-A5C1-4358-A4DC-F85C1B2E3254"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:hadoop:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"68F54CBB-0D44-4F8F-A45D-330213E0C349"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:hadoop:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"97B60011-6E60-4DBC-957B-C1F1CBB2B777"}]}]}],"references":[{"url":"http://mail-archives.apache.org/mod_mbox/hadoop-general/201602.mbox/%3CCAGCyb56CPgQMcxZ7jP87SfM5OKGx+E49DtrzCTQ6+nQf2a4nSA%40mail.gmail.com%3E","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83259","source":"secalert@redhat.com"},{"url":"http://mail-archives.apache.org/mod_mbox/hadoop-general/201602.mbox/%3CCAGCyb56CPgQMcxZ7jP87SfM5OKGx+E49DtrzCTQ6+nQf2a4nSA%40mail.gmail.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2390","sourceIdentifier":"cve@mitre.org","published":"2016-04-19T21:59:07.957","lastModified":"2026-06-17T00:43:57.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows remote attackers to cause a denial of service (application crash) via a plaintext HTTP message."},{"lang":"es","value":"El método FwdState::connectedToPeer en FwdState.cc en Squid en versiones anteriores a 3.5.14 y 4.0.x en versiones anteriores a 4.0.6 no maneja correctamente los errores de apretones de manos SSL cuando se construye con la opción --with-openssl, lo que permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de un mensaje HTTP en texto plano."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.13","matchCriteriaId":"9EBF17FC-0EA0-4489-8FC5-FD2CA5CED77E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6640F25F-CC8B-4B05-A97A-2186BD0B5ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A037F780-6FC9-4130-908F-B5434FA0C7DE"}]}]}],"references":[{"url":"http://bugs.squid-cache.org/show_bug.cgi?id=4437","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html","source":"cve@mitre.org"},{"url":"http://lists.squid-cache.org/pipermail/squid-announce/2016-February/000037.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.squid-cache.org/pipermail/squid-announce/2016-February/000038.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035045","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2016_1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.squid-cache.org/show_bug.cgi?id=4437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.squid-cache.org/pipermail/squid-announce/2016-February/000037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.squid-cache.org/pipermail/squid-announce/2016-February/000038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2016_1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7802","sourceIdentifier":"cve@mitre.org","published":"2016-04-20T16:59:02.113","lastModified":"2026-06-17T00:33:09.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service (uninitialized memory read) via a crafted GIF file."},{"lang":"es","value":"gifread.c en gif2png, tal como se utiliza en OptiPNG en versiones anteriores a 0.7.6, permite a atacantes remotos provocar una denegación de servicio (lectura de memoria no inicializada) a través de un archivo GIF manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:optipng_project:optipng:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"F87C1C93-FF7A-436D-80FF-EAA804EC5AD1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://optipng.sourceforge.net/history.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2951-1","source":"cve@mitre.org"},{"url":"https://sourceforge.net/p/optipng/bugs/53/","source":"cve@mitre.org"},{"url":"http://optipng.sourceforge.net/history.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2951-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/p/optipng/bugs/53/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2202","sourceIdentifier":"secure@symantec.com","published":"2016-04-20T17:59:04.120","lastModified":"2026-06-17T00:43:39.713","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors."},{"lang":"es","value":"El componente Inventory Solution en Management Agent en el cliente en Symantec Altiris IT Management Suite (ITMS) hasta la versión 7.6 HF7 permite a usuarios locales eludir las restricciones destinadas a la lista negra de aplicaciones a través de vectores no especificados."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_it_management_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6","matchCriteriaId":"7A91EADB-5292-420E-896E-54062C7AB640"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/85778","source":"secure@symantec.com"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160407_00","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160407_00","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-6479","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-21T10:59:01.537","lastModified":"2026-06-17T00:30:56.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors."},{"lang":"es","value":"ACEmanager en Sierra Wireless ALEOS 4.4.2 y versiones anteriores en dispositivos ES440, ES450, GX400, GX440, GX450 y LS300 permite a atacantes remotos leer el archivo filteredlogs.txt, y consecuentemente descubrir información potencialmente sensible sobre la secuencia de arranque, a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sierrawireless:aleos:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.2","matchCriteriaId":"30FB5223-A3DD-4914-8BEC-D2486E3B31E5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sierrawireless:es440:-:*:*:*:*:*:*:*","matchCriteriaId":"E2098BAB-AF80-4C32-A5B8-FD6296C74110"},{"vulnerable":false,"criteria":"cpe:2.3:h:sierrawireless:es450:-:*:*:*:*:*:*:*","matchCriteriaId":"524DF1AE-21F2-4AA6-99E7-6F98304FF845"},{"vulnerable":false,"criteria":"cpe:2.3:h:sierrawireless:gx400:-:*:*:*:*:*:*:*","matchCriteriaId":"5CBA7B93-E1C2-41C6-B21E-6DA8B568D751"},{"vulnerable":false,"criteria":"cpe:2.3:h:sierrawireless:gx440:-:*:*:*:*:*:*:*","matchCriteriaId":"15DD2CF2-3A83-4ED7-BCD8-05F60782AE17"},{"vulnerable":false,"criteria":"cpe:2.3:h:sierrawireless:gx450:-:*:*:*:*:*:*:*","matchCriteriaId":"2C12CF71-FE0E-44EA-9F2E-7CFB42E7C216"},{"vulnerable":false,"criteria":"cpe:2.3:h:sierrawireless:ls300:-:*:*:*:*:*:*:*","matchCriteriaId":"5F4A4F52-F99E-4F72-8A2C-8D2CC21461BD"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"CWE-538: File and Directory Information Exposure"}},{"cve":{"id":"CVE-2016-0407","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:02.600","lastModified":"2026-06-17T00:37:28.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HCM en Oracle PeopleSoft Products 9.1 y 9.2 permite a ususarios remotos autenticados afectar a la confidencialidad a través de vectores relacionados con Fusion HR Talent Integration"}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:42.110536Z","id":"CVE-2016-0407","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_human_resources:9.1:*:*:*:*:*:*:*","matchCriteriaId":"AF1673D5-6C3F-4E0D-A6CF-A9500A8EAC71"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_human_resources:9.2:*:*:*:*:*:*:*","matchCriteriaId":"344A3A9E-3113-4096-B9F8-CA0AD705242B"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0408","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:03.740","lastModified":"2026-06-17T00:37:28.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.53 hasta la versión 8.55 permite a ususarios remotos autenticados afectar a la confidencialidad y la integridad a través de vectores relacionados con el subcomponente Activity Guide."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:40.253111Z","id":"CVE-2016-0408","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0468","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:04.677","lastModified":"2026-06-17T00:37:35.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Business Intelligence Enterprise Edition en Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0 y 12.2.1.0.0 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad a través de vectores relacionados con Analytics Web General."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:38.434299Z","id":"CVE-2016-0468","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:11.1.1.7.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"D18D8F82-D325-402B-BF46-3C5C27C95091"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"523CD57C-43D4-4C79-BA00-A9A65C6588E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"EE4DE4AF-7492-4F3D-80B3-EE2F5632BE16"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035618","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0469","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:05.523","lastModified":"2026-06-17T00:37:35.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Retail MICROS C2 component in Oracle Retail Applications 9.89.0.0 allows local users to affect confidentiality via vectors related to POS."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Retail MICROS C2 en Oracle Retail Applications 9.89.0.0 permite a usuarios locales afectar a la confidencialidad a través de vectores relacionados con POS."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:N/A:N","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:36.638231Z","id":"CVE-2016-0469","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:micros_c2:9.89.0.0:*:*:*:*:*:*:*","matchCriteriaId":"227412F3-1AC8-481E-88AD-BC399F917528"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035600","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0479","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:06.350","lastModified":"2026-06-17T00:37:36.607","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality and integrity via vectors related to Analytics Scorecard."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Business Intelligence Enterprise Edition en Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0 y 12.2.1.0.0 permite atacantes remotos afectar a la confidencialidad y la integridad a través de vectores relacionados con Analytics Scorecard."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:34.580201Z","id":"CVE-2016-0479","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:11.1.1.7.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"D18D8F82-D325-402B-BF46-3C5C27C95091"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"523CD57C-43D4-4C79-BA00-A9A65C6588E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"EE4DE4AF-7492-4F3D-80B3-EE2F5632BE16"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035618","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0623","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:07.193","lastModified":"2026-06-17T00:37:53.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 11.3 permite a atacantes remotos afectar a la integridad a través de vectores relacionados con el subcomponente Automated Installer."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:32.722297Z","id":"CVE-2016-0623","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0640","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:09.977","lastModified":"2026-06-17T00:37:54.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.47 y versiones anteriores, 5.6.28 y versiones anteriores y 5.7.10 y versiones anteriores y MariaDB en versiones anteriores a 5.5.48, 10.0.x en versiones anteriores a 10.0.24 y 10.1.x en versiones anteriores a 10.1.12 permite a usuarios locales afectar la integridad y la disponibilidad a través de vectores relacionados con DML."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:P","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:31.082579Z","id":"CVE-2016-0640","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.47","matchCriteriaId":"FBAF0151-A5FD-47E3-B133-8ECEBBB2A5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.28","matchCriteriaId":"019CB260-F5E2-4BA4-B24E-6E9BC1ECF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.10","matchCriteriaId":"A191A8E6-7CA5-44B1-9905-9255E94D9291"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.48","matchCriteriaId":"E8C7832A-B6AA-4DBC-BB45-9D049189F7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.24","matchCriteriaId":"55258E77-FBA8-4503-9F6B-736F9C420089"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.12","matchCriteriaId":"12B05AAB-03D7-4436-AFB2-0F43044A55AF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86427","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0641","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:10.883","lastModified":"2026-06-17T00:37:54.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.47 y versiones anteriores, 5.6.28 y versiones anteriores y 5.7.10 y versiones anteriores y MariaDB en versiones anteriores a 5.5.48, 10.0.x en versiones anteriores a 10.0.24 y 10.1.x en versiones anteriores a 10.1.12 permite a usuarios locales afectar la confidencialidad y la disponibilidad a través de vectores relacionados con MyISAM."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:P","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:29.182366Z","id":"CVE-2016-0641","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.47","matchCriteriaId":"FBAF0151-A5FD-47E3-B133-8ECEBBB2A5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.28","matchCriteriaId":"019CB260-F5E2-4BA4-B24E-6E9BC1ECF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.10","matchCriteriaId":"A191A8E6-7CA5-44B1-9905-9255E94D9291"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndIncluding":"5.5.47","matchCriteriaId":"F0DA4E5C-D01C-48CC-9AF5-8EB760ADEAC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.24","matchCriteriaId":"55258E77-FBA8-4503-9F6B-736F9C420089"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.12","matchCriteriaId":"12B05AAB-03D7-4436-AFB2-0F43044A55AF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86470","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0642","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:11.913","lastModified":"2026-06-17T00:37:55.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.48 y versiones anteriores, 5.6.29 y versiones anteriores y 5.7.11 y versiones anteriores permite a usuarios locales afectar a la integridad y disponibilidad a través de vectores relacionados con Federated."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:M/C:N/I:P/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"MULTIPLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:27.201085Z","id":"CVE-2016-0642","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.48","matchCriteriaId":"386760AA-48FC-429A-9206-07B081361BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.29","matchCriteriaId":"D880856F-559E-43B5-9D46-181D01C0E8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.11","matchCriteriaId":"04D3333B-F3AC-4BB9-9F38-AC0BA9B5B8F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"F892F1B0-514C-42F7-90AE-12ACDFDC1033"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:*","matchCriteriaId":"9DFA18B6-2642-470A-A350-68947529EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"ED540469-C4DD-485D-9B89-6877B2A74217"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.47","matchCriteriaId":"D72F1C6A-57AF-4CDA-9161-6B7D37CDB92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.23","matchCriteriaId":"889BD0D7-BB02-4317-A9F1-C6E5E03F16D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.10","matchCriteriaId":"C682E800-3908-422D-91FE-4C2956691CEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86445","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0644","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:13.787","lastModified":"2026-06-17T00:37:55.483","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.47 y versiones anteriores, 5.6.28 y versiones anteriores y 5.7.10 y versiones anteriores y MariaDB en versiones anteriores a 5.5.48, 10.0.x en versiones anteriores a 10.0.24 y 10.1.x en versiones anteriores a 10.1.12 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con DDL."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:22.438396Z","id":"CVE-2016-0644","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.47","matchCriteriaId":"FBAF0151-A5FD-47E3-B133-8ECEBBB2A5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.28","matchCriteriaId":"019CB260-F5E2-4BA4-B24E-6E9BC1ECF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.10","matchCriteriaId":"A191A8E6-7CA5-44B1-9905-9255E94D9291"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.48","matchCriteriaId":"E8C7832A-B6AA-4DBC-BB45-9D049189F7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.24","matchCriteriaId":"55258E77-FBA8-4503-9F6B-736F9C420089"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.12","matchCriteriaId":"12B05AAB-03D7-4436-AFB2-0F43044A55AF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86442","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0646","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:14.663","lastModified":"2026-06-17T00:37:55.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DML."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.47 y versiones anteriores, 5.6.28 y versiones anteriores y 5.7.10 y versiones anteriores y MariaDB en versiones anteriores a 5.5.48, 10.0.x en versiones anteriores a 10.0.24 y 10.1.x en versiones anteriores a 10.1.12 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con DML."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:19.757168Z","id":"CVE-2016-0646","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.47","matchCriteriaId":"FBAF0151-A5FD-47E3-B133-8ECEBBB2A5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.28","matchCriteriaId":"019CB260-F5E2-4BA4-B24E-6E9BC1ECF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.10","matchCriteriaId":"A191A8E6-7CA5-44B1-9905-9255E94D9291"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.48","matchCriteriaId":"E8C7832A-B6AA-4DBC-BB45-9D049189F7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.24","matchCriteriaId":"55258E77-FBA8-4503-9F6B-736F9C420089"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.12","matchCriteriaId":"12B05AAB-03D7-4436-AFB2-0F43044A55AF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86436","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0647","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:15.490","lastModified":"2026-06-17T00:37:55.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to FTS."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.48 y versiones anteriores, 5.6.29 y versiones anteriores y 5.7.11 y versiones anteriores y MariaDB en versiones anteriores a 5.5.49, 10.0.x en versiones anteriores a 10.0.25 y 10.1.x en versiones anteriores a 10.1.14 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con FTS."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:17.622234Z","id":"CVE-2016-0647","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.48","matchCriteriaId":"386760AA-48FC-429A-9206-07B081361BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.29","matchCriteriaId":"D880856F-559E-43B5-9D46-181D01C0E8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.11","matchCriteriaId":"04D3333B-F3AC-4BB9-9F38-AC0BA9B5B8F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.49","matchCriteriaId":"D9CF25B3-315D-47F1-BA66-17D19598FA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.25","matchCriteriaId":"104CD439-9CF1-4EC1-82F4-93058908482D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.14","matchCriteriaId":"9FEBD808-0ACF-4858-81E6-1E5C68455C93"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86495","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0648","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:16.337","lastModified":"2026-06-17T00:37:56.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to PS."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.48 y versiones anteriores, 5.6.29 y versiones anteriores y 5.7.11 y versiones anteriores y MariaDB en versiones anteriores a 5.5.49, 10.0.x en versiones anteriores a 10.0.25 y 10.1.x en versiones anteriores a 10.1.14 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con PS."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:15.022619Z","id":"CVE-2016-0648","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.48","matchCriteriaId":"386760AA-48FC-429A-9206-07B081361BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.29","matchCriteriaId":"D880856F-559E-43B5-9D46-181D01C0E8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.11","matchCriteriaId":"04D3333B-F3AC-4BB9-9F38-AC0BA9B5B8F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.49","matchCriteriaId":"D9CF25B3-315D-47F1-BA66-17D19598FA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.25","matchCriteriaId":"104CD439-9CF1-4EC1-82F4-93058908482D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.14","matchCriteriaId":"9FEBD808-0ACF-4858-81E6-1E5C68455C93"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86457","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0649","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:17.163","lastModified":"2026-06-17T00:37:56.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to PS."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.47 y versiones anteriores, 5.6.28 y versiones anteriores y 5.7.10 y versiones anteriores y MariaDB en versiones anteriores a 5.5.48, 10.0.x en versiones anteriores a 10.0.24 y 10.1.x en versiones anteriores a 10.1.12 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con PS."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:13.151457Z","id":"CVE-2016-0649","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.47","matchCriteriaId":"FBAF0151-A5FD-47E3-B133-8ECEBBB2A5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.28","matchCriteriaId":"019CB260-F5E2-4BA4-B24E-6E9BC1ECF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.10","matchCriteriaId":"A191A8E6-7CA5-44B1-9905-9255E94D9291"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.48","matchCriteriaId":"E8C7832A-B6AA-4DBC-BB45-9D049189F7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.24","matchCriteriaId":"55258E77-FBA8-4503-9F6B-736F9C420089"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.12","matchCriteriaId":"12B05AAB-03D7-4436-AFB2-0F43044A55AF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86498","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0650","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:18.007","lastModified":"2026-06-17T00:37:56.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to Replication."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.47 y versiones anteriores, 5.6.28 y versiones anteriores y 5.7.10 y versiones anteriores y MariaDB en versiones anteriores a 5.5.48, 10.0.x en versiones anteriores a 10.0.24 y 10.1.x en versiones anteriores a 10.1.12 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con Replication."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:11.386553Z","id":"CVE-2016-0650","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.47","matchCriteriaId":"FBAF0151-A5FD-47E3-B133-8ECEBBB2A5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.28","matchCriteriaId":"019CB260-F5E2-4BA4-B24E-6E9BC1ECF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.10","matchCriteriaId":"A191A8E6-7CA5-44B1-9905-9255E94D9291"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.48","matchCriteriaId":"E8C7832A-B6AA-4DBC-BB45-9D049189F7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.24","matchCriteriaId":"55258E77-FBA8-4503-9F6B-736F9C420089"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.12","matchCriteriaId":"12B05AAB-03D7-4436-AFB2-0F43044A55AF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86496","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5548-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0651","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:19.100","lastModified":"2026-06-17T00:37:56.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.46 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Optimizer."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:09.558557Z","id":"CVE-2016-0651","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.46","matchCriteriaId":"124A9D43-F7FE-4E88-AAF5-C5F2214FC9A3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.47","matchCriteriaId":"D72F1C6A-57AF-4CDA-9161-6B7D37CDB92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.23","matchCriteriaId":"889BD0D7-BB02-4317-A9F1-C6E5E03F16D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.10","matchCriteriaId":"C682E800-3908-422D-91FE-4C2956691CEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"F892F1B0-514C-42F7-90AE-12ACDFDC1033"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:*","matchCriteriaId":"9DFA18B6-2642-470A-A350-68947529EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"ED540469-C4DD-485D-9B89-6877B2A74217"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0534.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0652","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:20.117","lastModified":"2026-06-17T00:37:56.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to DML."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.10 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con DML."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:08.106363Z","id":"CVE-2016-0652","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.10","matchCriteriaId":"0DA048A9-F966-4BBC-A595-4B6F1A374B37"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0653","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:21.087","lastModified":"2026-06-17T00:37:57.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to FTS."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.10 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con FTS."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:06.470495Z","id":"CVE-2016-0653","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.10","matchCriteriaId":"0DA048A9-F966-4BBC-A595-4B6F1A374B37"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0654","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:22.007","lastModified":"2026-06-17T00:37:57.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0656."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.10 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con InnoDB, una vulnerabilidad distinta a CVE-2016-0656."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:04.746800Z","id":"CVE-2016-0654","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.10","matchCriteriaId":"0DA048A9-F966-4BBC-A595-4B6F1A374B37"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0655","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:22.837","lastModified":"2026-06-17T00:37:57.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.6.29 y versiones anteriores y 5.7.11 y versiones anteriores y MariaDB 10.0.x en versiones anteriores a 10.0.25 y 10.1.x en versiones anteriores a 10.1.14 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con InnoDB."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:02.778261Z","id":"CVE-2016-0655","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.25","matchCriteriaId":"104CD439-9CF1-4EC1-82F4-93058908482D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.14","matchCriteriaId":"9FEBD808-0ACF-4858-81E6-1E5C68455C93"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.29","matchCriteriaId":"D880856F-559E-43B5-9D46-181D01C0E8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.11","matchCriteriaId":"04D3333B-F3AC-4BB9-9F38-AC0BA9B5B8F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86424","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0656","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:23.727","lastModified":"2026-06-17T00:37:57.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0654."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.10 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con InnoDB, una vulnerabilidad distinta a CVE-2016-0654."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:59:00.655686Z","id":"CVE-2016-0656","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.10","matchCriteriaId":"0DA048A9-F966-4BBC-A595-4B6F1A374B37"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0657","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:24.587","lastModified":"2026-06-17T00:37:57.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.11 y versiones anteriores permite a usuarios locales afectar a la confidencialidad a través de vectores relacionados con JSON."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:58.605825Z","id":"CVE-2016-0657","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.11","matchCriteriaId":"71D982F7-A698-47B2-B451-0A915BE5EB9A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0658","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:25.397","lastModified":"2026-06-17T00:37:57.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Optimizer."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.10 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Optimizer"}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:56.537474Z","id":"CVE-2016-0658","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.10","matchCriteriaId":"0DA048A9-F966-4BBC-A595-4B6F1A374B37"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0659","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:26.243","lastModified":"2026-06-17T00:37:57.713","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.11 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Optimizer."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:55.008816Z","id":"CVE-2016-0659","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.11","matchCriteriaId":"71D982F7-A698-47B2-B451-0A915BE5EB9A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0661","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:27.070","lastModified":"2026-06-17T00:37:57.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Options."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.6.28 y versiones anteriores y 5.7.10 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Options."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:53.434398Z","id":"CVE-2016-0661","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.28","matchCriteriaId":"019CB260-F5E2-4BA4-B24E-6E9BC1ECF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.10","matchCriteriaId":"A191A8E6-7CA5-44B1-9905-9255E94D9291"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86511","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0662","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:27.977","lastModified":"2026-06-17T00:37:57.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Partition."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.11 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Partition."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:51.934078Z","id":"CVE-2016-0662","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.11","matchCriteriaId":"71D982F7-A698-47B2-B451-0A915BE5EB9A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0663","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:29.040","lastModified":"2026-06-17T00:37:58.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Performance Schema."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.10 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Performance Schema."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:50.587713Z","id":"CVE-2016-0663","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.10","matchCriteriaId":"0DA048A9-F966-4BBC-A595-4B6F1A374B37"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0665","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:29.883","lastModified":"2026-06-17T00:37:58.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Security: Encryption."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.6.28 y versiones anteriores y 5.7.10 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Security: Encryption."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:49.322612Z","id":"CVE-2016-0665","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.28","matchCriteriaId":"019CB260-F5E2-4BA4-B24E-6E9BC1ECF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.10","matchCriteriaId":"A191A8E6-7CA5-44B1-9905-9255E94D9291"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86513","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0666","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:30.743","lastModified":"2026-06-17T00:37:58.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to Security: Privileges."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.48 y versiones anteriores, 5.6.29 y versiones anteriores y 5.7.11 y versiones anteriores y MariaDB en versiones anteriores a 5.5.49, 10.0.x en versiones anteriores a 10.0.25 y 10.1.x en versiones anteriores a 10.1.14 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con Security: Privileges."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:48.044427Z","id":"CVE-2016-0666","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.49","matchCriteriaId":"D9CF25B3-315D-47F1-BA66-17D19598FA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.25","matchCriteriaId":"104CD439-9CF1-4EC1-82F4-93058908482D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.14","matchCriteriaId":"9FEBD808-0ACF-4858-81E6-1E5C68455C93"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.48","matchCriteriaId":"386760AA-48FC-429A-9206-07B081361BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.29","matchCriteriaId":"D880856F-559E-43B5-9D46-181D01C0E8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.11","matchCriteriaId":"04D3333B-F3AC-4BB9-9F38-AC0BA9B5B8F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86509","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1481.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0667","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:31.587","lastModified":"2026-06-17T00:37:58.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Locking."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.11 y versiones anteriores permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Locking."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:M/C:N/I:N/A:P","baseScore":2.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"MULTIPLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":5.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:46.091545Z","id":"CVE-2016-0667","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.11","matchCriteriaId":"71D982F7-A698-47B2-B451-0A915BE5EB9A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2954-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0668","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:32.413","lastModified":"2026-06-17T00:37:58.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.6.28 y versiones anteriores y 5.7.10 y versiones anteriores y MariaDB 10.0.x en versiones anteriores a 10.0.24 y 10.1.x en versiones anteriores a 10.1.12 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con InnoDB."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:M/C:N/I:N/A:P","baseScore":1.7,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"MULTIPLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.2,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:44.766301Z","id":"CVE-2016-0668","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.28","matchCriteriaId":"019CB260-F5E2-4BA4-B24E-6E9BC1ECF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.10","matchCriteriaId":"A191A8E6-7CA5-44B1-9905-9255E94D9291"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.24","matchCriteriaId":"55258E77-FBA8-4503-9F6B-736F9C420089"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndIncluding":"10.1.12","matchCriteriaId":"16158059-CBEF-4F3A-BFD4-7D01CA936101"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*","matchCriteriaId":"028ABA8F-4E7B-4CD0-B6FC-3A0941E254BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"ED540469-C4DD-485D-9B89-6877B2A74217"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86467","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"secalert_us@oracle.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2953-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0669","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:33.227","lastModified":"2026-06-17T00:37:58.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Fwflash."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 11.3 permite a usuarios locales afectar a la integridad y disponibilidad a través de vectores relacionados con Fwflash."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:N/I:P/A:C","baseScore":5.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:43.103792Z","id":"CVE-2016-0669","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0672","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:35.087","lastModified":"2026-06-17T00:37:59.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle FLEXCUBE Direct Banking en Oracle Financial Services Software 12.0.2 y 12.0.3 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores relacionados con Pre-Login."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:39.710255Z","id":"CVE-2016-0672","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:flexcube_direct_banking:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DC13CF11-2880-41FA-9534-7874904FDD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FA84D97F-A400-4D39-B60A-63F3407E2B68"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035604","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0673","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:35.930","lastModified":"2026-06-17T00:37:59.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to UIF Open UI."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel UI Framework en Oracle Siebel CRM 8.1.1 y 8.2.2 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con UIF Open UI."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:37.927354Z","id":"CVE-2016-0673","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3548AC23-D3AF-4202-9F87-C9A29A56B376"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"14EF3E4D-FC8E-446B-A2FD-621A20578ED2"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035598","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0674","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:36.757","lastModified":"2026-06-17T00:37:59.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel Core - Common Components en Oracle Siebel CRM 8.1.1 y 8.2.2 permite a usuarios locales afectar a la confidencialidad e integridad a través de vectores relacionados con Email."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:N","baseScore":3.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:36.268136Z","id":"CVE-2016-0674","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-common_components:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7435C5CB-DF81-4B5B-A67E-F4074D438A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-common_components:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6F60EF4C-1F2D-4675-A7A1-B7AE195ED941"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035598","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0675","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:37.603","lastModified":"2026-06-17T00:37:59.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle WebLogic Server en Oracle Fusion Middleware 10.3.6, 12.1.2 y 12.1.3 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores relacionados con Console, una vulnerabilidad distinta a CVE-2016-0700."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:34.086764Z","id":"CVE-2016-0675","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B40B13B7-68B3-4510-968C-6A730EB46462"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.1.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3F8FA254-89F1-4E9D-92A0-1AC3BC62CA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C93CC705-1F8C-4870-99E6-14BF264C3811"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86450","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1035615","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0676","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:38.417","lastModified":"2026-06-17T00:37:59.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to the kernel."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 10 permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con el kernel."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:C","baseScore":4.0,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:32.254404Z","id":"CVE-2016-0676","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0677","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:39.430","lastModified":"2026-06-17T00:37:59.563","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente RDBMS Security en Oracle Database Server 12.1.0.1 y 12.1.0.2 permite a atacantes remotos afectar a la disponibilidad a través de vectores desconocidos."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:30.566572Z","id":"CVE-2016-0677","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:12.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0AEAAD2D-F233-4C5B-B141-44143BA8DE4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F3C58EE-B36B-4081-A307-0FE9B52D8E62"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035590","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0678","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:40.290","lastModified":"2026-06-17T00:37:59.673","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.18 allows local users to affect confidentiality, integrity, and availability via vectors related to Core."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox en versiones anteriores a 5.0.18 permite a usuarios locales afectar a la confidencialidad, integridad y disponibilidad a través de vectores relacionados con Core."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:P/I:P/A:P","baseScore":4.1,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":2.7,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:55:46.066540Z","id":"CVE-2016-0678","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"0B75BD63-489F-4634-A3FF-AAAEDE265B8D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00130.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00002.html","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035607","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00130.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0680","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:41.963","lastModified":"2026-06-17T00:37:59.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Services Procurement."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise SCM en Oracle PeopleSoft Products 9.1 y 9.2 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con Services Procurement."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:26.937507Z","id":"CVE-2016-0680","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_supply_chain_management_eprocurement:9.1:*:*:*:*:*:*:*","matchCriteriaId":"894DF7AF-86DE-466B-B9E2-A34B86963044"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_supply_chain_management_eprocurement:9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB8E4908-950E-4BEA-BF75-8DDE9CEEC96F"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0683","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:44.650","lastModified":"2026-06-17T00:38:00.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Search Framework."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.53, 8.54 y 8.55 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con Search Framework."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:25.193408Z","id":"CVE-2016-0683","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0684","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:45.463","lastModified":"2026-06-17T00:38:00.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Retail MICROS ARS POS en Oracle Retail Applications 1.5 permite a usuarios remotos autenticados afectar a la confidencialidad a través de vectores relacionados con POS."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:23.077612Z","id":"CVE-2016-0684","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:micros_arspos:1.5:*:*:*:*:*:*:*","matchCriteriaId":"8DA64615-BE4D-4649-B011-DBC09AE602B0"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035600","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0685","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:46.273","lastModified":"2026-06-17T00:38:00.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Processing."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.53, 8.54 y 8.55 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con File Processing."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:21.590539Z","id":"CVE-2016-0685","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0695","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:55.117","lastModified":"2026-06-17T00:38:01.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Java SE 6u113, 7u99 y 8u77; Java SE Embedded 8u77; y JRockit R28.3.9 permite a atacantes remotos afectar a la confidencialidad a través de vectores relacionados con Security."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:14.297955Z","id":"CVE-2016-0695","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update113:*:*:*:*:*:*","matchCriteriaId":"AE4602E8-1466-4148-BC89-7FAFFA14A886"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update99:*:*:*:*:*:*","matchCriteriaId":"C3D13189-1F7B-482F-ABF7-CC8D563716C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update77:*:*:*:*:*:*","matchCriteriaId":"C6CAC2AE-7FB0-40F4-9A45-533943A35772"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.6.0:update113:*:*:*:*:*:*","matchCriteriaId":"F0D546F4-B709-4522-B84A-7D6C301814BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update99:*:*:*:*:*:*","matchCriteriaId":"0BF73F1C-91F1-41F6-956C-4A64603DCDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update77:*:*:*:*:*:*","matchCriteriaId":"CDF71474-FFBF-44A0-A5EC-CD3E50472D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r28.3.9:*:*:*:*:*:*:*","matchCriteriaId":"1F7ACC3A-F8F4-4B53-981A-697569B172CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:icedtea7:*:rc1:*:*:*:*:*:*","versionEndIncluding":"2.6.6","matchCriteriaId":"2A1A63BA-D559-4692-9C27-5F7402BD2353"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7.z:*:*:*:*:*:*:*","matchCriteriaId":"AA856400-1B48-429A-94A0-173B7EEE1EC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0650.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0651.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0675.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0676.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0677.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0678.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0679.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0723.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3558","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86438","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1035596","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2963-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2964-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2972-1","source":"secalert_us@oracle.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10159","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201606-18","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160420-0001/","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0650.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0651.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0675.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0676.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0677.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0678.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0679.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0723.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2963-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2964-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2972-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201606-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160420-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0696","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:55.963","lastModified":"2026-06-17T00:38:02.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle WebLogic Server en Oracle Fusion Middleware 10.3.6 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores relacionados con Console."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:12.565813Z","id":"CVE-2016-0696","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B40B13B7-68B3-4510-968C-6A730EB46462"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86443","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1035615","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0697","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:56.777","lastModified":"2026-06-17T00:38:02.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows local users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Object Library en Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a usuarios locales afectar a la confidencialidad e integridad a través de vectores desconocidos."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:N","baseScore":3.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:55:33.734473Z","id":"CVE-2016-0697","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F7A59435-A033-48BD-AC2A-140DCF6113DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"73BD1423-F7EE-4B53-AE4B-DFA784F685C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C95FED83-21C8-4035-BB1B-3C8A93D4645F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"411C3C4C-5513-4F7D-8D58-A39F21F43637"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035603","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0698","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:57.667","lastModified":"2026-06-17T00:38:02.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-3423."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.53, 8.54 y 8.55 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con Rich Text Editor, una vulnerabilidad distinta a CVE-2016-3423."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:10.843608Z","id":"CVE-2016-0698","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0700","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T10:59:59.540","lastModified":"2026-06-17T00:38:02.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle WebLogic Server en Oracle Fusion Middleware 10.3.6, 12.1.2 y 12.1.3 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores relacionados con Console, una vulnerabilidad distinta a CVE-2016-0675."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:09.661555Z","id":"CVE-2016-0700","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B40B13B7-68B3-4510-968C-6A730EB46462"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.1.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3F8FA254-89F1-4E9D-92A0-1AC3BC62CA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C93CC705-1F8C-4870-99E6-14BF264C3811"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86453","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1035615","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3416","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:11.963","lastModified":"2026-06-17T00:45:38.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle WebLogic Server en Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3 y 12.2.1 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores relacionados con Console."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:08.018516Z","id":"CVE-2016-3416","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B40B13B7-68B3-4510-968C-6A730EB46462"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.1.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3F8FA254-89F1-4E9D-92A0-1AC3BC62CA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C93CC705-1F8C-4870-99E6-14BF264C3811"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.2.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9F57085F-A922-421B-BD10-ECC4F3CB34C2"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1035615","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3417","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:12.837","lastModified":"2026-06-17T00:45:38.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Search Functionality."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.53, 8.54 y 8.55 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con la funcionalidad PIA Search."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:05.878355Z","id":"CVE-2016-3417","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3420","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:15.713","lastModified":"2026-06-17T00:45:39.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-3431."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2 y 9.3.3 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con Security, una vulnerabilidad distinta a CVE-2016-3431."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:N","baseScore":3.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:58:02.438431Z","id":"CVE-2016-3420","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A37021FD-3556-4606-98E9-4A8609E0CAF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24B5BBCD-FB6A-4ED9-A274-2E13CC75D6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7677BEA9-A7A8-49ED-8828-F2FD4FD17283"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F8C893E4-1D3A-4687-BE5A-D26FFEBCCC78"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035591","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3422","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:17.713","lastModified":"2026-06-17T00:45:39.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Java SE 6u113, 7u99 y 8u77 permite a atacantes remotos afectar a la disponibilidad a través de vectores relacionados con 2D."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:58.802559Z","id":"CVE-2016-3422","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update113:*:*:*:*:*:*","matchCriteriaId":"AE4602E8-1466-4148-BC89-7FAFFA14A886"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update99:*:*:*:*:*:*","matchCriteriaId":"C3D13189-1F7B-482F-ABF7-CC8D563716C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update77:*:*:*:*:*:*","matchCriteriaId":"C6CAC2AE-7FB0-40F4-9A45-533943A35772"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.6.0:update113:*:*:*:*:*:*","matchCriteriaId":"F0D546F4-B709-4522-B84A-7D6C301814BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update99:*:*:*:*:*:*","matchCriteriaId":"0BF73F1C-91F1-41F6-956C-4A64603DCDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update77:*:*:*:*:*:*","matchCriteriaId":"CDF71474-FFBF-44A0-A5EC-CD3E50472D97"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0677.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0678.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0679.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0701.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0702.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0708.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0716.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1039.html","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86488","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1035596","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:1216","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201606-18","source":"secalert_us@oracle.com"},{"url":"https://security.netapp.com/advisory/ntap-20160420-0001/","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0677.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0678.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0679.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0701.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0702.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0708.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0716.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201606-18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160420-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3423","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:18.980","lastModified":"2026-06-17T00:45:39.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-0698."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.53, 8.54 y 8.55 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con Rich Text Editor, una vulnerabilidad distinta a CVE-2016-0698."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:57.238853Z","id":"CVE-2016-3423","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3425","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:19.870","lastModified":"2026-06-17T00:45:39.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Java SE 6u113, 7u99 y 8u77; Java SE Embedded 8u77; y JRockit R28.3.9 permite a atacantes remotos afectar a la disponibilidad a través de vectores relacionados con JAXP."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:55.738443Z","id":"CVE-2016-3425","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update113:*:*:*:*:*:*","matchCriteriaId":"AE4602E8-1466-4148-BC89-7FAFFA14A886"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update99:*:*:*:*:*:*","matchCriteriaId":"C3D13189-1F7B-482F-ABF7-CC8D563716C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update77:*:*:*:*:*:*","matchCriteriaId":"C6CAC2AE-7FB0-40F4-9A45-533943A35772"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.6.0:update113:*:*:*:*:*:*","matchCriteriaId":"F0D546F4-B709-4522-B84A-7D6C301814BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update99:*:*:*:*:*:*","matchCriteriaId":"0BF73F1C-91F1-41F6-956C-4A64603DCDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update77:*:*:*:*:*:*","matchCriteriaId":"CDF71474-FFBF-44A0-A5EC-CD3E50472D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r28.3.9:*:*:*:*:*:*:*","matchCriteriaId":"1F7ACC3A-F8F4-4B53-981A-697569B172CE"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0650.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0651.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0675.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0676.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0677.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0678.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0679.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0723.html","source":"secalert_us@oracle.com"},{"url":"http://www.debian.org/security/2016/dsa-3558","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86434","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1035596","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2963-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2964-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2972-1","source":"secalert_us@oracle.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10159","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201606-18","source":"secalert_us@oracle.com"},{"url":"https://security.netapp.com/advisory/ntap-20160420-0001/","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0650.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0651.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0675.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0676.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0677.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0678.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0679.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0723.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2963-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2964-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2972-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201606-18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160420-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3429","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:23.417","lastModified":"2026-06-17T00:45:40.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Xstore Services."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Retail Xstore Point of Service en Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0 y 7.1 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con Xstore servicios."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","baseScore":4.5,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.3,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:P/A:N","baseScore":5.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:51.241219Z","id":"CVE-2016-3429","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:5.0:*:*:*:*:*:*:*","matchCriteriaId":"52396904-45B1-4C32-8AFD-0B31DC47ABDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:5.5:*:*:*:*:*:*:*","matchCriteriaId":"EBDF7682-09F3-4E20-8D0D-6562AF0C4E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0:*:*:*:*:*:*:*","matchCriteriaId":"873C00A7-99B1-4A07-B020-BB8AE8C8BEB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:6.5:*:*:*:*:*:*:*","matchCriteriaId":"131B0C29-953C-4E3A-A2BE-6A0316521B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0:*:*:*:*:*:*:*","matchCriteriaId":"2F87FC90-16D0-4051-8280-B0DD4441F10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A0ED83E3-E6BF-4EAA-AF8F-33485A88A218"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035600","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3431","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:24.510","lastModified":"2026-06-17T00:45:41.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-3420."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2 y 9.3.3 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con Security, una vulnerabilidad distinta a CVE-2016-3420."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:N","baseScore":3.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:49.587784Z","id":"CVE-2016-3431","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A37021FD-3556-4606-98E9-4A8609E0CAF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24B5BBCD-FB6A-4ED9-A274-2E13CC75D6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7677BEA9-A7A8-49ED-8828-F2FD4FD17283"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F8C893E4-1D3A-4687-BE5A-D26FFEBCCC78"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035591","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3434","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:25.400","lastModified":"2026-06-17T00:45:41.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Logout."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Object Library en Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar a la integridad a través de vectores relacionados con Logout."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:47.830745Z","id":"CVE-2016-3434","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F7A59435-A033-48BD-AC2A-140DCF6113DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"73BD1423-F7EE-4B53-AE4B-DFA784F685C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C95FED83-21C8-4035-BB1B-3C8A93D4645F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"411C3C4C-5513-4F7D-8D58-A39F21F43637"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035603","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3435","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:26.277","lastModified":"2026-06-17T00:45:41.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect availability via vectors related to PIA Core Technology."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.53, 8.54 y 8.55 permite a atacantes remotos afectar a la disponibilidad a través de vectores relacionados con PIA Core Technology."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:46.383167Z","id":"CVE-2016-3435","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3442","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:31.747","lastModified":"2026-06-17T00:45:42.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Portal."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.53, 8.54 y 8.55 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con Portal."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:37.594316Z","id":"CVE-2016-3442","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3447","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:33.573","lastModified":"2026-06-17T00:45:43.040","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Applications Framework en Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores relacionados con OAF Core."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:36.134733Z","id":"CVE-2016-3447","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:applications_framework:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"AA3A05B2-9A0D-46D2-9D07-B576EAEC19A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:applications_framework:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"58C0602B-8482-4F3A-9BCD-2FB74F88F5A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:applications_framework:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"40C58A2C-A537-4D69-AA81-222EF2D15875"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:applications_framework:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0B258BE7-3065-4223-84CD-D56F88292956"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035603","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3457","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:38.200","lastModified":"2026-06-17T00:45:44.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise HCM ePerformance component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HCM ePerformance en Oracle PeopleSoft Products 9.2 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con Security."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:33.394276Z","id":"CVE-2016-3457","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_eperformance:9.2:*:*:*:*:*:*:*","matchCriteriaId":"17C7DCD6-E940-41D3-AA12-50490E49AB4A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3460","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:39.057","lastModified":"2026-06-17T00:45:44.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to ePerformance."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HCM en Oracle PeopleSoft Products 9.2 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores relacionados con ePerformance."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:31.866450Z","id":"CVE-2016-3460","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_eperformance:9.2:*:*:*:*:*:*:*","matchCriteriaId":"17C7DCD6-E940-41D3-AA12-50490E49AB4A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3462","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:40.777","lastModified":"2026-06-17T00:45:45.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 11.3 permite a usuarios locales afectar a la disponibilidad a través de vectores relacionados con Network Configuration Service."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:30.652786Z","id":"CVE-2016-3462","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3463","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:41.870","lastModified":"2026-06-17T00:45:45.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle FLEXCUBE Direct Banking en Oracle Financial Services Software 12.0.3 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores relacionados con Pre-Login."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:29.176465Z","id":"CVE-2016-3463","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FA84D97F-A400-4D39-B60A-63F3407E2B68"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035604","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3464","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:42.950","lastModified":"2026-06-17T00:45:45.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to Accounts."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle FLEXCUBE Direct Banking en Oracle Financial Services Software 12.0.3 permite a usuarios remotos autenticados afectar a la confidencialidad a través de vectores relacionados con Accounts."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:27.805530Z","id":"CVE-2016-3464","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FA84D97F-A400-4D39-B60A-63F3407E2B68"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035604","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3465","sourceIdentifier":"secalert_us@oracle.com","published":"2016-04-21T11:00:43.980","lastModified":"2026-06-17T00:45:45.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to ZFS."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 10 y 11.3 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con ZFS."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-15T18:57:26.494430Z","id":"CVE-2016-3465","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2013-7449","sourceIdentifier":"cve@mitre.org","published":"2016-04-21T14:59:00.107","lastModified":"2026-06-17T00:01:58.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate."},{"lang":"es","value":"La función ssl_do_connect en common/server.c en HexChat en versiones anteriores a 2.10.2, XChat y XChat-GNOME no verifica que el nombre de host del servidor coincide con un nombre de dominio en el certificado X.509, lo que permite a atacantes man-in-the-middle suplantar servidores SSL a través de un certificado válido arbitrario."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:-:*:*:*:*:*:*:*","matchCriteriaId":"41E75FBE-44C2-4B3D-8CAF-D35985102334"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat_gnome:-:*:*:*:*:*:*:*","matchCriteriaId":"DECAEB82-4F89-41F9-9A04-BB5422617719"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hexchat_project:hexchat:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10.1","matchCriteriaId":"92B8E913-CA39-4610-A20A-9E4619DA1209"}]}]}],"references":[{"url":"http://hexchat.readthedocs.org/en/latest/changelog.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2945-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081839","source":"cve@mitre.org"},{"url":"https://github.com/hexchat/hexchat/commit/c9b63f7f9be01692b03fa15275135a4910a7e02d","source":"cve@mitre.org"},{"url":"https://github.com/hexchat/hexchat/issues/524","source":"cve@mitre.org"},{"url":"http://hexchat.readthedocs.org/en/latest/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2945-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/hexchat/hexchat/commit/c9b63f7f9be01692b03fa15275135a4910a7e02d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/hexchat/hexchat/issues/524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3977","sourceIdentifier":"cve@mitre.org","published":"2016-04-21T14:59:02.250","lastModified":"2026-06-17T00:46:40.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file."},{"lang":"es","value":"Desbordamiento de buffer basado en memoria dinámica en util/gif2rgb.c en gif2rgb en giflib 5.1.2 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través del índice del color de fondo en un archivo GIF."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:giflib_project:giflib:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.2","matchCriteriaId":"BDE9A2F1-6452-4429-8AFE-D0D283696451"}]}]}],"references":[{"url":"http://bugs.fi/fuzzing/index.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00079.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00084.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00019.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/88103","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325771","source":"cve@mitre.org"},{"url":"https://sourceforge.net/p/giflib/bugs/87/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://sourceforge.net/p/giflib/code/ci/ea8dbc5786862a3e16a5acfa3d24e2c2f608cd88/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://usn.ubuntu.com/4107-1/","source":"cve@mitre.org"},{"url":"http://bugs.fi/fuzzing/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00079.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/88103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/p/giflib/bugs/87/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://sourceforge.net/p/giflib/code/ci/ea8dbc5786862a3e16a5acfa3d24e2c2f608cd88/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://usn.ubuntu.com/4107-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2300","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-22T00:59:01.370","lastModified":"2026-06-17T00:43:46.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors."},{"lang":"es","value":"Ecava IntegraXor en versiones anteriores a 5.0 build 4522 permite a atacantes remotos obtener información sensible leyendo mensajes de error detallados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4502","matchCriteriaId":"A57ED23C-1807-472A-905C-69F80A009A89"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-2301","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-22T00:59:02.637","lastModified":"2026-06-17T00:43:47.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Ecava IntegraXor en versiones anteriores a 5.0 build 4522 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4502","matchCriteriaId":"A57ED23C-1807-472A-905C-69F80A009A89"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-2302","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-22T00:59:03.620","lastModified":"2026-06-17T00:43:47.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages."},{"lang":"es","value":"Ecava IntegraXor en versiones anteriores a 5.0 build 4522 permite a atacantes remotos obtener información sensible leyendo mensajes de error detallados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4502","matchCriteriaId":"A57ED23C-1807-472A-905C-69F80A009A89"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-2303","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-22T00:59:04.540","lastModified":"2026-06-17T00:43:47.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Ecava IntegraXor en versiones anteriores a 5.0 build 4522 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de separación de respuesta HTTP a través de una URL manipulada."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4502","matchCriteriaId":"A57ED23C-1807-472A-905C-69F80A009A89"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/93.html\">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>"}},{"cve":{"id":"CVE-2016-2304","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-22T00:59:05.447","lastModified":"2026-06-17T00:43:47.373","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie."},{"lang":"es","value":"Ecava IntegraXor en versiones anteriores a 5.0 build 4522 no incluye el indicador HTTPOnly en una cabecera Set-Cookie para la cookie de sesión, lo que facilita a atacantes remotos obtener información potencialmente sensible a través del acceso con secuencias de comandos a esta cookie."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4502","matchCriteriaId":"A57ED23C-1807-472A-905C-69F80A009A89"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-2305","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-04-22T00:59:06.433","lastModified":"2026-06-17T00:43:47.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en Ecava IntegraXor en versiones anteriores a 5.0 build 4522 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4502","matchCriteriaId":"A57ED23C-1807-472A-905C-69F80A009A89"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-3145","sourceIdentifier":"cve@mitre.org","published":"2016-04-22T00:59:09.493","lastModified":"2026-06-17T00:45:10.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory."},{"lang":"es","value":"Impresoras Lexmark con firmware ATL en versiones anteriores a ATL.021.063, CB en versiones anteriores a CB.021.063, PP en versiones anteriores a PP.021.063 y YK en versiones anteriores a YK.021.063 maneja incorectamente las acciones Erase Printer Memory y Erase Hard Disk, lo que permite a atacantes físicamente próximos obtener información sensible a través de lectura directa de operaciones sobre memoria no volátil."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"pp","versionEndIncluding":"pp.021.062","matchCriteriaId":"FEAC5802-B92B-4895-8C63-4FFD599644C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx820de:-:*:*:*:*:*:*:*","matchCriteriaId":"67527A88-0DC6-4E7B-A1F0-CE472C19D9F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx820dtfe:-:*:*:*:*:*:*:*","matchCriteriaId":"EB1FFAD9-EED0-49A8-9123-3046B07B4681"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx825de:-:*:*:*:*:*:*:*","matchCriteriaId":"90B573EB-7A2D-4178-886F-03998D0BEFD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx825dte:-:*:*:*:*:*:*:*","matchCriteriaId":"21CEFE60-AD40-44F4-9B40-321D348BA3AD"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx825dtfe:-:*:*:*:*:*:*:*","matchCriteriaId":"E6A5F3CB-C008-4C62-AB60-4B89FCDA1DB0"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx860de:-:*:*:*:*:*:*:*","matchCriteriaId":"6FEE5761-0C06-4478-B1EC-EA33F1F6DEF2"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx860dte:-:*:*:*:*:*:*:*","matchCriteriaId":"021A4710-334E-4993-B471-43B4CE5976B8"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx860dtfe:-:*:*:*:*:*:*:*","matchCriteriaId":"39F645E6-472B-4FCA-8AD7-5B420A558FEB"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:xc6152de:-:*:*:*:*:*:*:*","matchCriteriaId":"09B4032F-D131-4E49-A58C-7363436BC78D"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:xc6152dtfe:-:*:*:*:*:*:*:*","matchCriteriaId":"0C61A938-34A3-48C0-9688-48EAFE2D4A24"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:xc8155de:-:*:*:*:*:*:*:*","matchCriteriaId":"DFAE4AEF-F23B-404D-BC1A-BA2441FAB10A"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:xc8155dte:-:*:*:*:*:*:*:*","matchCriteriaId":"4B117121-240E-440F-BF7E-B8F808E918F9"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:xc8160de:-:*:*:*:*:*:*:*","matchCriteriaId":"2631BC7C-CA86-4581-A3AD-FBE61244F1E8"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:xc8160dte:-:*:*:*:*:*:*:*","matchCriteriaId":"A41A9CAA-CF8A-48F2-AECB-D16C415A42AA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"cb","versionEndIncluding":"cb.021.062","matchCriteriaId":"CE80275C-40AD-4BEC-AF9D-8BFB9A42929E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:c4150:-:*:*:*:*:*:*:*","matchCriteriaId":"324EC762-1276-4121-916B-9981925F242D"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cs720de:-:*:*:*:*:*:*:*","matchCriteriaId":"E1427A6D-CEA4-440C-B10A-36E17082F792"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cs720dte:-:*:*:*:*:*:*:*","matchCriteriaId":"70D39A4C-568A-45CC-9C08-45CC4E6E32A0"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cs725de:-:*:*:*:*:*:*:*","matchCriteriaId":"C5573FDD-3B85-4477-807D-B4C0A5998622"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cs725dte:-:*:*:*:*:*:*:*","matchCriteriaId":"F4ACBB26-772F-4D32-97C0-F497A726E31A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"yk","versionEndIncluding":"yk.021.062","matchCriteriaId":"62767ADB-755F-4328-8A0B-4DF204950A2F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:c6160:-:*:*:*:*:*:*:*","matchCriteriaId":"48E10C08-E129-4482-92B1-67FD6C0D0407"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"yk","versionEndIncluding":"yk.021.057","matchCriteriaId":"1BE2AA7A-1B70-4912-89F8-97559B225F6F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cs820de:-:*:*:*:*:*:*:*","matchCriteriaId":"3625CB80-4EC1-47F4-8065-7459F5D14D0D"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cs820dte:-:*:*:*:*:*:*:*","matchCriteriaId":"156414A8-0F64-48F0-A17F-A536B4B16EEF"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cs820dtfe:-:*:*:*:*:*:*:*","matchCriteriaId":"5E42F25E-B296-4FFA-A41E-3CFA226697CF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"atl","versionEndIncluding":"atl.021.062","matchCriteriaId":"A75C59E7-0B30-4C10-ABFE-BB6AF7FB6118"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx725de:-:*:*:*:*:*:*:*","matchCriteriaId":"9072D963-3E31-4315-8F36-649F24E335BB"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx725dhe:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61A0D6-A19E-43AB-A1D7-C18728CB527B"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:cx725dthe:-:*:*:*:*:*:*:*","matchCriteriaId":"79F1E777-79E7-47EB-8715-72ED79B46E5D"},{"vulnerable":false,"criteria":"cpe:2.3:h:lexmark:xc4150:-:*:*:*:*:*:*:*","matchCriteriaId":"74A27B92-5F83-4280-93EA-31F115408405"}]}]}],"references":[{"url":"http://support.lexmark.com/index?page=content&id=TE760","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.lexmark.com/index?page=content&id=TE760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1594","sourceIdentifier":"security@opentext.com","published":"2016-04-22T10:59:01.373","lastModified":"2026-06-17T00:42:13.633","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via a (1) downloadLogFiles or (2) downloadFile action."},{"lang":"es","value":"Micro Focus Novell Service Desk en versiones anteriores a 7.2 permite a usuarios autenticados remotos leer archivos adjuntos arbitrarios a través de una petición a una URL LiveTime.woa, según lo demostrado obteniendo información sensible a través de una acción (1) downloadLogFiles o (2) downloadFile."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:service_desk:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1","matchCriteriaId":"1FEBBFB1-37F6-4311-8398-FA3C67F8C5A6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/538043/100/0/threaded","source":"security@opentext.com"},{"url":"https://packetstormsecurity.com/files/136646","source":"security@opentext.com"},{"url":"https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt","source":"security@opentext.com"},{"url":"https://www.exploit-db.com/exploits/39687/","source":"security@opentext.com"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017429","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/archive/1/538043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://packetstormsecurity.com/files/136646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39687/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1595","sourceIdentifier":"security@opentext.com","published":"2016-04-22T10:59:02.530","lastModified":"2026-06-17T00:42:13.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language (HQL) injection attacks and obtain sensitive information via the entityName parameter."},{"lang":"es","value":"LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile en Micro Focus Novell Service Desk en versiones anteriores a 7.2 permite a usuarios autenticados remotos llevar a cabo ataques de inyección Hibernate Query Language (HQL) y obtener información sensible a través del parámetro entityName."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:service_desk:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1","matchCriteriaId":"1FEBBFB1-37F6-4311-8398-FA3C67F8C5A6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/538043/100/0/threaded","source":"security@opentext.com"},{"url":"https://packetstormsecurity.com/files/136646","source":"security@opentext.com"},{"url":"https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt","source":"security@opentext.com"},{"url":"https://www.exploit-db.com/exploits/39687/","source":"security@opentext.com"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017430","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/archive/1/538043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://packetstormsecurity.com/files/136646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39687/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1596","sourceIdentifier":"security@opentext.com","published":"2016-04-22T10:59:03.607","lastModified":"2026-06-17T00:42:13.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent, (5) tf_orgUnitName, (6) tf_aManufacturerFullName, (7) tf_aManufacturerName, (8) tf_aManufacturerAddress, or (9) tf_aManufacturerCity parameter."},{"lang":"es","value":"Múltiples vulnerabiliaddes de XSS en Micro Focus Novell Service Desk en versiones anteriores a 7.2 permiten a usuarios autenticados remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un determinado parámetro (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent, (5) tf_orgUnitName, (6) tf_aManufacturerFullName, (7) tf_aManufacturerName, (8) tf_aManufacturerAddress o (9) tf_aManufacturerCity."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:service_desk:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1","matchCriteriaId":"1FEBBFB1-37F6-4311-8398-FA3C67F8C5A6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/538043/100/0/threaded","source":"security@opentext.com"},{"url":"https://packetstormsecurity.com/files/136646","source":"security@opentext.com"},{"url":"https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt","source":"security@opentext.com"},{"url":"https://www.exploit-db.com/exploits/39687/","source":"security@opentext.com"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017431","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/archive/1/538043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://packetstormsecurity.com/files/136646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39687/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4062","sourceIdentifier":"cve@mitre.org","published":"2016-04-22T15:59:03.230","lastModified":"2026-06-17T00:46:49.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a denial of service (application hang) via a crafted PDF."},{"lang":"es","value":"Foxit Reader y PhantomPDF en versiones anteriores a 7.3.4 en Windows reportan incorrectamente errores de formato recursivamente, lo que permite a atacantes remotos provocar una denegación de servicio (colgado de aplicación) a través de un PDF manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:windows:*:*","versionEndIncluding":"7.3.0.118","matchCriteriaId":"4CE43B4A-ABBB-4649-9228-28CB29E058CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:windows:*:*","versionEndIncluding":"7.3.0.118","matchCriteriaId":"39495F57-FBF3-4BBB-A0F7-FA9A967694E7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90504","source":"cve@mitre.org"},{"url":"https://www.foxitsoftware.com/support/security-bulletins.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.foxitsoftware.com/support/security-bulletins.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1036","sourceIdentifier":"psirt@adobe.com","published":"2016-04-22T18:59:01.097","lastModified":"2026-06-17T00:41:10.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTracking is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Adobe Analytics AppMeasurement para Flash Library en versiones anteriores a 4.0.1, cuando debugTracking está activado, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:analytics_appmeasurement_for_flash_library:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"8DB672C2-4D43-4CA3-850A-E9C6BB889263"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035671","source":"psirt@adobe.com"},{"url":"https://helpx.adobe.com/security/products/analytics/apsb16-13.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://helpx.adobe.com/security/products/analytics/apsb16-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1916","sourceIdentifier":"cve@mitre.org","published":"2016-04-22T18:59:02.003","lastModified":"2026-06-17T00:42:51.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a certain Export IT screen."},{"lang":"es","value":"Vulnerabilidad de XSS en la Management Console en BlackBerry Enterprise Server (BES) 12 en versiones anteriores a 12.4.1 permite a usuarios autenticados remotos inyectar secuencias de comandos web o HTML arbitrarios aprovechando acceso administrativo básico para crear una política manipulada, dando lugar al renderizado incorrecto en una determinada pantalla Export IT."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:enterprise_server:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4","matchCriteriaId":"6BD07BC9-0A0C-4563-A4CC-186134CAF50F"}]}]}],"references":[{"url":"http://www.blackberry.com/btsc/KB38117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035568","source":"cve@mitre.org"},{"url":"http://www.blackberry.com/btsc/KB38117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1917","sourceIdentifier":"cve@mitre.org","published":"2016-04-22T18:59:03.330","lastModified":"2026-06-17T00:42:51.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1918."},{"lang":"es","value":"Vulnerabilidad de XSS en la Management Console en BlackBerry Enterprise Server (BES) 12 en versiones anteriores a 12.4.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2016-1918."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:enterprise_server:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4","matchCriteriaId":"6BD07BC9-0A0C-4563-A4CC-186134CAF50F"}]}]}],"references":[{"url":"http://www.blackberry.com/btsc/KB38118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035568","source":"cve@mitre.org"},{"url":"http://www.blackberry.com/btsc/KB38118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1918","sourceIdentifier":"cve@mitre.org","published":"2016-04-22T18:59:04.317","lastModified":"2026-06-17T00:42:51.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917."},{"lang":"es","value":"Vulnerabilidad de XSS en la Management Console en BlackBerry Enterprise Server (BES) 12 en versiones anteriores a 12.4.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2016-1917."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:enterprise_server:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4","matchCriteriaId":"6BD07BC9-0A0C-4563-A4CC-186134CAF50F"}]}]}],"references":[{"url":"http://www.blackberry.com/btsc/KB38118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035568","source":"cve@mitre.org"},{"url":"http://www.blackberry.com/btsc/KB38118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3126","sourceIdentifier":"secure@blackberry.com","published":"2016-04-22T18:59:07.177","lastModified":"2026-06-17T00:45:02.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en la Management Console en BlackBerry Enterprise Server (BES) 12 en versiones anteriores a 12.4.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"secure@blackberry.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:enterprise_server:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4","matchCriteriaId":"6BD07BC9-0A0C-4563-A4CC-186134CAF50F"}]}]}],"references":[{"url":"http://www.blackberry.com/btsc/KB38119","source":"secure@blackberry.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035568","source":"secure@blackberry.com"},{"url":"http://www.blackberry.com/btsc/KB38119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5370","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T00:59:00.127","lastModified":"2026-06-17T00:29:02.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors."},{"lang":"es","value":"Samba 3.x y 4.x en versiones anteriores a 4.2.11, 4.3.x en versiones anteriores a 4.3.8 y 4.4.x en versiones anteriores a 4.4.2 no implementa correctamente la capa DCE-RPC, lo que permite a atacantes remotos llevar a cabo protocol-downgrade attacks, provocar una denegación de servicio (caída de aplicación o consumo de CPU), o posiblemente ejecutar código arbitrario en un sistema cliente a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"66999F57-FF99-419F-BB12-35DC79FCE945"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD1356E-3B43-4C5B-9969-902440918EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"7A7F3209-B376-490B-A761-2CCB6CEE209A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"406C2297-B58D-4623-9E7A-2C438ABBAC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B6AF0DD4-08D4-4726-8A12-E979FF3322B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F98DE75F-84AD-42EE-B9DA-8AFF22D2BF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E3DAE05B-9086-4702-9586-77B34399E1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"DA544013-8FAC-4452-9D38-081C514E2981"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"21DE15C9-3308-4DE0-8048-9B06AF4D7343"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"62CB4968-F331-4653-8B9F-75BA4BB7A6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"3470D075-CCF2-42A1-A8C9-E375FC05FF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"EDA72F88-6799-4E6C-B73C-C92616B04661"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.12:*:*:*:*:*:*:*","matchCriteriaId":"EF17CB71-6E46-4A1E-9EAB-7D2E182D56C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.13:*:*:*:*:*:*:*","matchCriteriaId":"7E7FA486-73CE-4226-86C6-DA8383C5578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.14:*:*:*:*:*:*:*","matchCriteriaId":"B17D2B72-19E2-4DE6-B1E3-F1823E2690BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.15:*:*:*:*:*:*:*","matchCriteriaId":"FAC6922A-03CD-484A-BF40-F8F937428062"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.16:*:*:*:*:*:*:*","matchCriteriaId":"8470C251-2874-4047-A759-F8D5C6D5C755"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.17:*:*:*:*:*:*:*","matchCriteriaId":"332308A1-4BA4-4BC7-8B4B-7463CF98B664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.18:*:*:*:*:*:*:*","matchCriteriaId":"DE7DEA84-27E5-4CF0-AC2A-B128BB5AE199"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.19:*:*:*:*:*:*:*","matchCriteriaId":"455B73D1-E8F1-478C-8CEB-79E4B5F33A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.20:*:*:*:*:*:*:*","matchCriteriaId":"1AC49023-CAD6-4875-BF94-EEC290E8A5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.21:*:*:*:*:*:*:*","matchCriteriaId":"C42BFAF8-5822-4782-B60D-BCB131834419"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.22:*:*:*:*:*:*:*","matchCriteriaId":"BB1FD9EF-A863-48C6-8471-AB1D80B3C1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.23:*:*:*:*:*:*:*","matchCriteriaId":"C4B8A690-81D0-40C4-9301-CF1992C2DA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.24:*:*:*:*:*:*:*","matchCriteriaId":"CC65AE61-426D-4072-90A1-667AD31B73C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.25:*:*:*:*:*:*:*","matchCriteriaId":"66EAFEF2-0FE6-4EE8-B879-79FC24A7F27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0DEEFFF7-DF7C-4641-81A9-1CD64DC29DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2855B3F6-49B6-4D25-BEAC-4D1797D1E100"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6C1F1993-70A2-4104-85AF-3BECB330AB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E955458C-8F5C-4D55-9F78-9E1CB4416F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"866FF7AC-19EA-49E7-B423-9FF57839B580"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1A64C7-B039-4724-B06C-EAC898EB3B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C572E25A-4B44-426D-B637-292A08766D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6D96D806-ED52-4010-9F5F-F84E33C245D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"643FC7D2-FC39-43FA-99E6-805553FE1DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E2B95519-0C9D-473C-912D-E350106DC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DC603E1A-7882-45F0-9E8D-157F191C0FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E4F9321C-B442-4081-8E4A-62BAD95239A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"012A397B-004D-489C-B06D-C0D67E26B1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"392E0C61-7718-4DBC-8F02-6F3C2CBE1783"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D893CD1C-31D7-4F7F-BD0B-BEF75DCB2DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"324AE9D7-C41F-493E-A1AD-FCD869D29D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"68519B1F-F315-4BBD-A4A3-4E1956D81E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"EF745E93-A92E-4AD7-8D42-36E9387C6915"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"30E4B760-417E-45D1-9CE1-AEBC8936BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"BD0DA221-078A-49DC-B0F1-F318FD785664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D72BCA7B-6338-4A7C-AE71-E0B8F6C9F2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"DD8F6AB9-A6C4-443E-A846-EE845BE24F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56C8F7D7-BAAD-4F3A-BA39-44BE0CCADFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EC522377-A6CD-4513-83B4-9ADC15F76B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"55BC4595-5699-4237-BCD7-FD233BA1AECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.25:*:*:*:*:*:*:*","matchCriteriaId":"6EFCC9DB-4AA9-460E-87F0-1F74DEBB104B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"15FAC8F1-CB72-4DBD-9746-372246BEFEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CB9C10B-284E-48CD-A524-1A6BF828AED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F70DD815-1DAA-4025-8C97-32C7D06D8AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A37DA6E-6EB7-429B-ACE0-2B1220BD62C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CA25E8C-9EFA-4A01-A2F0-CD63A39EDD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"41C33F47-0F28-4AE2-A895-82B5E0F4496D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6EEFF35-E903-4651-A4B4-D92FF26A7509"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B44BD172-80FA-4260-BAFB-251A95E8C7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F09116D2-F168-4305-9A1D-88A1D42739A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"558E0B71-F79E-47B5-90CC-9C165BB15507"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"E8D7E102-DD54-43F2-B008-66F7C243477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8066AB8C-1AE6-4DA3-91DB-4BF67DBBA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2A03CB9E-DEFC-4507-A314-5E0824A66462"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E6708D6E-2098-432D-820A-853032BD9A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"42BA346B-F7C6-4EB3-91BD-2CCC2B688AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F2B689AA-2074-4E9A-93BD-F910510A29AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"3EF22E49-B259-4E13-B371-0C0173E534FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE5C0A8F-A502-4BC1-AC8A-45AE1D16371D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D73876B7-A758-40CB-919D-6720AA7B9564"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"84925F68-F440-4677-B3DF-F87EAC39E235"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"CC0A0B3C-C011-4F27-BE8D-5A89BFC93F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"E7792A65-DB6E-49F4-9447-021EA9A82697"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"4EF3B982-B094-4B54-84A2-4CA199EE4E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1F6811F5-DDCA-4AED-9BF9-4C71550A727D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"BF1670DE-C3B6-4EA3-8132-66BBD4CEFAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AE10A1EF-F9CE-4126-9793-FB70A1D512A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7FA4DD6C-1531-420A-B271-EB16EA05470B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"AB6AEA9D-42C8-4C60-86AE-54DB2940A3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"2F221BF0-7B2B-4676-B8F2-2705C05B4034"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"72C395C0-160C-4D8A-A3B6-7E30DD8721EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B17EC5DF-2F00-479B-9775-45DA569BCED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0CC31CBA-10A4-417C-A381-2BB7A68CE0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"65D07800-4CCD-4B98-8D41-778295D1A3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1C4D3BA-781F-4C96-9234-73DB1593C7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4AACDFB6-841E-42A5-AA8D-58E8A38D11D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"FD43D2C5-26D5-41AC-BC20-FACB68D22F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D186867E-18D6-4960-B8BE-A4353D941357"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"23DAAAEB-EB1E-4BCD-B88E-33418E3FD1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8643B45-1CE3-492F-BD82-65801F6C6FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7F009D18-204C-4E6D-9827-9FBA9A4FFBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"158DC9D2-2264-48B6-9116-CE6F0138D7C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A4339B46-E92A-4F7C-A0BA-62D7F7C428DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1A3D5E50-874B-48AE-B7C0-264DA0531847"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"60C0F5A3-DB13-4BAC-B633-7E7F54FE34FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7E28BFB7-FB1A-455E-BE0B-ADDEBFA9B9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A0453F7-380D-4F29-9B54-D47AAAD9FFE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://badlock.org/","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035533","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"cve@mitre.org"},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"cve@mitre.org"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"cve@mitre.org"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"cve@mitre.org"},{"url":"https://www.samba.org/samba/security/CVE-2015-5370.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://badlock.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/security/CVE-2015-5370.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2110","sourceIdentifier":"secalert@redhat.com","published":"2016-04-25T00:59:01.113","lastModified":"2026-06-17T00:43:27.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security."},{"lang":"es","value":"La implementación de autenticación NTLMSSP en Samba 3.x y 4.x en versiones anteriores a 4.2.11, 4.3.x en versiones anteriores a 4.3.8 y 4.4.x en versiones anteriores a 4.4.2 permite a atacantes man-in-the-middle llevar a cabo ataques de degradación de protocolo modificando el flujo de datos cliente-servidor para eliminar indicadores de la capa de aplicación o ajustes de cifrado, según lo demostrado limpiando la opción NTLMSSP_NEGOTIATE_SEAL o NTLMSSP_NEGOTIATE_SIGN para interrumpir la seguridad LDAP."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216145B7-4716-42F7-90DC-03884ECB2271"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898968E5-577E-4B86-A804-EBEC67157A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:*","matchCriteriaId":"A8CE218B-E64D-41DC-8CFD-9387427B72CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"920EF846-41D1-429D-AF0F-3D7950F93069"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8016DC4F-F410-4401-BDCC-91BE0D44D028"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC94A2CF-85DF-4BB5-8F78-470A3454C3CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"632D2489-3B5E-466E-A6DF-1EF00303869B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9FC116E5-B739-4E18-AA51-FFF59EBCA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D40F682-9F2E-465F-98F7-23E1036C74A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9478CC84-802F-4960-ACAB-3700154E813F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5BEA3806-E33A-49A6-99A4-095B4E543C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"AA7D08FB-30B9-4E42-B831-21A0C095062C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"13E6C8A4-FA17-44EF-A447-C73108540B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"57D5EA00-CC2E-4E56-8297-A3C1CEDBBE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"50E05AD3-C7F0-421D-8C9B-604E553332E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3A53517C-F12D-4D74-A722-5AE23598CEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2BF4A0A7-E176-4009-BAA2-E23B330D91A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:*","matchCriteriaId":"9C2CDC66-8A44-4BEE-9574-FC69C38295A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*","matchCriteriaId":"42EB6115-CC45-4464-8400-D7E3A9402803"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"58B06DAF-869F-481B-965D-70353581A6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FBF1A1D4-39DE-4227-A6E0-7E7817BDCCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"84F0E277-09BD-4FA8-B2A3-7E83AD1656BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"9F260B05-3963-49BF-9D96-EB06722C5483"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"59A7E91B-7B13-47E5-B8E6-CE7D6DC490F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"F002F105-A911-4E56-8630-C287DC527E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:a:*:*:*:*:*:*","matchCriteriaId":"9AD55F6B-F753-41FC-8701-78A7DA556E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:b:*:*:*:*:*:*","matchCriteriaId":"0B63F362-A49C-401F-BE49-C6E1DC03E4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*","matchCriteriaId":"D1936E19-9887-4E53-AA0C-738ABD4B97EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*","matchCriteriaId":"A2206C09-6A4B-4EC4-A206-E48EDF966913"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"0B918306-8743-404D-A035-CC3997ADCC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:a:*:*:*:*:*:*","matchCriteriaId":"81F23C27-76CF-4906-B829-3B4F2E07900E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:b:*:*:*:*:*:*","matchCriteriaId":"EF6C8992-5210-483E-9EED-B7FC1EACA703"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:c:*:*:*:*:*:*","matchCriteriaId":"EAF9C0EA-173A-4B02-9933-09DFAC31398D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*","matchCriteriaId":"43684906-D3AA-40FB-A75D-ED65C1DC9BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*","matchCriteriaId":"62E39538-4811-49DB-97CF-1F018C58BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*","matchCriteriaId":"C85D69FE-AF43-4B0E-A7A9-2D2C16426180"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"86347948-C08F-4F02-89A0-4F4A55CD4BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"A908DA9D-A8BD-46BA-A71F-BFDEC0A1341E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:a:*:*:*:*:*:*","matchCriteriaId":"D87FDC2E-C6D9-4D10-BED6-B10C40232DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:b:*:*:*:*:*:*","matchCriteriaId":"A90CE26E-8993-49BA-91BF-536DBC44CAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:c:*:*:*:*:*:*","matchCriteriaId":"33A9C2ED-355B-4903-ABC3-23C85B494053"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:d:*:*:*:*:*:*","matchCriteriaId":"375BCF42-1A8A-4ACB-8198-FEA471A81B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*","matchCriteriaId":"7CA7905C-51A0-4A56-A6A5-330288613055"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*","matchCriteriaId":"4AE85033-0658-4D60-8C7A-6E2BD63AFDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*","matchCriteriaId":"4600AAA4-834D-4F63-8E9A-88CB555C029E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*","matchCriteriaId":"54FE8D2E-AF0D-4C84-A5BC-2CE6759B534C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"8BFA3B82-9440-49E1-8088-FA22C0B7DD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"0762B1DA-7232-478D-805F-5E2A50F8BEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:a:*:*:*:*:*:*","matchCriteriaId":"C1C6E9D6-2964-4D63-9FCB-B4A02CC21975"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:b:*:*:*:*:*:*","matchCriteriaId":"F8C1CA41-DBEF-46D7-9A94-930315BECACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:c:*:*:*:*:*:*","matchCriteriaId":"F6804F20-3B33-4FAA-ACC3-9658FF0770D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*","matchCriteriaId":"9F22FC74-5999-4158-A253-674BF1C21E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*","matchCriteriaId":"0EEB31C4-5352-4905-8D9E-BD754991F07E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*","matchCriteriaId":"B0BE2AEC-6ACD-422C-AD20-6C034D68C891"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*","matchCriteriaId":"101163D7-D440-43CC-8704-A9614CD8CEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*","matchCriteriaId":"F0E4811D-3387-4838-94A0-1BD7F3C9C3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*","matchCriteriaId":"B69EA9CF-627C-4600-B4EC-10E91DB07E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*","matchCriteriaId":"0AF740A1-0BEC-4E29-9C74-F1F906EF3EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*","matchCriteriaId":"99A8D6D8-A207-498F-8DB2-EB7ED842CE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"70BB5BA1-F499-40FC-80F6-B3CD2F1BB074"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:a:*:*:*:*:*:*","matchCriteriaId":"0FFB13DF-53C5-4DF4-8D47-B40BD532E1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*","matchCriteriaId":"9A973443-C497-41FB-AF47-529AA2906CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"4BEE83D0-8377-49FB-AC7D-3B5E9DB6918B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:a:*:*:*:*:*:*","matchCriteriaId":"49684CD5-4256-47CA-84BC-E319D8973314"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"42F2EB0A-249D-4E81-B459-A88AC60A1D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:a:*:*:*:*:*:*","matchCriteriaId":"574ADE47-94CB-42A2-AE8E-A14FBB0EAFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"EBEA8397-6E23-49FE-9555-39C9599C6362"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"023C2353-750A-42FC-AC7E-115627E74AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F28A8721-CA4A-44E1-B740-0B4610374CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D93572BB-7F00-4137-A079-6FE96CD73F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*","matchCriteriaId":"0F0B13E8-EF18-4A3D-B228-C7FF128D1FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*","matchCriteriaId":"9B843321-9A8D-4541-9E54-58E2978E2437"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*","matchCriteriaId":"FBF36A20-3607-43A8-A4CC-169922BC0327"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*","matchCriteriaId":"EB71265E-60C4-4495-8B66-360E96B76FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:*","matchCriteriaId":"E1DB3DDE-C0F2-485C-B11E-2DD8A91B8CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"44746973-3CFD-4808-9545-755E296EFF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"31E4627C-5D19-4599-B304-D0E4D4193170"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE162A7-969D-44D5-B9ED-764F20F19C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"28DF45AE-DF03-4321-A019-D3BBC16433B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"64D87AD2-89F2-455F-916E-D404E6BD02C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6218AB51-DE71-40F3-8CBC-AF33586D36EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D02F8427-0DCC-48A9-A04F-939571D511E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"FC8A9943-6949-4B0A-9864-8B4696704098"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"4970BB40-085C-4069-B6F1-7E3726F1CFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FA43C063-EBE1-4C61-9C9E-C84C3A594A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6962B6DA-5D78-4702-9546-216971D03F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"39FAD067-8547-41E7-B1BC-74CC55D58AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"787C3CBF-5E4E-4727-950A-D99F15327CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9D4B0684-FDCC-4EE8-AABA-F71204167C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7172A430-F124-4200-88C2-8BE486BA5DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D0EB9DC7-A196-48ED-893B-733E8CDA961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"27D03508-3D54-4D05-A5BC-6F8641B45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F235FA61-ECBB-45C8-A48D-FAF12A5E2EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B0E09D3-68FA-40C9-A478-53707E5F78BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"66D41850-968D-431D-8075-EE9EFF013408"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"873A4A35-2CB0-4D55-B455-19D892776293"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:*","matchCriteriaId":"755DA0DD-6DC3-48D9-98D5-9EA2C59CA0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6680FCFB-CD17-4B4E-B523-A9D969D5F1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:*","matchCriteriaId":"FD90F710-95F0-4AE7-A8C9-0DC5FCA01DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.11:*:*:*:*:*:*:*","matchCriteriaId":"254D9460-899D-4D06-AC47-1914A42FC09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.12:*:*:*:*:*:*:*","matchCriteriaId":"427DA06C-9F5C-4E9A-A39F-22CD5E4F53D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.13:*:*:*:*:*:*:*","matchCriteriaId":"D60CED3E-B7A6-4674-ADD5-A3B047C7D125"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.14:*:*:*:*:*:*:*","matchCriteriaId":"07906A18-FD60-42A5-AC17-21F677EA1762"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.15:*:*:*:*:*:*:*","matchCriteriaId":"A99F7DCF-CBD0-4BC1-9C07-F1CB807614BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.16:*:*:*:*:*:*:*","matchCriteriaId":"1EFC3F99-11F6-496E-BF55-53CF1E012FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C78E2B3A-10C4-4226-A224-8D4AC792B2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EFFCF854-E316-442F-A62F-ACC1CA4E9892"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"43FE147E-B1D1-4BC2-ACC0-85F39674C064"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"D1A63AC0-2B68-46A8-AD96-657C99463E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"B6BD30B7-E182-402B-BE72-6C82DC085872"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4A0C00E2-AD14-46A1-A695-FFE81547303B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"9FC5E48D-95CC-46E9-9491-CA8A5FD9F14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"0C93E46D-FDEA-4B59-8C84-8A3DCC6AB3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"D4633D2E-2CBE-4B92-AD35-ED57C5399ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"7F200FC8-DA2E-4D39-8FF7-423759307DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"75B7341D-B02F-405B-81A0-5F74CFA8F8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"E207B352-D8F8-4E15-9507-D3AD10D56211"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"D0CBA51B-159F-42E9-8A2C-2B9BF1EB7D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.13:*:*:*:*:*:*:*","matchCriteriaId":"C8F01226-D9E6-460C-975A-618932D5F16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.14:*:*:*:*:*:*:*","matchCriteriaId":"5BD98764-741C-4FED-BE4D-446E8E8D31F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.15:*:*:*:*:*:*:*","matchCriteriaId":"4048DF8D-628D-4786-A883-0A1865DEBB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.16:*:*:*:*:*:*:*","matchCriteriaId":"77E7A4E4-940B-43C4-98A2-70F443A59120"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.17:*:*:*:*:*:*:*","matchCriteriaId":"B82A06CD-338D-4095-BC7D-2E38050D388A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B5900E6E-4379-4321-B69D-F9FBD341ACEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E2C56B31-4495-4974-A47F-7D18734C9B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DC8C2E40-DA05-4B50-AB29-398AF71EBECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"ED5E81ED-032F-42B7-9D50-15CADE337AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"ADA12C8C-2E4E-4321-8C45-71DD6A29E0E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4FDD90A4-B50B-4640-ADDE-B75BBC34507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFC3804-991A-4BAF-818E-E321DB21FB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1CE1B4D9-507A-43B2-81F3-77E411ABEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"857FCD47-F720-4273-BF1D-D5DC95ECA6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"1B8FE4AC-6E71-44CF-902D-BACA830C4CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.10:*:*:*:*:*:*:*","matchCriteriaId":"81EE762A-F95F-42CF-BB80-B0EF81A438EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.11:*:*:*:*:*:*:*","matchCriteriaId":"738095D8-8ACE-4CF4-9D97-4228FC686F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1D4634FC-DA4E-4B1D-B1AB-A45D8235780D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.13:*:*:*:*:*:*:*","matchCriteriaId":"0EA83A66-BD39-4560-8EAF-ADF2433EF36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.14:*:*:*:*:*:*:*","matchCriteriaId":"21B1F854-FC98-4DE9-8514-FD52301C5038"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.15:*:*:*:*:*:*:*","matchCriteriaId":"388B4551-AF4C-46D6-840E-D489B05675C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.16:*:*:*:*:*:*:*","matchCriteriaId":"52F9D2E0-C795-4A5A-9398-4630B78FCB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.17:*:*:*:*:*:*:*","matchCriteriaId":"94D176AD-EA34-4DA2-9926-079438030E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.18:*:*:*:*:*:*:*","matchCriteriaId":"B5CF8CA5-0821-49CF-8B8C-2D2D5F63A061"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.19:*:*:*:*:*:*:*","matchCriteriaId":"6A89C5FB-AA8B-41DC-93D5-81E199D73061"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.20:*:*:*:*:*:*:*","matchCriteriaId":"E71E10D0-E7C2-4D14-B685-4FB154B0A865"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.21:*:*:*:*:*:*:*","matchCriteriaId":"05993D31-BC6D-44CD-808C-4A40F998BF0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.22:*:*:*:*:*:*:*","matchCriteriaId":"5560111D-8930-4B70-BD51-25343FBEED1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"66999F57-FF99-419F-BB12-35DC79FCE945"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD1356E-3B43-4C5B-9969-902440918EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"7A7F3209-B376-490B-A761-2CCB6CEE209A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"406C2297-B58D-4623-9E7A-2C438ABBAC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B6AF0DD4-08D4-4726-8A12-E979FF3322B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F98DE75F-84AD-42EE-B9DA-8AFF22D2BF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E3DAE05B-9086-4702-9586-77B34399E1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"DA544013-8FAC-4452-9D38-081C514E2981"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"21DE15C9-3308-4DE0-8048-9B06AF4D7343"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"62CB4968-F331-4653-8B9F-75BA4BB7A6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"3470D075-CCF2-42A1-A8C9-E375FC05FF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"EDA72F88-6799-4E6C-B73C-C92616B04661"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.12:*:*:*:*:*:*:*","matchCriteriaId":"EF17CB71-6E46-4A1E-9EAB-7D2E182D56C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.13:*:*:*:*:*:*:*","matchCriteriaId":"7E7FA486-73CE-4226-86C6-DA8383C5578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.14:*:*:*:*:*:*:*","matchCriteriaId":"B17D2B72-19E2-4DE6-B1E3-F1823E2690BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.15:*:*:*:*:*:*:*","matchCriteriaId":"FAC6922A-03CD-484A-BF40-F8F937428062"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.16:*:*:*:*:*:*:*","matchCriteriaId":"8470C251-2874-4047-A759-F8D5C6D5C755"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.17:*:*:*:*:*:*:*","matchCriteriaId":"332308A1-4BA4-4BC7-8B4B-7463CF98B664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.18:*:*:*:*:*:*:*","matchCriteriaId":"DE7DEA84-27E5-4CF0-AC2A-B128BB5AE199"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.19:*:*:*:*:*:*:*","matchCriteriaId":"455B73D1-E8F1-478C-8CEB-79E4B5F33A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.20:*:*:*:*:*:*:*","matchCriteriaId":"1AC49023-CAD6-4875-BF94-EEC290E8A5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.21:*:*:*:*:*:*:*","matchCriteriaId":"C42BFAF8-5822-4782-B60D-BCB131834419"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.22:*:*:*:*:*:*:*","matchCriteriaId":"BB1FD9EF-A863-48C6-8471-AB1D80B3C1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.23:*:*:*:*:*:*:*","matchCriteriaId":"C4B8A690-81D0-40C4-9301-CF1992C2DA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.24:*:*:*:*:*:*:*","matchCriteriaId":"CC65AE61-426D-4072-90A1-667AD31B73C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.25:*:*:*:*:*:*:*","matchCriteriaId":"66EAFEF2-0FE6-4EE8-B879-79FC24A7F27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0DEEFFF7-DF7C-4641-81A9-1CD64DC29DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2855B3F6-49B6-4D25-BEAC-4D1797D1E100"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6C1F1993-70A2-4104-85AF-3BECB330AB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E955458C-8F5C-4D55-9F78-9E1CB4416F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"866FF7AC-19EA-49E7-B423-9FF57839B580"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1A64C7-B039-4724-B06C-EAC898EB3B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C572E25A-4B44-426D-B637-292A08766D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6D96D806-ED52-4010-9F5F-F84E33C245D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"643FC7D2-FC39-43FA-99E6-805553FE1DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E2B95519-0C9D-473C-912D-E350106DC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DC603E1A-7882-45F0-9E8D-157F191C0FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E4F9321C-B442-4081-8E4A-62BAD95239A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"012A397B-004D-489C-B06D-C0D67E26B1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"392E0C61-7718-4DBC-8F02-6F3C2CBE1783"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D893CD1C-31D7-4F7F-BD0B-BEF75DCB2DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"324AE9D7-C41F-493E-A1AD-FCD869D29D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"68519B1F-F315-4BBD-A4A3-4E1956D81E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"EF745E93-A92E-4AD7-8D42-36E9387C6915"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"30E4B760-417E-45D1-9CE1-AEBC8936BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"BD0DA221-078A-49DC-B0F1-F318FD785664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D72BCA7B-6338-4A7C-AE71-E0B8F6C9F2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"DD8F6AB9-A6C4-443E-A846-EE845BE24F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56C8F7D7-BAAD-4F3A-BA39-44BE0CCADFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EC522377-A6CD-4513-83B4-9ADC15F76B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"55BC4595-5699-4237-BCD7-FD233BA1AECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.25:*:*:*:*:*:*:*","matchCriteriaId":"6EFCC9DB-4AA9-460E-87F0-1F74DEBB104B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"15FAC8F1-CB72-4DBD-9746-372246BEFEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CB9C10B-284E-48CD-A524-1A6BF828AED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F70DD815-1DAA-4025-8C97-32C7D06D8AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A37DA6E-6EB7-429B-ACE0-2B1220BD62C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CA25E8C-9EFA-4A01-A2F0-CD63A39EDD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"41C33F47-0F28-4AE2-A895-82B5E0F4496D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6EEFF35-E903-4651-A4B4-D92FF26A7509"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B44BD172-80FA-4260-BAFB-251A95E8C7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F09116D2-F168-4305-9A1D-88A1D42739A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"558E0B71-F79E-47B5-90CC-9C165BB15507"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"E8D7E102-DD54-43F2-B008-66F7C243477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8066AB8C-1AE6-4DA3-91DB-4BF67DBBA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2A03CB9E-DEFC-4507-A314-5E0824A66462"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E6708D6E-2098-432D-820A-853032BD9A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"42BA346B-F7C6-4EB3-91BD-2CCC2B688AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F2B689AA-2074-4E9A-93BD-F910510A29AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"3EF22E49-B259-4E13-B371-0C0173E534FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE5C0A8F-A502-4BC1-AC8A-45AE1D16371D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D73876B7-A758-40CB-919D-6720AA7B9564"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"84925F68-F440-4677-B3DF-F87EAC39E235"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"CC0A0B3C-C011-4F27-BE8D-5A89BFC93F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"E7792A65-DB6E-49F4-9447-021EA9A82697"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"4EF3B982-B094-4B54-84A2-4CA199EE4E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1F6811F5-DDCA-4AED-9BF9-4C71550A727D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"BF1670DE-C3B6-4EA3-8132-66BBD4CEFAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AE10A1EF-F9CE-4126-9793-FB70A1D512A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7FA4DD6C-1531-420A-B271-EB16EA05470B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"AB6AEA9D-42C8-4C60-86AE-54DB2940A3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"2F221BF0-7B2B-4676-B8F2-2705C05B4034"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"72C395C0-160C-4D8A-A3B6-7E30DD8721EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B17EC5DF-2F00-479B-9775-45DA569BCED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0CC31CBA-10A4-417C-A381-2BB7A68CE0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"65D07800-4CCD-4B98-8D41-778295D1A3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1C4D3BA-781F-4C96-9234-73DB1593C7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4AACDFB6-841E-42A5-AA8D-58E8A38D11D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"FD43D2C5-26D5-41AC-BC20-FACB68D22F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D186867E-18D6-4960-B8BE-A4353D941357"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"23DAAAEB-EB1E-4BCD-B88E-33418E3FD1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8643B45-1CE3-492F-BD82-65801F6C6FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7F009D18-204C-4E6D-9827-9FBA9A4FFBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"158DC9D2-2264-48B6-9116-CE6F0138D7C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A4339B46-E92A-4F7C-A0BA-62D7F7C428DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1A3D5E50-874B-48AE-B7C0-264DA0531847"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"60C0F5A3-DB13-4BAC-B633-7E7F54FE34FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7E28BFB7-FB1A-455E-BE0B-ADDEBFA9B9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A0453F7-380D-4F29-9B54-D47AAAD9FFE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://badlock.org/","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00124.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0621.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0623.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0625.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035533","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-47","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/security/CVE-2016-2110.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://badlock.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00124.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0621.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0623.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0625.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/security/CVE-2016-2110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2111","sourceIdentifier":"secalert@redhat.com","published":"2016-04-25T00:59:02.017","lastModified":"2026-06-17T00:43:28.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005."},{"lang":"es","value":"El servicio NETLOGON en Samba 3.x y 4.x en versiones anteriores a 4.2.11, 4.3.x en versiones anteriores a 4.3.8 y 4.4.x en versiones anteriores a 4.4.2, cuando un controlador de dominio está configurado, permite a atacantes remotos suplantar el nombre del computador de un dispositivo final de un canal seguro y obtener información sensible de sesión, ejecutando una aplicación manipulada y aprovechando la habilidad para husmear tráfico de red, un problema relacionado con CVE-2015-0005."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:P/A:N","baseScore":4.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216145B7-4716-42F7-90DC-03884ECB2271"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898968E5-577E-4B86-A804-EBEC67157A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:*","matchCriteriaId":"A8CE218B-E64D-41DC-8CFD-9387427B72CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"920EF846-41D1-429D-AF0F-3D7950F93069"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8016DC4F-F410-4401-BDCC-91BE0D44D028"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC94A2CF-85DF-4BB5-8F78-470A3454C3CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"632D2489-3B5E-466E-A6DF-1EF00303869B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9FC116E5-B739-4E18-AA51-FFF59EBCA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D40F682-9F2E-465F-98F7-23E1036C74A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9478CC84-802F-4960-ACAB-3700154E813F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5BEA3806-E33A-49A6-99A4-095B4E543C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"AA7D08FB-30B9-4E42-B831-21A0C095062C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"13E6C8A4-FA17-44EF-A447-C73108540B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"57D5EA00-CC2E-4E56-8297-A3C1CEDBBE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"50E05AD3-C7F0-421D-8C9B-604E553332E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3A53517C-F12D-4D74-A722-5AE23598CEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2BF4A0A7-E176-4009-BAA2-E23B330D91A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:*","matchCriteriaId":"9C2CDC66-8A44-4BEE-9574-FC69C38295A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*","matchCriteriaId":"42EB6115-CC45-4464-8400-D7E3A9402803"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"58B06DAF-869F-481B-965D-70353581A6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FBF1A1D4-39DE-4227-A6E0-7E7817BDCCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"84F0E277-09BD-4FA8-B2A3-7E83AD1656BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"9F260B05-3963-49BF-9D96-EB06722C5483"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"59A7E91B-7B13-47E5-B8E6-CE7D6DC490F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"F002F105-A911-4E56-8630-C287DC527E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:a:*:*:*:*:*:*","matchCriteriaId":"9AD55F6B-F753-41FC-8701-78A7DA556E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:b:*:*:*:*:*:*","matchCriteriaId":"0B63F362-A49C-401F-BE49-C6E1DC03E4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*","matchCriteriaId":"D1936E19-9887-4E53-AA0C-738ABD4B97EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*","matchCriteriaId":"A2206C09-6A4B-4EC4-A206-E48EDF966913"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"0B918306-8743-404D-A035-CC3997ADCC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:a:*:*:*:*:*:*","matchCriteriaId":"81F23C27-76CF-4906-B829-3B4F2E07900E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:b:*:*:*:*:*:*","matchCriteriaId":"EF6C8992-5210-483E-9EED-B7FC1EACA703"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:c:*:*:*:*:*:*","matchCriteriaId":"EAF9C0EA-173A-4B02-9933-09DFAC31398D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*","matchCriteriaId":"43684906-D3AA-40FB-A75D-ED65C1DC9BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*","matchCriteriaId":"62E39538-4811-49DB-97CF-1F018C58BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*","matchCriteriaId":"C85D69FE-AF43-4B0E-A7A9-2D2C16426180"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"86347948-C08F-4F02-89A0-4F4A55CD4BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"A908DA9D-A8BD-46BA-A71F-BFDEC0A1341E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:a:*:*:*:*:*:*","matchCriteriaId":"D87FDC2E-C6D9-4D10-BED6-B10C40232DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:b:*:*:*:*:*:*","matchCriteriaId":"A90CE26E-8993-49BA-91BF-536DBC44CAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:c:*:*:*:*:*:*","matchCriteriaId":"33A9C2ED-355B-4903-ABC3-23C85B494053"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:d:*:*:*:*:*:*","matchCriteriaId":"375BCF42-1A8A-4ACB-8198-FEA471A81B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*","matchCriteriaId":"7CA7905C-51A0-4A56-A6A5-330288613055"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*","matchCriteriaId":"4AE85033-0658-4D60-8C7A-6E2BD63AFDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*","matchCriteriaId":"4600AAA4-834D-4F63-8E9A-88CB555C029E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*","matchCriteriaId":"54FE8D2E-AF0D-4C84-A5BC-2CE6759B534C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"8BFA3B82-9440-49E1-8088-FA22C0B7DD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"0762B1DA-7232-478D-805F-5E2A50F8BEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:a:*:*:*:*:*:*","matchCriteriaId":"C1C6E9D6-2964-4D63-9FCB-B4A02CC21975"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:b:*:*:*:*:*:*","matchCriteriaId":"F8C1CA41-DBEF-46D7-9A94-930315BECACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:c:*:*:*:*:*:*","matchCriteriaId":"F6804F20-3B33-4FAA-ACC3-9658FF0770D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*","matchCriteriaId":"9F22FC74-5999-4158-A253-674BF1C21E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*","matchCriteriaId":"0EEB31C4-5352-4905-8D9E-BD754991F07E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*","matchCriteriaId":"B0BE2AEC-6ACD-422C-AD20-6C034D68C891"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*","matchCriteriaId":"101163D7-D440-43CC-8704-A9614CD8CEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*","matchCriteriaId":"F0E4811D-3387-4838-94A0-1BD7F3C9C3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*","matchCriteriaId":"B69EA9CF-627C-4600-B4EC-10E91DB07E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*","matchCriteriaId":"0AF740A1-0BEC-4E29-9C74-F1F906EF3EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*","matchCriteriaId":"99A8D6D8-A207-498F-8DB2-EB7ED842CE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"70BB5BA1-F499-40FC-80F6-B3CD2F1BB074"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:a:*:*:*:*:*:*","matchCriteriaId":"0FFB13DF-53C5-4DF4-8D47-B40BD532E1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*","matchCriteriaId":"9A973443-C497-41FB-AF47-529AA2906CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"4BEE83D0-8377-49FB-AC7D-3B5E9DB6918B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:a:*:*:*:*:*:*","matchCriteriaId":"49684CD5-4256-47CA-84BC-E319D8973314"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"42F2EB0A-249D-4E81-B459-A88AC60A1D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:a:*:*:*:*:*:*","matchCriteriaId":"574ADE47-94CB-42A2-AE8E-A14FBB0EAFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"EBEA8397-6E23-49FE-9555-39C9599C6362"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"023C2353-750A-42FC-AC7E-115627E74AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F28A8721-CA4A-44E1-B740-0B4610374CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D93572BB-7F00-4137-A079-6FE96CD73F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*","matchCriteriaId":"0F0B13E8-EF18-4A3D-B228-C7FF128D1FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*","matchCriteriaId":"9B843321-9A8D-4541-9E54-58E2978E2437"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*","matchCriteriaId":"FBF36A20-3607-43A8-A4CC-169922BC0327"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*","matchCriteriaId":"EB71265E-60C4-4495-8B66-360E96B76FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:*","matchCriteriaId":"E1DB3DDE-C0F2-485C-B11E-2DD8A91B8CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"44746973-3CFD-4808-9545-755E296EFF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"31E4627C-5D19-4599-B304-D0E4D4193170"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE162A7-969D-44D5-B9ED-764F20F19C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"28DF45AE-DF03-4321-A019-D3BBC16433B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"64D87AD2-89F2-455F-916E-D404E6BD02C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6218AB51-DE71-40F3-8CBC-AF33586D36EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D02F8427-0DCC-48A9-A04F-939571D511E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"FC8A9943-6949-4B0A-9864-8B4696704098"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"4970BB40-085C-4069-B6F1-7E3726F1CFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FA43C063-EBE1-4C61-9C9E-C84C3A594A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6962B6DA-5D78-4702-9546-216971D03F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"39FAD067-8547-41E7-B1BC-74CC55D58AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"787C3CBF-5E4E-4727-950A-D99F15327CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9D4B0684-FDCC-4EE8-AABA-F71204167C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7172A430-F124-4200-88C2-8BE486BA5DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D0EB9DC7-A196-48ED-893B-733E8CDA961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"27D03508-3D54-4D05-A5BC-6F8641B45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F235FA61-ECBB-45C8-A48D-FAF12A5E2EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B0E09D3-68FA-40C9-A478-53707E5F78BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"66D41850-968D-431D-8075-EE9EFF013408"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"873A4A35-2CB0-4D55-B455-19D892776293"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:*","matchCriteriaId":"755DA0DD-6DC3-48D9-98D5-9EA2C59CA0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6680FCFB-CD17-4B4E-B523-A9D969D5F1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:*","matchCriteriaId":"FD90F710-95F0-4AE7-A8C9-0DC5FCA01DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.11:*:*:*:*:*:*:*","matchCriteriaId":"254D9460-899D-4D06-AC47-1914A42FC09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.12:*:*:*:*:*:*:*","matchCriteriaId":"427DA06C-9F5C-4E9A-A39F-22CD5E4F53D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.13:*:*:*:*:*:*:*","matchCriteriaId":"D60CED3E-B7A6-4674-ADD5-A3B047C7D125"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.14:*:*:*:*:*:*:*","matchCriteriaId":"07906A18-FD60-42A5-AC17-21F677EA1762"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.15:*:*:*:*:*:*:*","matchCriteriaId":"A99F7DCF-CBD0-4BC1-9C07-F1CB807614BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.16:*:*:*:*:*:*:*","matchCriteriaId":"1EFC3F99-11F6-496E-BF55-53CF1E012FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C78E2B3A-10C4-4226-A224-8D4AC792B2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EFFCF854-E316-442F-A62F-ACC1CA4E9892"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"43FE147E-B1D1-4BC2-ACC0-85F39674C064"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"D1A63AC0-2B68-46A8-AD96-657C99463E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"B6BD30B7-E182-402B-BE72-6C82DC085872"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4A0C00E2-AD14-46A1-A695-FFE81547303B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"9FC5E48D-95CC-46E9-9491-CA8A5FD9F14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"0C93E46D-FDEA-4B59-8C84-8A3DCC6AB3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"D4633D2E-2CBE-4B92-AD35-ED57C5399ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"7F200FC8-DA2E-4D39-8FF7-423759307DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"75B7341D-B02F-405B-81A0-5F74CFA8F8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"E207B352-D8F8-4E15-9507-D3AD10D56211"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"D0CBA51B-159F-42E9-8A2C-2B9BF1EB7D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.13:*:*:*:*:*:*:*","matchCriteriaId":"C8F01226-D9E6-460C-975A-618932D5F16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.14:*:*:*:*:*:*:*","matchCriteriaId":"5BD98764-741C-4FED-BE4D-446E8E8D31F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.15:*:*:*:*:*:*:*","matchCriteriaId":"4048DF8D-628D-4786-A883-0A1865DEBB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.16:*:*:*:*:*:*:*","matchCriteriaId":"77E7A4E4-940B-43C4-98A2-70F443A59120"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.17:*:*:*:*:*:*:*","matchCriteriaId":"B82A06CD-338D-4095-BC7D-2E38050D388A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B5900E6E-4379-4321-B69D-F9FBD341ACEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E2C56B31-4495-4974-A47F-7D18734C9B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DC8C2E40-DA05-4B50-AB29-398AF71EBECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"ED5E81ED-032F-42B7-9D50-15CADE337AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"ADA12C8C-2E4E-4321-8C45-71DD6A29E0E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4FDD90A4-B50B-4640-ADDE-B75BBC34507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFC3804-991A-4BAF-818E-E321DB21FB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1CE1B4D9-507A-43B2-81F3-77E411ABEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"857FCD47-F720-4273-BF1D-D5DC95ECA6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"1B8FE4AC-6E71-44CF-902D-BACA830C4CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.10:*:*:*:*:*:*:*","matchCriteriaId":"81EE762A-F95F-42CF-BB80-B0EF81A438EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.11:*:*:*:*:*:*:*","matchCriteriaId":"738095D8-8ACE-4CF4-9D97-4228FC686F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1D4634FC-DA4E-4B1D-B1AB-A45D8235780D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.13:*:*:*:*:*:*:*","matchCriteriaId":"0EA83A66-BD39-4560-8EAF-ADF2433EF36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.14:*:*:*:*:*:*:*","matchCriteriaId":"21B1F854-FC98-4DE9-8514-FD52301C5038"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.15:*:*:*:*:*:*:*","matchCriteriaId":"388B4551-AF4C-46D6-840E-D489B05675C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.16:*:*:*:*:*:*:*","matchCriteriaId":"52F9D2E0-C795-4A5A-9398-4630B78FCB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.17:*:*:*:*:*:*:*","matchCriteriaId":"94D176AD-EA34-4DA2-9926-079438030E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.18:*:*:*:*:*:*:*","matchCriteriaId":"B5CF8CA5-0821-49CF-8B8C-2D2D5F63A061"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.19:*:*:*:*:*:*:*","matchCriteriaId":"6A89C5FB-AA8B-41DC-93D5-81E199D73061"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.20:*:*:*:*:*:*:*","matchCriteriaId":"E71E10D0-E7C2-4D14-B685-4FB154B0A865"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.21:*:*:*:*:*:*:*","matchCriteriaId":"05993D31-BC6D-44CD-808C-4A40F998BF0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.22:*:*:*:*:*:*:*","matchCriteriaId":"5560111D-8930-4B70-BD51-25343FBEED1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"66999F57-FF99-419F-BB12-35DC79FCE945"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD1356E-3B43-4C5B-9969-902440918EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"7A7F3209-B376-490B-A761-2CCB6CEE209A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"406C2297-B58D-4623-9E7A-2C438ABBAC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B6AF0DD4-08D4-4726-8A12-E979FF3322B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F98DE75F-84AD-42EE-B9DA-8AFF22D2BF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E3DAE05B-9086-4702-9586-77B34399E1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"DA544013-8FAC-4452-9D38-081C514E2981"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"21DE15C9-3308-4DE0-8048-9B06AF4D7343"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"62CB4968-F331-4653-8B9F-75BA4BB7A6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"3470D075-CCF2-42A1-A8C9-E375FC05FF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"EDA72F88-6799-4E6C-B73C-C92616B04661"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.12:*:*:*:*:*:*:*","matchCriteriaId":"EF17CB71-6E46-4A1E-9EAB-7D2E182D56C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.13:*:*:*:*:*:*:*","matchCriteriaId":"7E7FA486-73CE-4226-86C6-DA8383C5578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.14:*:*:*:*:*:*:*","matchCriteriaId":"B17D2B72-19E2-4DE6-B1E3-F1823E2690BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.15:*:*:*:*:*:*:*","matchCriteriaId":"FAC6922A-03CD-484A-BF40-F8F937428062"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.16:*:*:*:*:*:*:*","matchCriteriaId":"8470C251-2874-4047-A759-F8D5C6D5C755"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.17:*:*:*:*:*:*:*","matchCriteriaId":"332308A1-4BA4-4BC7-8B4B-7463CF98B664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.18:*:*:*:*:*:*:*","matchCriteriaId":"DE7DEA84-27E5-4CF0-AC2A-B128BB5AE199"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.19:*:*:*:*:*:*:*","matchCriteriaId":"455B73D1-E8F1-478C-8CEB-79E4B5F33A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.20:*:*:*:*:*:*:*","matchCriteriaId":"1AC49023-CAD6-4875-BF94-EEC290E8A5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.21:*:*:*:*:*:*:*","matchCriteriaId":"C42BFAF8-5822-4782-B60D-BCB131834419"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.22:*:*:*:*:*:*:*","matchCriteriaId":"BB1FD9EF-A863-48C6-8471-AB1D80B3C1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.23:*:*:*:*:*:*:*","matchCriteriaId":"C4B8A690-81D0-40C4-9301-CF1992C2DA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.24:*:*:*:*:*:*:*","matchCriteriaId":"CC65AE61-426D-4072-90A1-667AD31B73C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.25:*:*:*:*:*:*:*","matchCriteriaId":"66EAFEF2-0FE6-4EE8-B879-79FC24A7F27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0DEEFFF7-DF7C-4641-81A9-1CD64DC29DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2855B3F6-49B6-4D25-BEAC-4D1797D1E100"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6C1F1993-70A2-4104-85AF-3BECB330AB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E955458C-8F5C-4D55-9F78-9E1CB4416F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"866FF7AC-19EA-49E7-B423-9FF57839B580"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1A64C7-B039-4724-B06C-EAC898EB3B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C572E25A-4B44-426D-B637-292A08766D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6D96D806-ED52-4010-9F5F-F84E33C245D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"643FC7D2-FC39-43FA-99E6-805553FE1DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E2B95519-0C9D-473C-912D-E350106DC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DC603E1A-7882-45F0-9E8D-157F191C0FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E4F9321C-B442-4081-8E4A-62BAD95239A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"012A397B-004D-489C-B06D-C0D67E26B1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"392E0C61-7718-4DBC-8F02-6F3C2CBE1783"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D893CD1C-31D7-4F7F-BD0B-BEF75DCB2DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"324AE9D7-C41F-493E-A1AD-FCD869D29D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"68519B1F-F315-4BBD-A4A3-4E1956D81E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"EF745E93-A92E-4AD7-8D42-36E9387C6915"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"30E4B760-417E-45D1-9CE1-AEBC8936BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"BD0DA221-078A-49DC-B0F1-F318FD785664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D72BCA7B-6338-4A7C-AE71-E0B8F6C9F2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"DD8F6AB9-A6C4-443E-A846-EE845BE24F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56C8F7D7-BAAD-4F3A-BA39-44BE0CCADFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EC522377-A6CD-4513-83B4-9ADC15F76B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"55BC4595-5699-4237-BCD7-FD233BA1AECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.25:*:*:*:*:*:*:*","matchCriteriaId":"6EFCC9DB-4AA9-460E-87F0-1F74DEBB104B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"15FAC8F1-CB72-4DBD-9746-372246BEFEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CB9C10B-284E-48CD-A524-1A6BF828AED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F70DD815-1DAA-4025-8C97-32C7D06D8AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A37DA6E-6EB7-429B-ACE0-2B1220BD62C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CA25E8C-9EFA-4A01-A2F0-CD63A39EDD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"41C33F47-0F28-4AE2-A895-82B5E0F4496D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6EEFF35-E903-4651-A4B4-D92FF26A7509"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B44BD172-80FA-4260-BAFB-251A95E8C7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F09116D2-F168-4305-9A1D-88A1D42739A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"558E0B71-F79E-47B5-90CC-9C165BB15507"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"E8D7E102-DD54-43F2-B008-66F7C243477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8066AB8C-1AE6-4DA3-91DB-4BF67DBBA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2A03CB9E-DEFC-4507-A314-5E0824A66462"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E6708D6E-2098-432D-820A-853032BD9A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"42BA346B-F7C6-4EB3-91BD-2CCC2B688AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F2B689AA-2074-4E9A-93BD-F910510A29AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"3EF22E49-B259-4E13-B371-0C0173E534FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE5C0A8F-A502-4BC1-AC8A-45AE1D16371D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D73876B7-A758-40CB-919D-6720AA7B9564"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"84925F68-F440-4677-B3DF-F87EAC39E235"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"CC0A0B3C-C011-4F27-BE8D-5A89BFC93F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"E7792A65-DB6E-49F4-9447-021EA9A82697"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"4EF3B982-B094-4B54-84A2-4CA199EE4E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1F6811F5-DDCA-4AED-9BF9-4C71550A727D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"BF1670DE-C3B6-4EA3-8132-66BBD4CEFAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AE10A1EF-F9CE-4126-9793-FB70A1D512A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7FA4DD6C-1531-420A-B271-EB16EA05470B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"AB6AEA9D-42C8-4C60-86AE-54DB2940A3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"2F221BF0-7B2B-4676-B8F2-2705C05B4034"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"72C395C0-160C-4D8A-A3B6-7E30DD8721EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B17EC5DF-2F00-479B-9775-45DA569BCED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0CC31CBA-10A4-417C-A381-2BB7A68CE0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"65D07800-4CCD-4B98-8D41-778295D1A3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1C4D3BA-781F-4C96-9234-73DB1593C7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4AACDFB6-841E-42A5-AA8D-58E8A38D11D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"FD43D2C5-26D5-41AC-BC20-FACB68D22F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D186867E-18D6-4960-B8BE-A4353D941357"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"23DAAAEB-EB1E-4BCD-B88E-33418E3FD1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8643B45-1CE3-492F-BD82-65801F6C6FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7F009D18-204C-4E6D-9827-9FBA9A4FFBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"158DC9D2-2264-48B6-9116-CE6F0138D7C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A4339B46-E92A-4F7C-A0BA-62D7F7C428DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1A3D5E50-874B-48AE-B7C0-264DA0531847"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"60C0F5A3-DB13-4BAC-B633-7E7F54FE34FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7E28BFB7-FB1A-455E-BE0B-ADDEBFA9B9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A0453F7-380D-4F29-9B54-D47AAAD9FFE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://badlock.org/","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0621.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0623.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0625.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035533","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-47","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/security/CVE-2016-2111.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://badlock.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0621.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0623.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0625.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/security/CVE-2016-2111.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2112","sourceIdentifier":"secalert@redhat.com","published":"2016-04-25T00:59:03.097","lastModified":"2026-06-17T00:43:28.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the \"client ldap sasl wrapping\" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream."},{"lang":"es","value":"El paquete de la librería cliente LDAP en Samba 3.x y 4.x en versiones anteriores a 4.2.11, 4.3.x en versiones anteriores a 4.3.8 y 4.4.x en versiones anteriores a 4.4.2 no reconoce el ajuste \"client ldap sasl wrapping\", lo que permite a atacantes man-in-the-middle llevar a cabo ataques de degradación de protocolo LDAP modificando el flujo de datos cliente-servidor."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216145B7-4716-42F7-90DC-03884ECB2271"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898968E5-577E-4B86-A804-EBEC67157A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:*","matchCriteriaId":"A8CE218B-E64D-41DC-8CFD-9387427B72CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"920EF846-41D1-429D-AF0F-3D7950F93069"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8016DC4F-F410-4401-BDCC-91BE0D44D028"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC94A2CF-85DF-4BB5-8F78-470A3454C3CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"632D2489-3B5E-466E-A6DF-1EF00303869B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9FC116E5-B739-4E18-AA51-FFF59EBCA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D40F682-9F2E-465F-98F7-23E1036C74A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9478CC84-802F-4960-ACAB-3700154E813F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5BEA3806-E33A-49A6-99A4-095B4E543C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"AA7D08FB-30B9-4E42-B831-21A0C095062C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"13E6C8A4-FA17-44EF-A447-C73108540B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"57D5EA00-CC2E-4E56-8297-A3C1CEDBBE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"50E05AD3-C7F0-421D-8C9B-604E553332E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3A53517C-F12D-4D74-A722-5AE23598CEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2BF4A0A7-E176-4009-BAA2-E23B330D91A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:*","matchCriteriaId":"9C2CDC66-8A44-4BEE-9574-FC69C38295A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*","matchCriteriaId":"42EB6115-CC45-4464-8400-D7E3A9402803"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"58B06DAF-869F-481B-965D-70353581A6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FBF1A1D4-39DE-4227-A6E0-7E7817BDCCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"84F0E277-09BD-4FA8-B2A3-7E83AD1656BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"9F260B05-3963-49BF-9D96-EB06722C5483"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"59A7E91B-7B13-47E5-B8E6-CE7D6DC490F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"F002F105-A911-4E56-8630-C287DC527E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:a:*:*:*:*:*:*","matchCriteriaId":"9AD55F6B-F753-41FC-8701-78A7DA556E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:b:*:*:*:*:*:*","matchCriteriaId":"0B63F362-A49C-401F-BE49-C6E1DC03E4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*","matchCriteriaId":"D1936E19-9887-4E53-AA0C-738ABD4B97EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*","matchCriteriaId":"A2206C09-6A4B-4EC4-A206-E48EDF966913"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"0B918306-8743-404D-A035-CC3997ADCC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:a:*:*:*:*:*:*","matchCriteriaId":"81F23C27-76CF-4906-B829-3B4F2E07900E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:b:*:*:*:*:*:*","matchCriteriaId":"EF6C8992-5210-483E-9EED-B7FC1EACA703"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:c:*:*:*:*:*:*","matchCriteriaId":"EAF9C0EA-173A-4B02-9933-09DFAC31398D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*","matchCriteriaId":"43684906-D3AA-40FB-A75D-ED65C1DC9BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*","matchCriteriaId":"62E39538-4811-49DB-97CF-1F018C58BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*","matchCriteriaId":"C85D69FE-AF43-4B0E-A7A9-2D2C16426180"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"86347948-C08F-4F02-89A0-4F4A55CD4BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"A908DA9D-A8BD-46BA-A71F-BFDEC0A1341E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:a:*:*:*:*:*:*","matchCriteriaId":"D87FDC2E-C6D9-4D10-BED6-B10C40232DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:b:*:*:*:*:*:*","matchCriteriaId":"A90CE26E-8993-49BA-91BF-536DBC44CAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:c:*:*:*:*:*:*","matchCriteriaId":"33A9C2ED-355B-4903-ABC3-23C85B494053"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:d:*:*:*:*:*:*","matchCriteriaId":"375BCF42-1A8A-4ACB-8198-FEA471A81B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*","matchCriteriaId":"7CA7905C-51A0-4A56-A6A5-330288613055"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*","matchCriteriaId":"4AE85033-0658-4D60-8C7A-6E2BD63AFDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*","matchCriteriaId":"4600AAA4-834D-4F63-8E9A-88CB555C029E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*","matchCriteriaId":"54FE8D2E-AF0D-4C84-A5BC-2CE6759B534C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"8BFA3B82-9440-49E1-8088-FA22C0B7DD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"0762B1DA-7232-478D-805F-5E2A50F8BEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:a:*:*:*:*:*:*","matchCriteriaId":"C1C6E9D6-2964-4D63-9FCB-B4A02CC21975"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:b:*:*:*:*:*:*","matchCriteriaId":"F8C1CA41-DBEF-46D7-9A94-930315BECACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:c:*:*:*:*:*:*","matchCriteriaId":"F6804F20-3B33-4FAA-ACC3-9658FF0770D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*","matchCriteriaId":"9F22FC74-5999-4158-A253-674BF1C21E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*","matchCriteriaId":"0EEB31C4-5352-4905-8D9E-BD754991F07E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*","matchCriteriaId":"B0BE2AEC-6ACD-422C-AD20-6C034D68C891"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*","matchCriteriaId":"101163D7-D440-43CC-8704-A9614CD8CEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*","matchCriteriaId":"F0E4811D-3387-4838-94A0-1BD7F3C9C3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*","matchCriteriaId":"B69EA9CF-627C-4600-B4EC-10E91DB07E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*","matchCriteriaId":"0AF740A1-0BEC-4E29-9C74-F1F906EF3EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*","matchCriteriaId":"99A8D6D8-A207-498F-8DB2-EB7ED842CE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"70BB5BA1-F499-40FC-80F6-B3CD2F1BB074"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:a:*:*:*:*:*:*","matchCriteriaId":"0FFB13DF-53C5-4DF4-8D47-B40BD532E1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*","matchCriteriaId":"9A973443-C497-41FB-AF47-529AA2906CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"4BEE83D0-8377-49FB-AC7D-3B5E9DB6918B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:a:*:*:*:*:*:*","matchCriteriaId":"49684CD5-4256-47CA-84BC-E319D8973314"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"42F2EB0A-249D-4E81-B459-A88AC60A1D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:a:*:*:*:*:*:*","matchCriteriaId":"574ADE47-94CB-42A2-AE8E-A14FBB0EAFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"EBEA8397-6E23-49FE-9555-39C9599C6362"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"023C2353-750A-42FC-AC7E-115627E74AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F28A8721-CA4A-44E1-B740-0B4610374CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D93572BB-7F00-4137-A079-6FE96CD73F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*","matchCriteriaId":"0F0B13E8-EF18-4A3D-B228-C7FF128D1FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*","matchCriteriaId":"9B843321-9A8D-4541-9E54-58E2978E2437"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*","matchCriteriaId":"FBF36A20-3607-43A8-A4CC-169922BC0327"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*","matchCriteriaId":"EB71265E-60C4-4495-8B66-360E96B76FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:*","matchCriteriaId":"E1DB3DDE-C0F2-485C-B11E-2DD8A91B8CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"44746973-3CFD-4808-9545-755E296EFF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"31E4627C-5D19-4599-B304-D0E4D4193170"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE162A7-969D-44D5-B9ED-764F20F19C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"28DF45AE-DF03-4321-A019-D3BBC16433B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"64D87AD2-89F2-455F-916E-D404E6BD02C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6218AB51-DE71-40F3-8CBC-AF33586D36EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D02F8427-0DCC-48A9-A04F-939571D511E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"FC8A9943-6949-4B0A-9864-8B4696704098"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"4970BB40-085C-4069-B6F1-7E3726F1CFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FA43C063-EBE1-4C61-9C9E-C84C3A594A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6962B6DA-5D78-4702-9546-216971D03F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"39FAD067-8547-41E7-B1BC-74CC55D58AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"787C3CBF-5E4E-4727-950A-D99F15327CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9D4B0684-FDCC-4EE8-AABA-F71204167C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7172A430-F124-4200-88C2-8BE486BA5DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D0EB9DC7-A196-48ED-893B-733E8CDA961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"27D03508-3D54-4D05-A5BC-6F8641B45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F235FA61-ECBB-45C8-A48D-FAF12A5E2EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B0E09D3-68FA-40C9-A478-53707E5F78BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"66D41850-968D-431D-8075-EE9EFF013408"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"873A4A35-2CB0-4D55-B455-19D892776293"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:*","matchCriteriaId":"755DA0DD-6DC3-48D9-98D5-9EA2C59CA0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6680FCFB-CD17-4B4E-B523-A9D969D5F1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:*","matchCriteriaId":"FD90F710-95F0-4AE7-A8C9-0DC5FCA01DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.11:*:*:*:*:*:*:*","matchCriteriaId":"254D9460-899D-4D06-AC47-1914A42FC09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.12:*:*:*:*:*:*:*","matchCriteriaId":"427DA06C-9F5C-4E9A-A39F-22CD5E4F53D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.13:*:*:*:*:*:*:*","matchCriteriaId":"D60CED3E-B7A6-4674-ADD5-A3B047C7D125"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.14:*:*:*:*:*:*:*","matchCriteriaId":"07906A18-FD60-42A5-AC17-21F677EA1762"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.15:*:*:*:*:*:*:*","matchCriteriaId":"A99F7DCF-CBD0-4BC1-9C07-F1CB807614BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.16:*:*:*:*:*:*:*","matchCriteriaId":"1EFC3F99-11F6-496E-BF55-53CF1E012FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C78E2B3A-10C4-4226-A224-8D4AC792B2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EFFCF854-E316-442F-A62F-ACC1CA4E9892"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"43FE147E-B1D1-4BC2-ACC0-85F39674C064"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"D1A63AC0-2B68-46A8-AD96-657C99463E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"B6BD30B7-E182-402B-BE72-6C82DC085872"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4A0C00E2-AD14-46A1-A695-FFE81547303B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"9FC5E48D-95CC-46E9-9491-CA8A5FD9F14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"0C93E46D-FDEA-4B59-8C84-8A3DCC6AB3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"D4633D2E-2CBE-4B92-AD35-ED57C5399ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"7F200FC8-DA2E-4D39-8FF7-423759307DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"75B7341D-B02F-405B-81A0-5F74CFA8F8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"E207B352-D8F8-4E15-9507-D3AD10D56211"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"D0CBA51B-159F-42E9-8A2C-2B9BF1EB7D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.13:*:*:*:*:*:*:*","matchCriteriaId":"C8F01226-D9E6-460C-975A-618932D5F16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.14:*:*:*:*:*:*:*","matchCriteriaId":"5BD98764-741C-4FED-BE4D-446E8E8D31F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.15:*:*:*:*:*:*:*","matchCriteriaId":"4048DF8D-628D-4786-A883-0A1865DEBB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.16:*:*:*:*:*:*:*","matchCriteriaId":"77E7A4E4-940B-43C4-98A2-70F443A59120"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.17:*:*:*:*:*:*:*","matchCriteriaId":"B82A06CD-338D-4095-BC7D-2E38050D388A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B5900E6E-4379-4321-B69D-F9FBD341ACEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E2C56B31-4495-4974-A47F-7D18734C9B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DC8C2E40-DA05-4B50-AB29-398AF71EBECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"ED5E81ED-032F-42B7-9D50-15CADE337AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"ADA12C8C-2E4E-4321-8C45-71DD6A29E0E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4FDD90A4-B50B-4640-ADDE-B75BBC34507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFC3804-991A-4BAF-818E-E321DB21FB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1CE1B4D9-507A-43B2-81F3-77E411ABEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"857FCD47-F720-4273-BF1D-D5DC95ECA6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"1B8FE4AC-6E71-44CF-902D-BACA830C4CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.10:*:*:*:*:*:*:*","matchCriteriaId":"81EE762A-F95F-42CF-BB80-B0EF81A438EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.11:*:*:*:*:*:*:*","matchCriteriaId":"738095D8-8ACE-4CF4-9D97-4228FC686F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1D4634FC-DA4E-4B1D-B1AB-A45D8235780D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.13:*:*:*:*:*:*:*","matchCriteriaId":"0EA83A66-BD39-4560-8EAF-ADF2433EF36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.14:*:*:*:*:*:*:*","matchCriteriaId":"21B1F854-FC98-4DE9-8514-FD52301C5038"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.15:*:*:*:*:*:*:*","matchCriteriaId":"388B4551-AF4C-46D6-840E-D489B05675C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.16:*:*:*:*:*:*:*","matchCriteriaId":"52F9D2E0-C795-4A5A-9398-4630B78FCB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.17:*:*:*:*:*:*:*","matchCriteriaId":"94D176AD-EA34-4DA2-9926-079438030E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.18:*:*:*:*:*:*:*","matchCriteriaId":"B5CF8CA5-0821-49CF-8B8C-2D2D5F63A061"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.19:*:*:*:*:*:*:*","matchCriteriaId":"6A89C5FB-AA8B-41DC-93D5-81E199D73061"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.20:*:*:*:*:*:*:*","matchCriteriaId":"E71E10D0-E7C2-4D14-B685-4FB154B0A865"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.21:*:*:*:*:*:*:*","matchCriteriaId":"05993D31-BC6D-44CD-808C-4A40F998BF0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.22:*:*:*:*:*:*:*","matchCriteriaId":"5560111D-8930-4B70-BD51-25343FBEED1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"66999F57-FF99-419F-BB12-35DC79FCE945"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD1356E-3B43-4C5B-9969-902440918EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"7A7F3209-B376-490B-A761-2CCB6CEE209A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"406C2297-B58D-4623-9E7A-2C438ABBAC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B6AF0DD4-08D4-4726-8A12-E979FF3322B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F98DE75F-84AD-42EE-B9DA-8AFF22D2BF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E3DAE05B-9086-4702-9586-77B34399E1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"DA544013-8FAC-4452-9D38-081C514E2981"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"21DE15C9-3308-4DE0-8048-9B06AF4D7343"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"62CB4968-F331-4653-8B9F-75BA4BB7A6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"3470D075-CCF2-42A1-A8C9-E375FC05FF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"EDA72F88-6799-4E6C-B73C-C92616B04661"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.12:*:*:*:*:*:*:*","matchCriteriaId":"EF17CB71-6E46-4A1E-9EAB-7D2E182D56C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.13:*:*:*:*:*:*:*","matchCriteriaId":"7E7FA486-73CE-4226-86C6-DA8383C5578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.14:*:*:*:*:*:*:*","matchCriteriaId":"B17D2B72-19E2-4DE6-B1E3-F1823E2690BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.15:*:*:*:*:*:*:*","matchCriteriaId":"FAC6922A-03CD-484A-BF40-F8F937428062"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.16:*:*:*:*:*:*:*","matchCriteriaId":"8470C251-2874-4047-A759-F8D5C6D5C755"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.17:*:*:*:*:*:*:*","matchCriteriaId":"332308A1-4BA4-4BC7-8B4B-7463CF98B664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.18:*:*:*:*:*:*:*","matchCriteriaId":"DE7DEA84-27E5-4CF0-AC2A-B128BB5AE199"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.19:*:*:*:*:*:*:*","matchCriteriaId":"455B73D1-E8F1-478C-8CEB-79E4B5F33A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.20:*:*:*:*:*:*:*","matchCriteriaId":"1AC49023-CAD6-4875-BF94-EEC290E8A5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.21:*:*:*:*:*:*:*","matchCriteriaId":"C42BFAF8-5822-4782-B60D-BCB131834419"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.22:*:*:*:*:*:*:*","matchCriteriaId":"BB1FD9EF-A863-48C6-8471-AB1D80B3C1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.23:*:*:*:*:*:*:*","matchCriteriaId":"C4B8A690-81D0-40C4-9301-CF1992C2DA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.24:*:*:*:*:*:*:*","matchCriteriaId":"CC65AE61-426D-4072-90A1-667AD31B73C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.25:*:*:*:*:*:*:*","matchCriteriaId":"66EAFEF2-0FE6-4EE8-B879-79FC24A7F27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0DEEFFF7-DF7C-4641-81A9-1CD64DC29DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2855B3F6-49B6-4D25-BEAC-4D1797D1E100"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6C1F1993-70A2-4104-85AF-3BECB330AB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E955458C-8F5C-4D55-9F78-9E1CB4416F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"866FF7AC-19EA-49E7-B423-9FF57839B580"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1A64C7-B039-4724-B06C-EAC898EB3B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C572E25A-4B44-426D-B637-292A08766D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6D96D806-ED52-4010-9F5F-F84E33C245D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"643FC7D2-FC39-43FA-99E6-805553FE1DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E2B95519-0C9D-473C-912D-E350106DC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DC603E1A-7882-45F0-9E8D-157F191C0FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E4F9321C-B442-4081-8E4A-62BAD95239A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"012A397B-004D-489C-B06D-C0D67E26B1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"392E0C61-7718-4DBC-8F02-6F3C2CBE1783"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D893CD1C-31D7-4F7F-BD0B-BEF75DCB2DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"324AE9D7-C41F-493E-A1AD-FCD869D29D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"68519B1F-F315-4BBD-A4A3-4E1956D81E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"EF745E93-A92E-4AD7-8D42-36E9387C6915"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"30E4B760-417E-45D1-9CE1-AEBC8936BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"BD0DA221-078A-49DC-B0F1-F318FD785664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D72BCA7B-6338-4A7C-AE71-E0B8F6C9F2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"DD8F6AB9-A6C4-443E-A846-EE845BE24F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56C8F7D7-BAAD-4F3A-BA39-44BE0CCADFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EC522377-A6CD-4513-83B4-9ADC15F76B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"55BC4595-5699-4237-BCD7-FD233BA1AECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.25:*:*:*:*:*:*:*","matchCriteriaId":"6EFCC9DB-4AA9-460E-87F0-1F74DEBB104B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"15FAC8F1-CB72-4DBD-9746-372246BEFEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CB9C10B-284E-48CD-A524-1A6BF828AED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F70DD815-1DAA-4025-8C97-32C7D06D8AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A37DA6E-6EB7-429B-ACE0-2B1220BD62C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CA25E8C-9EFA-4A01-A2F0-CD63A39EDD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"41C33F47-0F28-4AE2-A895-82B5E0F4496D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6EEFF35-E903-4651-A4B4-D92FF26A7509"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B44BD172-80FA-4260-BAFB-251A95E8C7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F09116D2-F168-4305-9A1D-88A1D42739A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"558E0B71-F79E-47B5-90CC-9C165BB15507"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"E8D7E102-DD54-43F2-B008-66F7C243477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8066AB8C-1AE6-4DA3-91DB-4BF67DBBA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2A03CB9E-DEFC-4507-A314-5E0824A66462"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E6708D6E-2098-432D-820A-853032BD9A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"42BA346B-F7C6-4EB3-91BD-2CCC2B688AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F2B689AA-2074-4E9A-93BD-F910510A29AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"3EF22E49-B259-4E13-B371-0C0173E534FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE5C0A8F-A502-4BC1-AC8A-45AE1D16371D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D73876B7-A758-40CB-919D-6720AA7B9564"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"84925F68-F440-4677-B3DF-F87EAC39E235"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"CC0A0B3C-C011-4F27-BE8D-5A89BFC93F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"E7792A65-DB6E-49F4-9447-021EA9A82697"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"4EF3B982-B094-4B54-84A2-4CA199EE4E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1F6811F5-DDCA-4AED-9BF9-4C71550A727D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"BF1670DE-C3B6-4EA3-8132-66BBD4CEFAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AE10A1EF-F9CE-4126-9793-FB70A1D512A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7FA4DD6C-1531-420A-B271-EB16EA05470B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"AB6AEA9D-42C8-4C60-86AE-54DB2940A3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"2F221BF0-7B2B-4676-B8F2-2705C05B4034"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"72C395C0-160C-4D8A-A3B6-7E30DD8721EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B17EC5DF-2F00-479B-9775-45DA569BCED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0CC31CBA-10A4-417C-A381-2BB7A68CE0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"65D07800-4CCD-4B98-8D41-778295D1A3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1C4D3BA-781F-4C96-9234-73DB1593C7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4AACDFB6-841E-42A5-AA8D-58E8A38D11D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"FD43D2C5-26D5-41AC-BC20-FACB68D22F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D186867E-18D6-4960-B8BE-A4353D941357"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"23DAAAEB-EB1E-4BCD-B88E-33418E3FD1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8643B45-1CE3-492F-BD82-65801F6C6FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7F009D18-204C-4E6D-9827-9FBA9A4FFBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"158DC9D2-2264-48B6-9116-CE6F0138D7C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A4339B46-E92A-4F7C-A0BA-62D7F7C428DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1A3D5E50-874B-48AE-B7C0-264DA0531847"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"60C0F5A3-DB13-4BAC-B633-7E7F54FE34FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7E28BFB7-FB1A-455E-BE0B-ADDEBFA9B9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A0453F7-380D-4F29-9B54-D47AAAD9FFE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://badlock.org/","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035533","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-47","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/security/CVE-2016-2112.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://badlock.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/security/CVE-2016-2112.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2114","sourceIdentifier":"secalert@redhat.com","published":"2016-04-25T00:59:05.113","lastModified":"2026-06-17T00:43:28.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the \"server signing = mandatory\" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream."},{"lang":"es","value":"La implementación del protocolo SMB1 en Samba 4.x en versiones anteriores a 4.2.11, 4.3.x en versiones anteriores a 4.3.8 y 4.4.x en versiones anteriores a 4.4.2 no reconoce el ajuste \"server signing = mandatory\", lo que permite a atacantes man-in-the-middle suplantar servidores SMB modificando el flujo de datos cliente-servidor."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0DEEFFF7-DF7C-4641-81A9-1CD64DC29DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2855B3F6-49B6-4D25-BEAC-4D1797D1E100"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6C1F1993-70A2-4104-85AF-3BECB330AB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E955458C-8F5C-4D55-9F78-9E1CB4416F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"866FF7AC-19EA-49E7-B423-9FF57839B580"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1A64C7-B039-4724-B06C-EAC898EB3B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C572E25A-4B44-426D-B637-292A08766D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6D96D806-ED52-4010-9F5F-F84E33C245D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"643FC7D2-FC39-43FA-99E6-805553FE1DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E2B95519-0C9D-473C-912D-E350106DC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DC603E1A-7882-45F0-9E8D-157F191C0FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E4F9321C-B442-4081-8E4A-62BAD95239A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"012A397B-004D-489C-B06D-C0D67E26B1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"392E0C61-7718-4DBC-8F02-6F3C2CBE1783"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D893CD1C-31D7-4F7F-BD0B-BEF75DCB2DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"324AE9D7-C41F-493E-A1AD-FCD869D29D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"68519B1F-F315-4BBD-A4A3-4E1956D81E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"EF745E93-A92E-4AD7-8D42-36E9387C6915"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"30E4B760-417E-45D1-9CE1-AEBC8936BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"BD0DA221-078A-49DC-B0F1-F318FD785664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D72BCA7B-6338-4A7C-AE71-E0B8F6C9F2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"DD8F6AB9-A6C4-443E-A846-EE845BE24F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56C8F7D7-BAAD-4F3A-BA39-44BE0CCADFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EC522377-A6CD-4513-83B4-9ADC15F76B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"55BC4595-5699-4237-BCD7-FD233BA1AECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.25:*:*:*:*:*:*:*","matchCriteriaId":"6EFCC9DB-4AA9-460E-87F0-1F74DEBB104B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"15FAC8F1-CB72-4DBD-9746-372246BEFEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CB9C10B-284E-48CD-A524-1A6BF828AED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F70DD815-1DAA-4025-8C97-32C7D06D8AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A37DA6E-6EB7-429B-ACE0-2B1220BD62C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CA25E8C-9EFA-4A01-A2F0-CD63A39EDD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"41C33F47-0F28-4AE2-A895-82B5E0F4496D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6EEFF35-E903-4651-A4B4-D92FF26A7509"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B44BD172-80FA-4260-BAFB-251A95E8C7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F09116D2-F168-4305-9A1D-88A1D42739A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"558E0B71-F79E-47B5-90CC-9C165BB15507"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"E8D7E102-DD54-43F2-B008-66F7C243477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8066AB8C-1AE6-4DA3-91DB-4BF67DBBA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2A03CB9E-DEFC-4507-A314-5E0824A66462"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E6708D6E-2098-432D-820A-853032BD9A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"42BA346B-F7C6-4EB3-91BD-2CCC2B688AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F2B689AA-2074-4E9A-93BD-F910510A29AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"3EF22E49-B259-4E13-B371-0C0173E534FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE5C0A8F-A502-4BC1-AC8A-45AE1D16371D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D73876B7-A758-40CB-919D-6720AA7B9564"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"84925F68-F440-4677-B3DF-F87EAC39E235"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"CC0A0B3C-C011-4F27-BE8D-5A89BFC93F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"E7792A65-DB6E-49F4-9447-021EA9A82697"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"4EF3B982-B094-4B54-84A2-4CA199EE4E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1F6811F5-DDCA-4AED-9BF9-4C71550A727D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"BF1670DE-C3B6-4EA3-8132-66BBD4CEFAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AE10A1EF-F9CE-4126-9793-FB70A1D512A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7FA4DD6C-1531-420A-B271-EB16EA05470B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"AB6AEA9D-42C8-4C60-86AE-54DB2940A3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"2F221BF0-7B2B-4676-B8F2-2705C05B4034"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"72C395C0-160C-4D8A-A3B6-7E30DD8721EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B17EC5DF-2F00-479B-9775-45DA569BCED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0CC31CBA-10A4-417C-A381-2BB7A68CE0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"65D07800-4CCD-4B98-8D41-778295D1A3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1C4D3BA-781F-4C96-9234-73DB1593C7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4AACDFB6-841E-42A5-AA8D-58E8A38D11D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"FD43D2C5-26D5-41AC-BC20-FACB68D22F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D186867E-18D6-4960-B8BE-A4353D941357"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"23DAAAEB-EB1E-4BCD-B88E-33418E3FD1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8643B45-1CE3-492F-BD82-65801F6C6FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7F009D18-204C-4E6D-9827-9FBA9A4FFBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"158DC9D2-2264-48B6-9116-CE6F0138D7C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A4339B46-E92A-4F7C-A0BA-62D7F7C428DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1A3D5E50-874B-48AE-B7C0-264DA0531847"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"60C0F5A3-DB13-4BAC-B633-7E7F54FE34FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7E28BFB7-FB1A-455E-BE0B-ADDEBFA9B9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A0453F7-380D-4F29-9B54-D47AAAD9FFE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://badlock.org/","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/86011","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035533","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-47","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/security/CVE-2016-2114.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://badlock.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/86011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/security/CVE-2016-2114.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2115","sourceIdentifier":"secalert@redhat.com","published":"2016-04-25T00:59:06.113","lastModified":"2026-06-17T00:43:29.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream."},{"lang":"es","value":"Samba 3.x y 4.x en versiones anteriores a 4.2.11, 4.3.x en versiones anteriores a 4.3.8 y 4.4.x en versiones anteriores a 4.4.2 no requiere firmado SMB dentro de una sesión DCERPC sobre ncacn_np, lo que permite a atacantes man-in-the-middle suplantar clientes SMB modificando el flujo de datos cliente-servidor"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216145B7-4716-42F7-90DC-03884ECB2271"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898968E5-577E-4B86-A804-EBEC67157A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:*","matchCriteriaId":"A8CE218B-E64D-41DC-8CFD-9387427B72CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"920EF846-41D1-429D-AF0F-3D7950F93069"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8016DC4F-F410-4401-BDCC-91BE0D44D028"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC94A2CF-85DF-4BB5-8F78-470A3454C3CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"632D2489-3B5E-466E-A6DF-1EF00303869B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9FC116E5-B739-4E18-AA51-FFF59EBCA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D40F682-9F2E-465F-98F7-23E1036C74A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9478CC84-802F-4960-ACAB-3700154E813F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5BEA3806-E33A-49A6-99A4-095B4E543C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"AA7D08FB-30B9-4E42-B831-21A0C095062C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"13E6C8A4-FA17-44EF-A447-C73108540B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"57D5EA00-CC2E-4E56-8297-A3C1CEDBBE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"50E05AD3-C7F0-421D-8C9B-604E553332E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3A53517C-F12D-4D74-A722-5AE23598CEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2BF4A0A7-E176-4009-BAA2-E23B330D91A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:*","matchCriteriaId":"9C2CDC66-8A44-4BEE-9574-FC69C38295A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*","matchCriteriaId":"42EB6115-CC45-4464-8400-D7E3A9402803"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"58B06DAF-869F-481B-965D-70353581A6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FBF1A1D4-39DE-4227-A6E0-7E7817BDCCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"84F0E277-09BD-4FA8-B2A3-7E83AD1656BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"9F260B05-3963-49BF-9D96-EB06722C5483"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"59A7E91B-7B13-47E5-B8E6-CE7D6DC490F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"F002F105-A911-4E56-8630-C287DC527E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:a:*:*:*:*:*:*","matchCriteriaId":"9AD55F6B-F753-41FC-8701-78A7DA556E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:b:*:*:*:*:*:*","matchCriteriaId":"0B63F362-A49C-401F-BE49-C6E1DC03E4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*","matchCriteriaId":"D1936E19-9887-4E53-AA0C-738ABD4B97EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*","matchCriteriaId":"A2206C09-6A4B-4EC4-A206-E48EDF966913"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"0B918306-8743-404D-A035-CC3997ADCC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:a:*:*:*:*:*:*","matchCriteriaId":"81F23C27-76CF-4906-B829-3B4F2E07900E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:b:*:*:*:*:*:*","matchCriteriaId":"EF6C8992-5210-483E-9EED-B7FC1EACA703"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:c:*:*:*:*:*:*","matchCriteriaId":"EAF9C0EA-173A-4B02-9933-09DFAC31398D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*","matchCriteriaId":"43684906-D3AA-40FB-A75D-ED65C1DC9BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*","matchCriteriaId":"62E39538-4811-49DB-97CF-1F018C58BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*","matchCriteriaId":"C85D69FE-AF43-4B0E-A7A9-2D2C16426180"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"86347948-C08F-4F02-89A0-4F4A55CD4BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"A908DA9D-A8BD-46BA-A71F-BFDEC0A1341E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:a:*:*:*:*:*:*","matchCriteriaId":"D87FDC2E-C6D9-4D10-BED6-B10C40232DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:b:*:*:*:*:*:*","matchCriteriaId":"A90CE26E-8993-49BA-91BF-536DBC44CAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:c:*:*:*:*:*:*","matchCriteriaId":"33A9C2ED-355B-4903-ABC3-23C85B494053"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:d:*:*:*:*:*:*","matchCriteriaId":"375BCF42-1A8A-4ACB-8198-FEA471A81B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*","matchCriteriaId":"7CA7905C-51A0-4A56-A6A5-330288613055"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*","matchCriteriaId":"4AE85033-0658-4D60-8C7A-6E2BD63AFDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*","matchCriteriaId":"4600AAA4-834D-4F63-8E9A-88CB555C029E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*","matchCriteriaId":"54FE8D2E-AF0D-4C84-A5BC-2CE6759B534C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"8BFA3B82-9440-49E1-8088-FA22C0B7DD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"0762B1DA-7232-478D-805F-5E2A50F8BEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:a:*:*:*:*:*:*","matchCriteriaId":"C1C6E9D6-2964-4D63-9FCB-B4A02CC21975"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:b:*:*:*:*:*:*","matchCriteriaId":"F8C1CA41-DBEF-46D7-9A94-930315BECACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:c:*:*:*:*:*:*","matchCriteriaId":"F6804F20-3B33-4FAA-ACC3-9658FF0770D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*","matchCriteriaId":"9F22FC74-5999-4158-A253-674BF1C21E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*","matchCriteriaId":"0EEB31C4-5352-4905-8D9E-BD754991F07E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*","matchCriteriaId":"B0BE2AEC-6ACD-422C-AD20-6C034D68C891"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*","matchCriteriaId":"101163D7-D440-43CC-8704-A9614CD8CEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*","matchCriteriaId":"F0E4811D-3387-4838-94A0-1BD7F3C9C3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*","matchCriteriaId":"B69EA9CF-627C-4600-B4EC-10E91DB07E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*","matchCriteriaId":"0AF740A1-0BEC-4E29-9C74-F1F906EF3EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*","matchCriteriaId":"99A8D6D8-A207-498F-8DB2-EB7ED842CE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"70BB5BA1-F499-40FC-80F6-B3CD2F1BB074"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:a:*:*:*:*:*:*","matchCriteriaId":"0FFB13DF-53C5-4DF4-8D47-B40BD532E1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*","matchCriteriaId":"9A973443-C497-41FB-AF47-529AA2906CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"4BEE83D0-8377-49FB-AC7D-3B5E9DB6918B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:a:*:*:*:*:*:*","matchCriteriaId":"49684CD5-4256-47CA-84BC-E319D8973314"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"42F2EB0A-249D-4E81-B459-A88AC60A1D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:a:*:*:*:*:*:*","matchCriteriaId":"574ADE47-94CB-42A2-AE8E-A14FBB0EAFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"EBEA8397-6E23-49FE-9555-39C9599C6362"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"023C2353-750A-42FC-AC7E-115627E74AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F28A8721-CA4A-44E1-B740-0B4610374CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D93572BB-7F00-4137-A079-6FE96CD73F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*","matchCriteriaId":"0F0B13E8-EF18-4A3D-B228-C7FF128D1FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*","matchCriteriaId":"9B843321-9A8D-4541-9E54-58E2978E2437"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*","matchCriteriaId":"FBF36A20-3607-43A8-A4CC-169922BC0327"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*","matchCriteriaId":"EB71265E-60C4-4495-8B66-360E96B76FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:*","matchCriteriaId":"E1DB3DDE-C0F2-485C-B11E-2DD8A91B8CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"44746973-3CFD-4808-9545-755E296EFF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"31E4627C-5D19-4599-B304-D0E4D4193170"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE162A7-969D-44D5-B9ED-764F20F19C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"28DF45AE-DF03-4321-A019-D3BBC16433B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"64D87AD2-89F2-455F-916E-D404E6BD02C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6218AB51-DE71-40F3-8CBC-AF33586D36EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D02F8427-0DCC-48A9-A04F-939571D511E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"FC8A9943-6949-4B0A-9864-8B4696704098"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"4970BB40-085C-4069-B6F1-7E3726F1CFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FA43C063-EBE1-4C61-9C9E-C84C3A594A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6962B6DA-5D78-4702-9546-216971D03F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"39FAD067-8547-41E7-B1BC-74CC55D58AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"787C3CBF-5E4E-4727-950A-D99F15327CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9D4B0684-FDCC-4EE8-AABA-F71204167C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7172A430-F124-4200-88C2-8BE486BA5DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D0EB9DC7-A196-48ED-893B-733E8CDA961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"27D03508-3D54-4D05-A5BC-6F8641B45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F235FA61-ECBB-45C8-A48D-FAF12A5E2EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B0E09D3-68FA-40C9-A478-53707E5F78BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"66D41850-968D-431D-8075-EE9EFF013408"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"873A4A35-2CB0-4D55-B455-19D892776293"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:*","matchCriteriaId":"755DA0DD-6DC3-48D9-98D5-9EA2C59CA0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6680FCFB-CD17-4B4E-B523-A9D969D5F1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:*","matchCriteriaId":"FD90F710-95F0-4AE7-A8C9-0DC5FCA01DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.11:*:*:*:*:*:*:*","matchCriteriaId":"254D9460-899D-4D06-AC47-1914A42FC09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.12:*:*:*:*:*:*:*","matchCriteriaId":"427DA06C-9F5C-4E9A-A39F-22CD5E4F53D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.13:*:*:*:*:*:*:*","matchCriteriaId":"D60CED3E-B7A6-4674-ADD5-A3B047C7D125"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.14:*:*:*:*:*:*:*","matchCriteriaId":"07906A18-FD60-42A5-AC17-21F677EA1762"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.15:*:*:*:*:*:*:*","matchCriteriaId":"A99F7DCF-CBD0-4BC1-9C07-F1CB807614BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.16:*:*:*:*:*:*:*","matchCriteriaId":"1EFC3F99-11F6-496E-BF55-53CF1E012FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C78E2B3A-10C4-4226-A224-8D4AC792B2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EFFCF854-E316-442F-A62F-ACC1CA4E9892"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"43FE147E-B1D1-4BC2-ACC0-85F39674C064"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"D1A63AC0-2B68-46A8-AD96-657C99463E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"B6BD30B7-E182-402B-BE72-6C82DC085872"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4A0C00E2-AD14-46A1-A695-FFE81547303B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"9FC5E48D-95CC-46E9-9491-CA8A5FD9F14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"0C93E46D-FDEA-4B59-8C84-8A3DCC6AB3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"D4633D2E-2CBE-4B92-AD35-ED57C5399ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"7F200FC8-DA2E-4D39-8FF7-423759307DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"75B7341D-B02F-405B-81A0-5F74CFA8F8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"E207B352-D8F8-4E15-9507-D3AD10D56211"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"D0CBA51B-159F-42E9-8A2C-2B9BF1EB7D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.13:*:*:*:*:*:*:*","matchCriteriaId":"C8F01226-D9E6-460C-975A-618932D5F16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.14:*:*:*:*:*:*:*","matchCriteriaId":"5BD98764-741C-4FED-BE4D-446E8E8D31F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.15:*:*:*:*:*:*:*","matchCriteriaId":"4048DF8D-628D-4786-A883-0A1865DEBB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.16:*:*:*:*:*:*:*","matchCriteriaId":"77E7A4E4-940B-43C4-98A2-70F443A59120"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.17:*:*:*:*:*:*:*","matchCriteriaId":"B82A06CD-338D-4095-BC7D-2E38050D388A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B5900E6E-4379-4321-B69D-F9FBD341ACEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E2C56B31-4495-4974-A47F-7D18734C9B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DC8C2E40-DA05-4B50-AB29-398AF71EBECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"ED5E81ED-032F-42B7-9D50-15CADE337AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"ADA12C8C-2E4E-4321-8C45-71DD6A29E0E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4FDD90A4-B50B-4640-ADDE-B75BBC34507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFC3804-991A-4BAF-818E-E321DB21FB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1CE1B4D9-507A-43B2-81F3-77E411ABEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"857FCD47-F720-4273-BF1D-D5DC95ECA6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"1B8FE4AC-6E71-44CF-902D-BACA830C4CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.10:*:*:*:*:*:*:*","matchCriteriaId":"81EE762A-F95F-42CF-BB80-B0EF81A438EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.11:*:*:*:*:*:*:*","matchCriteriaId":"738095D8-8ACE-4CF4-9D97-4228FC686F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1D4634FC-DA4E-4B1D-B1AB-A45D8235780D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.13:*:*:*:*:*:*:*","matchCriteriaId":"0EA83A66-BD39-4560-8EAF-ADF2433EF36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.14:*:*:*:*:*:*:*","matchCriteriaId":"21B1F854-FC98-4DE9-8514-FD52301C5038"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.15:*:*:*:*:*:*:*","matchCriteriaId":"388B4551-AF4C-46D6-840E-D489B05675C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.16:*:*:*:*:*:*:*","matchCriteriaId":"52F9D2E0-C795-4A5A-9398-4630B78FCB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.17:*:*:*:*:*:*:*","matchCriteriaId":"94D176AD-EA34-4DA2-9926-079438030E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.18:*:*:*:*:*:*:*","matchCriteriaId":"B5CF8CA5-0821-49CF-8B8C-2D2D5F63A061"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.19:*:*:*:*:*:*:*","matchCriteriaId":"6A89C5FB-AA8B-41DC-93D5-81E199D73061"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.20:*:*:*:*:*:*:*","matchCriteriaId":"E71E10D0-E7C2-4D14-B685-4FB154B0A865"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.21:*:*:*:*:*:*:*","matchCriteriaId":"05993D31-BC6D-44CD-808C-4A40F998BF0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.5.22:*:*:*:*:*:*:*","matchCriteriaId":"5560111D-8930-4B70-BD51-25343FBEED1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"66999F57-FF99-419F-BB12-35DC79FCE945"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD1356E-3B43-4C5B-9969-902440918EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"7A7F3209-B376-490B-A761-2CCB6CEE209A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"406C2297-B58D-4623-9E7A-2C438ABBAC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B6AF0DD4-08D4-4726-8A12-E979FF3322B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F98DE75F-84AD-42EE-B9DA-8AFF22D2BF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E3DAE05B-9086-4702-9586-77B34399E1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"DA544013-8FAC-4452-9D38-081C514E2981"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"21DE15C9-3308-4DE0-8048-9B06AF4D7343"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"62CB4968-F331-4653-8B9F-75BA4BB7A6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"3470D075-CCF2-42A1-A8C9-E375FC05FF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"EDA72F88-6799-4E6C-B73C-C92616B04661"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.12:*:*:*:*:*:*:*","matchCriteriaId":"EF17CB71-6E46-4A1E-9EAB-7D2E182D56C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.13:*:*:*:*:*:*:*","matchCriteriaId":"7E7FA486-73CE-4226-86C6-DA8383C5578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.14:*:*:*:*:*:*:*","matchCriteriaId":"B17D2B72-19E2-4DE6-B1E3-F1823E2690BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.15:*:*:*:*:*:*:*","matchCriteriaId":"FAC6922A-03CD-484A-BF40-F8F937428062"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.16:*:*:*:*:*:*:*","matchCriteriaId":"8470C251-2874-4047-A759-F8D5C6D5C755"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.17:*:*:*:*:*:*:*","matchCriteriaId":"332308A1-4BA4-4BC7-8B4B-7463CF98B664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.18:*:*:*:*:*:*:*","matchCriteriaId":"DE7DEA84-27E5-4CF0-AC2A-B128BB5AE199"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.19:*:*:*:*:*:*:*","matchCriteriaId":"455B73D1-E8F1-478C-8CEB-79E4B5F33A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.20:*:*:*:*:*:*:*","matchCriteriaId":"1AC49023-CAD6-4875-BF94-EEC290E8A5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.21:*:*:*:*:*:*:*","matchCriteriaId":"C42BFAF8-5822-4782-B60D-BCB131834419"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.22:*:*:*:*:*:*:*","matchCriteriaId":"BB1FD9EF-A863-48C6-8471-AB1D80B3C1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.23:*:*:*:*:*:*:*","matchCriteriaId":"C4B8A690-81D0-40C4-9301-CF1992C2DA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.24:*:*:*:*:*:*:*","matchCriteriaId":"CC65AE61-426D-4072-90A1-667AD31B73C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.6.25:*:*:*:*:*:*:*","matchCriteriaId":"66EAFEF2-0FE6-4EE8-B879-79FC24A7F27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0DEEFFF7-DF7C-4641-81A9-1CD64DC29DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2855B3F6-49B6-4D25-BEAC-4D1797D1E100"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6C1F1993-70A2-4104-85AF-3BECB330AB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E955458C-8F5C-4D55-9F78-9E1CB4416F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"866FF7AC-19EA-49E7-B423-9FF57839B580"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1A64C7-B039-4724-B06C-EAC898EB3B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C572E25A-4B44-426D-B637-292A08766D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6D96D806-ED52-4010-9F5F-F84E33C245D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"643FC7D2-FC39-43FA-99E6-805553FE1DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E2B95519-0C9D-473C-912D-E350106DC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DC603E1A-7882-45F0-9E8D-157F191C0FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E4F9321C-B442-4081-8E4A-62BAD95239A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"012A397B-004D-489C-B06D-C0D67E26B1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"392E0C61-7718-4DBC-8F02-6F3C2CBE1783"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D893CD1C-31D7-4F7F-BD0B-BEF75DCB2DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"324AE9D7-C41F-493E-A1AD-FCD869D29D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"68519B1F-F315-4BBD-A4A3-4E1956D81E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"EF745E93-A92E-4AD7-8D42-36E9387C6915"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"30E4B760-417E-45D1-9CE1-AEBC8936BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"BD0DA221-078A-49DC-B0F1-F318FD785664"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D72BCA7B-6338-4A7C-AE71-E0B8F6C9F2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"DD8F6AB9-A6C4-443E-A846-EE845BE24F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56C8F7D7-BAAD-4F3A-BA39-44BE0CCADFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EC522377-A6CD-4513-83B4-9ADC15F76B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"55BC4595-5699-4237-BCD7-FD233BA1AECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.25:*:*:*:*:*:*:*","matchCriteriaId":"6EFCC9DB-4AA9-460E-87F0-1F74DEBB104B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"15FAC8F1-CB72-4DBD-9746-372246BEFEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CB9C10B-284E-48CD-A524-1A6BF828AED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F70DD815-1DAA-4025-8C97-32C7D06D8AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A37DA6E-6EB7-429B-ACE0-2B1220BD62C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CA25E8C-9EFA-4A01-A2F0-CD63A39EDD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"41C33F47-0F28-4AE2-A895-82B5E0F4496D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6EEFF35-E903-4651-A4B4-D92FF26A7509"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B44BD172-80FA-4260-BAFB-251A95E8C7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F09116D2-F168-4305-9A1D-88A1D42739A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"558E0B71-F79E-47B5-90CC-9C165BB15507"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"E8D7E102-DD54-43F2-B008-66F7C243477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8066AB8C-1AE6-4DA3-91DB-4BF67DBBA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2A03CB9E-DEFC-4507-A314-5E0824A66462"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E6708D6E-2098-432D-820A-853032BD9A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"42BA346B-F7C6-4EB3-91BD-2CCC2B688AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F2B689AA-2074-4E9A-93BD-F910510A29AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"3EF22E49-B259-4E13-B371-0C0173E534FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE5C0A8F-A502-4BC1-AC8A-45AE1D16371D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D73876B7-A758-40CB-919D-6720AA7B9564"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"84925F68-F440-4677-B3DF-F87EAC39E235"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"CC0A0B3C-C011-4F27-BE8D-5A89BFC93F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"E7792A65-DB6E-49F4-9447-021EA9A82697"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"4EF3B982-B094-4B54-84A2-4CA199EE4E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1F6811F5-DDCA-4AED-9BF9-4C71550A727D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"BF1670DE-C3B6-4EA3-8132-66BBD4CEFAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AE10A1EF-F9CE-4126-9793-FB70A1D512A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7FA4DD6C-1531-420A-B271-EB16EA05470B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"AB6AEA9D-42C8-4C60-86AE-54DB2940A3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"2F221BF0-7B2B-4676-B8F2-2705C05B4034"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"72C395C0-160C-4D8A-A3B6-7E30DD8721EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B17EC5DF-2F00-479B-9775-45DA569BCED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0CC31CBA-10A4-417C-A381-2BB7A68CE0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"65D07800-4CCD-4B98-8D41-778295D1A3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1C4D3BA-781F-4C96-9234-73DB1593C7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4AACDFB6-841E-42A5-AA8D-58E8A38D11D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"FD43D2C5-26D5-41AC-BC20-FACB68D22F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D186867E-18D6-4960-B8BE-A4353D941357"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"23DAAAEB-EB1E-4BCD-B88E-33418E3FD1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8643B45-1CE3-492F-BD82-65801F6C6FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7F009D18-204C-4E6D-9827-9FBA9A4FFBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"158DC9D2-2264-48B6-9116-CE6F0138D7C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A4339B46-E92A-4F7C-A0BA-62D7F7C428DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1A3D5E50-874B-48AE-B7C0-264DA0531847"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"60C0F5A3-DB13-4BAC-B633-7E7F54FE34FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7E28BFB7-FB1A-455E-BE0B-ADDEBFA9B9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A0453F7-380D-4F29-9B54-D47AAAD9FFE6"}]}]}],"references":[{"url":"http://badlock.org/","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035533","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-47","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"secalert@redhat.com"},{"url":"https://www.samba.org/samba/security/CVE-2016-2115.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://badlock.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0611.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0612.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0613.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0614.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0618.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0619.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0620.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0624.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2950-5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/history/samba-4.2.10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/latest_news.html#4.4.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.samba.org/samba/security/CVE-2016-2115.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4006","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:00.117","lastModified":"2026-06-17T00:46:43.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause a denial of service (stack memory consumption and application crash) via a crafted packet."},{"lang":"es","value":"epan/proto.c en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 no limita la profundidad de árbol de protocolo, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de memoria de pila y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3585","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-25.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12268","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8dc9551e1d56290e6f7f02cc38b77e1d211fd4a5","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-25.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8dc9551e1d56290e6f7f02cc38b77e1d211fd4a5","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4076","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:01.270","lastModified":"2026-06-17T00:46:50.883","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-ncp2222.inc en el disector NCP en Wireshark 2.0.x en versiones anteriores a 2.0.3 no inicializa correctamente la memoria para patrones de búsqueda, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-19.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11591","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ea8e6955fcff21333c203bc00f69d5025761459b","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ea8e6955fcff21333c203bc00f69d5025761459b","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4077","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:02.490","lastModified":"2026-06-17T00:46:50.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case handling of truncated Tvb data structures, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet."},{"lang":"es","value":"epan/reassemble.c en TShark en Wireshark 2.0.x en versiones anteriores a 2.0.3 confía en el manejo incorrecto de casos especiales de estructuras de datos Tvb truncadas, lo que permite a atacantes remotos provocar una denegación de servicio (uso después de liberación de memoria y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-20.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11799","source":"cve@mitre.org"},{"url":"https://code.google.com/p/google-security-research/issues/detail?id=651","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5b2c1e8f40cee913bd70fcc00284483b3c92fcd","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/google-security-research/issues/detail?id=651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5b2c1e8f40cee913bd70fcc00284483b3c92fcd","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>"}},{"cve":{"id":"CVE-2016-4078","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:03.490","lastModified":"2026-06-17T00:46:51.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted packet, related to epan/dissectors/packet-capwap.c and epan/dissectors/packet-ieee80211.c."},{"lang":"es","value":"El disector IEEE 802.11 en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 no restringe adecuadamente listas de elementos, lo que permite a atacantes remotos provocar una denegación de servicio (recursión profunda y caída de aplicación) a través de un paquete manipulado, relacionado con epan/dissectors/packet-capwap.c y epan/dissectors/packet-ieee80211.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-21.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11824","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12187","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e2745d741ec11f395d41c0aafa24df9dec136399","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e2745d741ec11f395d41c0aafa24df9dec136399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4079","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:04.473","lastModified":"2026-06-17T00:46:51.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-pktc.c en el disector PKTC en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 no verifica identificadores BER, lo que permite a atacantes remotos provocar una denegación de servicio (escritura fuera de límites y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3585","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-22.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12206","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4cdc9eeba58f866bd5f273e9c5b3876857a7a4bf","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4cdc9eeba58f866bd5f273e9c5b3876857a7a4bf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4080","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:05.397","lastModified":"2026-06-17T00:46:51.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-pktc.c en el disector PKTC en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 malinterpreta campos de fecha y hora, lo que permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3585","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-23.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12242","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ad097385c05c370440fb810e67f811398efc0ea0","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=ad097385c05c370440fb810e67f811398efc0ea0","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4081","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:06.350","lastModified":"2026-06-17T00:46:51.483","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-iax2.c en el disector IAX2 en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 utiliza un tipo de dato entero incorrecto, lo que permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3585","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-24.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12260","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=42f299be6abb302f32cec78b1c0812364c9f9285","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=42f299be6abb302f32cec78b1c0812364c9f9285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4082","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:07.443","lastModified":"2026-06-17T00:46:51.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service (out-of-bounds access and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-gsm_cbch.c en el disector GSM CBCH en Wireshark 1.12.x en versiones anteriores a 1.12.11 y 2.0.x en versiones anteriores a 2.0.3 utiliza la variable incorrecta para indexar un array, lo que permite a atacantes remotos provocar una denegación de servicio (acceso fuera de límites y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3585","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-26.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12278","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=0fe522dfc689c3ebd119f2a6775d1f275c5f04d8","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-26.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=0fe522dfc689c3ebd119f2a6775d1f275c5f04d8","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4083","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:08.397","lastModified":"2026-06-17T00:46:51.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not ensure that data is available before array allocation, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-mswsp.c en el disector MS-WSP en Wireshark 2.0.x en versiones anteriores a 2.0.3 no asegura que los datos estén disponibles antes de la asignación de memoria de un array, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-27.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12341","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=66417b17b3570b163a16ca81f71ce5bcb10548d2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=66417b17b3570b163a16ca81f71ce5bcb10548d2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4084","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:09.397","lastModified":"2026-06-17T00:46:51.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a denial of service (integer overflow and application crash) via a crafted packet that triggers an unexpected array size."},{"lang":"es","value":"Error de entero sin signo en epan/dissectors/packet-mswsp.c en el disector MS-WSP en Wireshark 2.0.x en versiones anteriores a 2.0.3 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de entero y caída de aplicación) a través de un paquete manipulado que desencadena un tamaño de array no esperado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-27.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12341","source":"cve@mitre.org"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=66417b17b3570b163a16ca81f71ce5bcb10548d2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=66417b17b3570b163a16ca81f71ce5bcb10548d2","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/190.html\">CWE-190: Integer Overflow or Wraparound</a>"}},{"cve":{"id":"CVE-2016-4085","sourceIdentifier":"cve@mitre.org","published":"2016-04-25T10:59:10.380","lastModified":"2026-06-17T00:46:51.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long string in a packet."},{"lang":"es","value":"Desbordamiento de buffer basado en pila en epan/dissectors/packet-ncp2222.inc en el disector NCP en Wireshark 1.12.x en versiones anteriores a 1.12.11 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente tener otro impacto no especificado a través de una cadena larga en un paquete."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3585","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/87467","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035685","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-28.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12293","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=99efcb0f5aeeb4b2179e88c7a4233022aaeecf0b","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/87467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-28.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=99efcb0f5aeeb4b2179e88c7a4233022aaeecf0b","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-1339","sourceIdentifier":"security@ubuntu.com","published":"2016-04-27T17:59:00.117","lastModified":"2026-06-17T00:22:13.473","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact by opening /dev/cuse many times."},{"lang":"es","value":"Fuga de memoria en la función cuse_channel_release en fs/fuse/cuse.c en el kernel de Linux en versiones anteriores a 4.4 permite a usuarios locales provocar una denegación de servicio (consumo de memoria) o posiblemente tener otro impacto no especificado abriendo /dev/cuse muchas veces."}],"affected":[{"source":"security@ubuntu.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.6","matchCriteriaId":"2B389602-4271-4CF2-BA64-4B0DAD8AB4A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"B942E0F5-7FDC-4AE5-985D-25F4EA7406F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11:sp4:*:*:*:*:*:*","matchCriteriaId":"BFF56CE7-91EF-4FF9-B306-5F00249D9FEA"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2c5816b4beccc8ba709144539f6fdd764f8fa49c","source":"security@ubuntu.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"security@ubuntu.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"security@ubuntu.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/02/13","source":"security@ubuntu.com","tags":["Patch"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=969356","source":"security@ubuntu.com","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314331","source":"security@ubuntu.com","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/2c5816b4beccc8ba709144539f6fdd764f8fa49c","source":"security@ubuntu.com","tags":["Patch","Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1339","source":"security@ubuntu.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2c5816b4beccc8ba709144539f6fdd764f8fa49c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/02/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=969356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/2c5816b4beccc8ba709144539f6fdd764f8fa49c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7515","sourceIdentifier":"secalert@redhat.com","published":"2016-04-27T17:59:01.100","lastModified":"2026-06-17T00:32:40.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device that lacks endpoints."},{"lang":"es","value":"La función aiptek_probe en drivers/input/tablet/aiptek.c en el Kernel de Linux en versiones anteriores a 4.4 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de un dispositivo USB manipulado que carece de dispositivos finales."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4","matchCriteriaId":"311A4477-1B05-4B33-8886-88EF75FEB5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc1:*:*:*:*:*:*","matchCriteriaId":"E425B7E4-0104-4CF8-A874-4CAF3273BCDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc2:*:*:*:*:*:*","matchCriteriaId":"C066AC79-4021-4414-A9F2-6B75C2D62773"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc3:*:*:*:*:*:*","matchCriteriaId":"A8FD5845-6A12-42D1-B59F-C3F8AED2EFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc4:*:*:*:*:*:*","matchCriteriaId":"7B37BB89-774E-43E3-B676-BC19C14B1823"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc5:*:*:*:*:*:*","matchCriteriaId":"48D4FDF4-7ECF-4B68-87F9-58E3D8E6181B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc6:*:*:*:*:*:*","matchCriteriaId":"5DE43D99-452A-43FD-A459-B33D07B2CA7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc7:*:*:*:*:*:*","matchCriteriaId":"FF58DB97-7EA1-4528-AF9D-DAB0D66641DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.4:rc8:*:*:*:*:*:*","matchCriteriaId":"AD811782-D76C-4CC9-9F00-BFE7E258362F"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e20cf2bce122ce9262d6034ee5d5b76fbb92f96","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84288","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285326","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/8e20cf2bce122ce9262d6034ee5d5b76fbb92f96","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7515","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39544/","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e20cf2bce122ce9262d6034ee5d5b76fbb92f96","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/84288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/8e20cf2bce122ce9262d6034ee5d5b76fbb92f96","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39544/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2015-8816","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:03.147","lastModified":"2026-06-17T00:35:18.487","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device."},{"lang":"es","value":"La función hub_activate en drivers/usb/core/hub.c en el Kernel de Linux en versiones anteriores a 4.3.5 no mantiene correctamente una estructura de datos hub-interface, lo que permite a atacantes físicamente próximos provocar una denegación de servicio (acceso a memoria no válido y caída de sistema) o posiblemente tener otro impacto no especificado desenchufando un dispositivo hub USB."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"B942E0F5-7FDC-4AE5-985D-25F4EA7406F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12:*:*:*:*:*:*:*","matchCriteriaId":"0441632F-40BF-432B-BB1C-6396C726C4F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11:sp4:*:*:*:*:*:*","matchCriteriaId":"BFF56CE7-91EF-4FF9-B306-5F00249D9FEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5AB3CAA1-C20C-4A86-841E-EC0858164D7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11:extra:*:*:*:*:*:*","matchCriteriaId":"4B24E780-3254-4577-BCFF-7FBB6D97C780"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"095856BE-4E55-4FEA-BCAC-352C29083545"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"3.2.76","matchCriteriaId":"DAEB7909-63A6-487B-B3C6-4B5A1A73D696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3","versionEndExcluding":"3.4.113","matchCriteriaId":"9A93F019-B0C0-4723-869E-C715F15E11C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"3.10.103","matchCriteriaId":"B41219F0-BE17-4FE0-98B0-D250A76244A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.11","versionEndExcluding":"3.12.58","matchCriteriaId":"24C0DC94-1A70-4985-A5F2-8F517C2DC755"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"3.14.76","matchCriteriaId":"F973F317-7CFF-484A-9B00-6957860C64FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15","versionEndExcluding":"3.16.35","matchCriteriaId":"7DC4BA70-B111-4D2E-BC78-6601CED68F08"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.17","versionEndExcluding":"3.18.27","matchCriteriaId":"B1FF53C9-85AA-4BB1-A0B3-48E1C4FCFD86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19","versionEndExcluding":"4.1.17","matchCriteriaId":"08D67669-B62A-4BA4-BA91-EFFD80451D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"4.3.5","matchCriteriaId":"07D57C6F-728C-438C-A961-61AACA53212E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_live_patching:12:-:*:*:*:*:*:*","matchCriteriaId":"3FA7DD36-7B56-4749-8850-C351593BEB55"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*","matchCriteriaId":"B2F3699A-38E4-4E9D-9414-411F71D9E371"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e50293ef9775c5f1cf3fcc093037dd6a8c5684ea","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/23/5","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/83363","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311589","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/e50293ef9775c5f1cf3fcc093037dd6a8c5684ea","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e50293ef9775c5f1cf3fcc093037dd6a8c5684ea","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/23/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/83363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/e50293ef9775c5f1cf3fcc093037dd6a8c5684ea","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}],"evaluatorComment":"CWE-476: NULL Pointer Dereference"}},{"cve":{"id":"CVE-2015-8844","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:04.147","lastModified":"2026-06-17T00:35:21.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application."},{"lang":"es","value":"La implementación de signal en el Kernel de Linux en versiones anteriores a 4.3.5 sobre plataformas powerpc no verifica que exista un MSR con los bits S y T establecidos, lo que permite a usuarios locales provocar una denegación de servicio (excepción TM Bad Thing exception y pánico) a través de una aplicación manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.4","matchCriteriaId":"FB73CB50-4648-4986-92D3-7B39CFE1204C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d2b9d2a5ad5ef04ff978c9923d19730cb05efd55","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/13/1","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035594","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326540","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/d2b9d2a5ad5ef04ff978c9923d19730cb05efd55","source":"cve@mitre.org"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d2b9d2a5ad5ef04ff978c9923d19730cb05efd55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/d2b9d2a5ad5ef04ff978c9923d19730cb05efd55","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8845","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:05.130","lastModified":"2026-06-17T00:35:21.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim call, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application."},{"lang":"es","value":"La función tm_reclaim_thread en arch/powerpc/kernel/process.c en el Kernel de Linux en versiones anteriores a 4.4.1 sobre plataformas powerpc no asegura que exista el modo TM suspend antes de proceder con una llamada tm_reclaim, lo que permite a usuarios locales provocar una denegación de servicio (excepción TM Bad Thing y pánico) a través de una aplicación manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"8B458ACF-17C3-4551-9F11-8D02B6D52B7C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C9FC685E-4188-4517-BE64-79C86AC6700A"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"FE356E03-FE6E-4145-8A30-BD7DEF074B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"863D677A-F877-48B5-B3D4-8B6793BB93AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"3C171088-A361-4950-A397-BB4FD83DBB68"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"73424219-E302-4E65-B6F9-225C537EF284"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7f821fc9c77a9b01fe7b1d6e72717b33d8d64142","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/13/1","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035594","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326540","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/7f821fc9c77a9b01fe7b1d6e72717b33d8d64142","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7f821fc9c77a9b01fe7b1d6e72717b33d8d64142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/7f821fc9c77a9b01fe7b1d6e72717b33d8d64142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0774","sourceIdentifier":"secalert@redhat.com","published":"2016-04-27T17:59:06.117","lastModified":"2026-06-17T00:38:12.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an \"I/O vector array overrun.\" NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805."},{"lang":"es","value":"Las implementaciones (1) pipe_read y (2) pipe_write en fs/pipe.c en un determinado backport del kernel de Linux en el paquete linux en versiones anteriores a 3.2.73-2+deb7u3 sobre Debian wheezy y el paquete kernel en versiones anteriores a 3.10.0-229.26.2 sobre Red Hat Enterprise Linux (RHEL) 7.1 no considera correctamente los efectos laterales de llamadas __copy_to_user_inatomic y __copy_from_user_inatomic fallidas, lo que permite a usuarios locales provocar una denegación de servicio (caída de sistema) o posiblemente obtener prvilegios a través de una aplicación manipulada, también conocido como un \"I/O vector array overrun\". NOTA: esta vulnerabilidad existe debido a una solución incorrecta para CVE-2015-1805."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:C","baseScore":5.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":7.8,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0494.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0617.html","source":"secalert@redhat.com"},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/84126","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303961","source":"secalert@redhat.com"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-0774","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0494.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0617.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-0774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2085","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:07.977","lastModified":"2026-06-17T00:43:24.553","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack."},{"lang":"es","value":"La función evm_verify_hmac en security/integrity/evm/evm_main.c en el kernel de Linux en versiones anteriores a 4.5 no copia correctamente los datos, lo que facilita a usuarios locales falsificar los valores MAC a través de un ataque de tiempo side-chanel."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.8","matchCriteriaId":"3E43C27F-72D6-4615-8337-67245A069FFD"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=613317bd212c585c20796c10afe5daaa95d4b0a1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2946-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2946-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2947-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2947-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2947-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2949-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324867","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/613317bd212c585c20796c10afe5daaa95d4b0a1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-2085.html","source":"cve@mitre.org"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-2085","source":"cve@mitre.org"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=613317bd212c585c20796c10afe5daaa95d4b0a1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2946-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2946-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2947-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2947-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2947-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2949-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/613317bd212c585c20796c10afe5daaa95d4b0a1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-2085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-2085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2184","sourceIdentifier":"secalert@redhat.com","published":"2016-04-27T17:59:09.867","lastModified":"2026-06-17T00:43:37.420","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor."},{"lang":"es","value":"La función create_fixed_stream_quirk en sound/usb/quirks.c en el controlador snd-usb-audio en el kernel de Linux en versiones anteriores a 4.5.1 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL o doble libre y caída de sistema) a través de un valor de dispositivo final manipulado en un dispositivo USB descriptor."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"F61E0DB9-4FAB-4B47-91DA-A0FAF09E3747"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f886ca12765d20124bd06291c82951fd49a33be","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/bugtraq/2016/Mar/102","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/88","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/89","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/84340","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317012","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/0f886ca12765d20124bd06291c82951fd49a33be","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://source.android.com/security/bulletin/2016-11-01.html","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/39555/","source":"secalert@redhat.com"},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f886ca12765d20124bd06291c82951fd49a33be","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/Mar/102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/88","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/89","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/0f886ca12765d20124bd06291c82951fd49a33be","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://source.android.com/security/bulletin/2016-11-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39555/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-2383","sourceIdentifier":"security@debian.org","published":"2016-04-27T17:59:10.943","lastModified":"2026-06-17T00:43:56.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions."},{"lang":"es","value":"La función adjust_branches en kernel/bpf/verifier.c en el kernel de Linux en versiones anteriores a 4.5 no tiene en cuenta el delta en el caso de salto de retroceso, lo que permite a usuarios locales obtener información sensible del kernel de memoria creando un filtro de paquetes y posteriormente cargando instrucciones BPF manipuladas."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5.0","matchCriteriaId":"8B6177A4-8E9B-448D-A6C1-1F88863DE391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"2BEB8150-FFE5-47FA-A056-9029F00744AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"1D74F82A-BF09-477E-A12B-6E8ED832486E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"57CCE12F-9DF0-4378-ABAA-BF94A361E569"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1b14d27ed0965838350f1377ff97c93ee383492","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/14/1","source":"security@debian.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2947-1","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2947-2","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2947-3","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308452","source":"security@debian.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/a1b14d27ed0965838350f1377ff97c93ee383492","source":"security@debian.org","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1b14d27ed0965838350f1377ff97c93ee383492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/14/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2947-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2947-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2947-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/a1b14d27ed0965838350f1377ff97c93ee383492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2384","sourceIdentifier":"security@debian.org","published":"2016-04-27T17:59:11.927","lastModified":"2026-06-17T00:43:56.473","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (panic) or possibly have unspecified other impact via vectors involving an invalid USB descriptor."},{"lang":"es","value":"Vulnerabilidad de liberación doble en la función snd_usbmidi_create en sound/usb/midi.c en el kernel de Linux en versiones anteriores a 4.5 permite a atacantes físicamente próximos causar una denegación de servicio (pánico) o posiblemente tener otro impacto no especificado a través de vectores que implican un descriptor USB inválido."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.8","matchCriteriaId":"3E43C27F-72D6-4615-8337-67245A069FFD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5AB3CAA1-C20C-4A86-841E-EC0858164D7D"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07d86ca93db7e5cdf4743564d98292042ec21af7","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"security@debian.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"security@debian.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"security@debian.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0817.html","source":"security@debian.org"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/14/2","source":"security@debian.org"},{"url":"http://www.securityfocus.com/bid/83256","source":"security@debian.org"},{"url":"http://www.securitytracker.com/id/1035072","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2928-1","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2928-2","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"security@debian.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308444","source":"security@debian.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/07d86ca93db7e5cdf4743564d98292042ec21af7","source":"security@debian.org","tags":["Patch"]},{"url":"https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384","source":"security@debian.org"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07d86ca93db7e5cdf4743564d98292042ec21af7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0817.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/14/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2928-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2928-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/07d86ca93db7e5cdf4743564d98292042ec21af7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/415.html\">CWE-415: Double Free</a>"}},{"cve":{"id":"CVE-2016-2543","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:12.913","lastModified":"2026-06-17T00:44:15.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The snd_seq_ioctl_remove_events function in sound/core/seq/seq_clientmgr.c in the Linux kernel before 4.4.1 does not verify FIFO assignment before proceeding with FIFO clearing, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted ioctl call."},{"lang":"es","value":"La función snd_seq_ioctl_remove_events en sound/core/seq/seq_clientmgr.c en el kernel de Linux en versiones anteriores a 4.4.1 no verifica la asignación FIFO antes de proceder con la limpieza FIFO, lo que permite a usuarios locales causar una denegación de servicio (referencia a puntero NULL y OOPS) a través de una llamada ioctl manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"8B458ACF-17C3-4551-9F11-8D02B6D52B7C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=030e2c78d3a91dd0d27fef37e91950dde333eba1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/83377","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035304","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311554","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/030e2c78d3a91dd0d27fef37e91950dde333eba1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=030e2c78d3a91dd0d27fef37e91950dde333eba1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/030e2c78d3a91dd0d27fef37e91950dde333eba1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-2544","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:13.897","lastModified":"2026-06-17T00:44:15.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the queue_delete function in sound/core/seq/seq_queue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service (use-after-free and system crash) by making an ioctl call at a certain time."},{"lang":"es","value":"Condición de carrera en la función queue_delete en sound/core/seq/seq_queue.c en el kernel de Linux en versiones anteriores a 4.4.1 permite a usuarios locales causar una denegación de servicio (uso después de liberación de memoria y caída del sistema) al realizar una llamada ioctl en un momento determinado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"8B458ACF-17C3-4551-9F11-8D02B6D52B7C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3567eb6af614dac436c4b16a8d426f9faed639b3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/83380","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035305","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311558","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/3567eb6af614dac436c4b16a8d426f9faed639b3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3567eb6af614dac436c4b16a8d426f9faed639b3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/3567eb6af614dac436c4b16a8d426f9faed639b3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2545","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:15.023","lastModified":"2026-06-17T00:44:15.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service (race condition and system crash) via a crafted ioctl call."},{"lang":"es","value":"La función snd_timer_interrupt en sound/core/timer.c en el kernel de Linux en versiones anteriores a 4.4.1 no mantiene adecuadamente una cierta lista enlazada, lo que permite a usuarios locales causar una denegación de servicio (condición de carrera y caída del sistema) a través de una llamada ioctl manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"8B458ACF-17C3-4551-9F11-8D02B6D52B7C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee8413b01045c74340aa13ad5bdf905de32be736","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/83381","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035296","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311560","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/ee8413b01045c74340aa13ad5bdf905de32be736","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee8413b01045c74340aa13ad5bdf905de32be736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/83381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/ee8413b01045c74340aa13ad5bdf905de32be736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2546","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:16.007","lastModified":"2026-06-17T00:44:16.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service (race condition, use-after-free, and system crash) via a crafted ioctl call."},{"lang":"es","value":"sound/core/timer.c en el kernel de Linux en versiones anteriores a 4.4.1 utiliza un tipo incorrecto de exclusión mutua, lo que permite a usuarios locales causar una denegación de servicio (condición de carrera, uso después de liberación de memoria y caída del sistema) a través de una llamada ioctl manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"8B458ACF-17C3-4551-9F11-8D02B6D52B7C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=af368027a49a751d6ff4ee9e3f9961f35bb4fede","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/83384","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035301","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311564","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/af368027a49a751d6ff4ee9e3f9961f35bb4fede","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=af368027a49a751d6ff4ee9e3f9961f35bb4fede","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/83384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/af368027a49a751d6ff4ee9e3f9961f35bb4fede","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-2547","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:17.100","lastModified":"2026-06-17T00:44:16.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not consider slave timer instances, which allows local users to cause a denial of service (race condition, use-after-free, and system crash) via a crafted ioctl call."},{"lang":"es","value":"sound/core/timer.c en el kernel de Linux en versiones anteriores a 4.4.1 emplea un enfoque de bloqueo que no considera los casos de temporizador de esclavos, lo que permite a usuarios locales causar una denegación de servicio (condición de carrera, uso después de liberación de memoria y caída del sistema) a través de una llamada ioctl manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"8B458ACF-17C3-4551-9F11-8D02B6D52B7C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5a663aa426f4884c71cd8580adae73f33570f0d","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/83378","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035298","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311566","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/b5a663aa426f4884c71cd8580adae73f33570f0d","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5a663aa426f4884c71cd8580adae73f33570f0d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/83378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/b5a663aa426f4884c71cd8580adae73f33570f0d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2548","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:18.070","lastModified":"2026-06-17T00:44:16.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service (system crash) via a crafted ioctl call, related to the (1) snd_timer_close and (2) _snd_timer_stop functions."},{"lang":"es","value":"sound/core/timer.c en el kernel de Linux en versiones anteriores a 4.4.1 conserva ciertas listas enlazadas después de una acción de cierre o parada, lo que permite a usuarios locales causar una denegación de servicio (caída del sistema) a través de una llamada ioctl manipulada, relacionada con las funciones (1) snd_timer_close y (2) _snd_timer_stop."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"8B458ACF-17C3-4551-9F11-8D02B6D52B7C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5a663aa426f4884c71cd8580adae73f33570f0d","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/83383","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035306","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311568","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/b5a663aa426f4884c71cd8580adae73f33570f0d","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5a663aa426f4884c71cd8580adae73f33570f0d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/b5a663aa426f4884c71cd8580adae73f33570f0d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2549","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:18.990","lastModified":"2026-06-17T00:44:16.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service (deadlock) via a crafted ioctl call."},{"lang":"es","value":"sound/core/hrtimer.c en el kernel de Linux en versiones anteriores a 4.4.1 no previene el acceso a la devolución de llamadas recursivas, lo que permite a usuarios locales causar una denegación de servicio (punto muerto) a través de una llamada ioctl manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"8B458ACF-17C3-4551-9F11-8D02B6D52B7C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2ba1fe7a06d3624f9a7586d672b55f08f7c670f3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/83382","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311570","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/2ba1fe7a06d3624f9a7586d672b55f08f7c670f3","source":"cve@mitre.org"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2ba1fe7a06d3624f9a7586d672b55f08f7c670f3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2931-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/2ba1fe7a06d3624f9a7586d672b55f08f7c670f3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2550","sourceIdentifier":"security@debian.org","published":"2016-04-27T17:59:19.977","lastModified":"2026-06-17T00:44:16.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312."},{"lang":"es","value":"El kernel de Linux en versiones anteriores a 4.5 permite a usuarios locales eludir los límites del archivo descriptor y causar una denegación de servicio (consumo de memoria) mediante el aprovechamiento del incorrecto seguimiento de la propiedad del descriptor y enviando cada descriptor a través de un socket UNIX antes de cerrarlo. NOTA: esta vulnerabilidad existe debido a una solución incorrecta para CVE-2013-4312."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.8","matchCriteriaId":"3E43C27F-72D6-4615-8337-67245A069FFD"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=415e3d3e90ce9e18727e8843ae343eda5a58fad6","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/23/2","source":"security@debian.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2946-1","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2946-2","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2947-1","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2947-2","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2947-3","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-2949-1","source":"security@debian.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311517","source":"security@debian.org"},{"url":"https://github.com/torvalds/linux/commit/415e3d3e90ce9e18727e8843ae343eda5a58fad6","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=415e3d3e90ce9e18727e8843ae343eda5a58fad6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/23/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2946-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2946-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2947-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2947-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2947-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2949-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/415e3d3e90ce9e18727e8843ae343eda5a58fad6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2782","sourceIdentifier":"secalert@redhat.com","published":"2016-04-27T17:59:20.960","lastModified":"2026-06-17T00:44:23.333","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a (1) bulk-in or (2) interrupt-in endpoint."},{"lang":"es","value":"La función treo_attach en drivers/usb/serial/visor.c en el kernel de Linux en versiones anteriores a 4.5 permite a atacantes físicamente próximos causar una denegación de servicio (referencia a puntero NULL y caída del sistema) o posiblemente tener otro impacto no especificado mediante la inserción de un dispositivo USB que carece de punto final en (1) bulk-in o (2) interrupt-in."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5.0","matchCriteriaId":"8B6177A4-8E9B-448D-A6C1-1F88863DE391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"2BEB8150-FFE5-47FA-A056-9029F00744AA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:*","matchCriteriaId":"D5900A25-FDD7-4900-BF7C-F3ECCB714D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"F892F1B0-514C-42F7-90AE-12ACDFDC1033"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_module_for_public_cloud:12:*:*:*:*:*:*:*","matchCriteriaId":"1B8F4626-6942-4A79-BF25-C8AD33A82034"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp4:*:*:*:*:*:*","matchCriteriaId":"99A38379-DBD3-4BF6-9A8F-95A3F553AD02"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"18D823E3-E1F3-4A15-A9C7-1AB61C1B6703"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"CB6476C7-03F2-4939-AB85-69AA524516D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:*","matchCriteriaId":"9DFA18B6-2642-470A-A350-68947529EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"ED540469-C4DD-485D-9B89-6877B2A74217"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cac9b50b0d75a1d50d6c056ff65c005f3224c8e0","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/28/9","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312670","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/cac9b50b0d75a1d50d6c056ff65c005f3224c8e0","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39539/","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cac9b50b0d75a1d50d6c056ff65c005f3224c8e0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/28/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2929-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2929-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2932-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/cac9b50b0d75a1d50d6c056ff65c005f3224c8e0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39539/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-2847","sourceIdentifier":"secalert@redhat.com","published":"2016-04-27T17:59:21.947","lastModified":"2026-06-17T00:44:34.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes."},{"lang":"es","value":"fs/pipe.c en el kernel de Linux antes de 4.5 no limita la cantidad de datos no leídos en las tuberías, lo que permite a los usuarios locales provocar una denegación de servicio (consumo de memoria) creando muchas tuberías con tamaños no predeterminados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.8","matchCriteriaId":"3E43C27F-72D6-4615-8337-67245A069FFD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=759c01142a5d0f364a462346168a56de28a80f52","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0217.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/01/3","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83870","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2946-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2946-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2947-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2947-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2947-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2949-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313428","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/759c01142a5d0f364a462346168a56de28a80f52","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=759c01142a5d0f364a462346168a56de28a80f52","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0217.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/01/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2946-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2946-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2947-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2947-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2947-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2948-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2949-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2967-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/759c01142a5d0f364a462346168a56de28a80f52","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3139","sourceIdentifier":"security@opentext.com","published":"2016-04-27T17:59:24.993","lastModified":"2026-06-17T00:45:10.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor."},{"lang":"es","value":"La función wacom_probe en drivers/input/tablet/wacom_sys.c en el kernel de Linux en versiones anteriores a 3.17 permite a atacantes físicamente próximos causar una denegación de servicio (referencia a puntero NULL y caída del sistema) a través de un valor de dispositivo final manipulado en un dispositivo USB descriptor."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.16.7","matchCriteriaId":"7C3C488C-9D3E-4C02-BA67-566C975A97AE"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=471d17148c8b4174ac5f5283a73316d12c4379bc","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283375","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283377","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316993","source":"security@opentext.com"},{"url":"https://github.com/torvalds/linux/commit/471d17148c8b4174ac5f5283a73316d12c4379bc","source":"security@opentext.com"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-3139","source":"security@opentext.com"},{"url":"https://www.exploit-db.com/exploits/39538/","source":"security@opentext.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=471d17148c8b4174ac5f5283a73316d12c4379bc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/471d17148c8b4174ac5f5283a73316d12c4379bc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-3139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39538/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3156","sourceIdentifier":"cve@mitre.org","published":"2016-04-27T17:59:26.430","lastModified":"2026-06-17T00:45:12.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large number of IP addresses."},{"lang":"es","value":"La implementación IPv4 en el kernel de Linux en versiones anteriores a 4.5.2 no maneja adecuadamente la destrucción de objetos de dispositivo, lo que permite a usuarios del SO invitado provocar una denegación de servicio (corte de la red del sistema operativo anfitrión) disponiendo un gran número de direcciones IP."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.1","matchCriteriaId":"6498A032-754F-41B0-A8C8-4EBB71ABEEE2"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbd40ea0180a2d328c5adc61414dc8bab9335ce2","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/15/3","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/84428","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318172","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/fbd40ea0180a2d328c5adc61414dc8bab9335ce2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbd40ea0180a2d328c5adc61414dc8bab9335ce2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/15/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/fbd40ea0180a2d328c5adc61414dc8bab9335ce2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0211","sourceIdentifier":"psirt@us.ibm.com","published":"2016-04-28T01:59:00.723","lastModified":"2026-06-17T00:37:07.593","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted DRDA message."},{"lang":"es","value":"IBM DB2 9.7 hasta la versión FP11, 9.8 y 10.1 hasta la versión FP5, y 10.5 hasta la versión FP7 en Linux, UNIX y Windows permite a usuarios remotos autenticados causar una denegación de servicio (caída de demonio) a través de un mensaje DRDA manipulado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8:*:*:*:*:*:*:*","matchCriteriaId":"D72D43DB-9A92-4E12-853B-F5FC9421D5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"025FA405-0FD2-4B19-8FA4-15581085BD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"F425C545-39CD-483C-97A3-BE0DC3EE63DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise:*:*:*","matchCriteriaId":"6A6A7680-D883-414F-965B-1D6136760CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8:*:*:*:express:*:*:*","matchCriteriaId":"76107CFE-EB32-4AF6-9AF9-F16238F9C671"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8:*:*:*:workgroup:*:*:*","matchCriteriaId":"7D1225B0-DBFF-4A13-93CB-1B64AF9ACE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C4DF59-244A-49C5-80EB-C100C417071A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.1:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"84079674-4B7F-4D57-93FC-7AA5F3AD9BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.1:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"CEF1999A-DA76-4744-B1A2-EDE81D407B22"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"4841744E-1DF6-46FD-A3D0-9AE31A6F7068"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.1:*:*:*:express:*:*:*","matchCriteriaId":"2D95A491-47B7-442C-BF5B-253FA282BFD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.1:*:*:*:workgroup:*:*:*","matchCriteriaId":"FA799CDD-705E-477E-A9B8-989F73A2EDB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29177AE5-CC52-4EB3-8F76-AFCDFA4829AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.2:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"FA21D7B5-AFC6-419B-A364-E7E0E192EFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.2:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"C772737A-44D3-4C1A-B160-A855919A50EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"A3EE94A4-B2A8-4D21-85FB-A31B7BCBF94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.2:*:*:*:express:*:*:*","matchCriteriaId":"313EDF08-82CF-4E39-9C45-2BF2CC687291"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.2:*:*:*:workgroup:*:*:*","matchCriteriaId":"EA759A71-95FC-409F-991E-ECC59276A905"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"734E79E6-4A83-4CBF-B8B3-2D6D4491728E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.3:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"9108E136-6060-48A5-9067-E7BAE3411C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.3:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"02BAE3AF-01D9-4212-BB76-A6239AA515CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.3:*:*:*:enterprise:*:*:*","matchCriteriaId":"2038DE46-2342-40CD-A31A-5B62BA4876A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.3:*:*:*:express:*:*:*","matchCriteriaId":"D45FC46A-DBA8-4751-BE20-C8A69B527B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.3:*:*:*:workgroup:*:*:*","matchCriteriaId":"90E100DE-FEA9-4EB5-B866-09CDB3C23A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3631F758-5C8F-4D24-81C1-D6146B0209CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.4:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"FFBB874F-C6C4-446B-A7A0-AFD5FE37E3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.4:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"6CA061B4-7BEE-4647-99AB-969684979DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.4:*:*:*:enterprise:*:*:*","matchCriteriaId":"DE56C1A2-C5E6-4C5D-851B-C9C24D5D5295"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.4:*:*:*:express:*:*:*","matchCriteriaId":"B617F85F-4549-4157-902A-2AADE0814DA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.4:*:*:*:workgroup:*:*:*","matchCriteriaId":"59E54322-ACEE-4758-95E7-9C04705A4376"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3CB6E617-98EA-4944-9211-FFEE9E50FE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.5:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"04FF362F-CF7A-491F-B706-E337897DB008"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.5:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"DBB5F25C-8E9B-4B78-B004-86CAB7C3D1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"193025CB-2ABD-4E56-9597-8AF347D4A69A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.5:*:*:*:express:*:*:*","matchCriteriaId":"53C3D7FF-1A5F-4C8F-9AC9-F207CC62BC2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.8.0.5:*:*:*:workgroup:*:*:*","matchCriteriaId":"58C46DEA-F501-480B-A587-836CEC7AC658"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8:*:*:*:application_server:*:*:*","matchCriteriaId":"75EEC46D-5DCC-4F28-9E85-8CDD6F9A95BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8:*:*:*:enterprise:*:*:*","matchCriteriaId":"04B08EA1-8DA2-4374-8C64-5266A3ED0163"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8:*:*:*:unlimited:*:*:*","matchCriteriaId":"764271F0-8051-4442-85D7-4C79CE2269D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.1:*:*:*:application_server:*:*:*","matchCriteriaId":"77A5180A-59A4-419A-8C89-A128F18886FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"8484116F-FE56-4ECA-93AB-17C3ADCE109D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.1:*:*:*:unlimited:*:*:*","matchCriteriaId":"D51C4875-E598-4048-B212-93561A1CA16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.2:*:*:*:application_server:*:*:*","matchCriteriaId":"3A67B13B-C67C-4E14-AD6E-584DA4215002"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"601109C4-81B4-4D1D-94EA-63163F26F0F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.2:*:*:*:unlimited:*:*:*","matchCriteriaId":"E1D2F38C-9E44-46FB-95B4-0372AE798C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.3:*:*:*:application_server:*:*:*","matchCriteriaId":"57883CD6-1198-44BB-87E0-8B0ACDE5663D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.3:*:*:*:enterprise:*:*:*","matchCriteriaId":"BD678724-2232-49E2-B7A8-CC2EE494946C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.3:*:*:*:unlimited:*:*:*","matchCriteriaId":"6A1114D3-87AE-409C-971A-6D8EFEE821B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.4:*:*:*:application_server:*:*:*","matchCriteriaId":"FAF6A896-D720-432F-BC3E-C0393426C20C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.4:*:*:*:enterprise:*:*:*","matchCriteriaId":"EA077C9E-C227-4C5C-9B66-E8BBC916F893"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.4:*:*:*:unlimited:*:*:*","matchCriteriaId":"C289F346-7F2E-4A7E-9716-983F656E2EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.5:*:*:*:application_server:*:*:*","matchCriteriaId":"46ED44E3-F7BD-4D45-B19F-CCC62B1D333C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"0F9CB269-5616-49EF-B3E5-CC5DE803EAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.8.0.5:*:*:*:unlimited:*:*:*","matchCriteriaId":"ABE822D1-4F9C-4F95-A36F-6CE23FA9CCE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*","matchCriteriaId":"6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"A6B1A4DC-7062-4349-8D1A-3DE4B0E68FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"B3681F43-F23B-413D-B871-A40821F4988B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"AE645126-ECD0-40FB-B2BA-5C9EF33EBE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*","matchCriteriaId":"9AFEA656-426C-4F18-9737-8985531C7A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup:*:*:*","matchCriteriaId":"09B0333F-0E27-40B3-A0DC-618BEA97CBC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4B27E1F7-888C-40EE-85FF-B5DC099828C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"C66D33C1-8FB6-4840-8797-A0A8822BA657"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"B271D557-5CDE-4B23-AEC3-BEAFA0DD8020"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"61CB1EB7-4012-491F-AE13-EDAE4B3F564D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:express:*:*:*","matchCriteriaId":"DCAB0313-EC4D-41BB-AE87-27DADC448DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:workgroup:*:*:*","matchCriteriaId":"2C8493DA-57EB-44C8-A47F-519B5A716CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57DCF076-B475-41E6-B1ED-44FBC99238C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"C59A77F7-10AD-4149-BCAB-44E0C3BD0477"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"53158B7F-3D69-4ED0-AFA8-053AE0DD36C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"D9F12837-B444-43D8-BE8B-6723C079D148"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:express:*:*:*","matchCriteriaId":"ACDBAE00-B031-4C48-8CD5-B1EAEAC6371A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:workgroup:*:*:*","matchCriteriaId":"05C71242-D201-49CF-A091-A2400BAB7F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BDB1972D-F7FC-4ABA-9DEE-9953D2572944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"2D4622F5-4384-4B62-84E6-AFB01B26717C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"E59FE93E-A983-4F55-8C40-DC0F88372185"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:enterprise:*:*:*","matchCriteriaId":"3BD40599-8F50-4882-AB1F-C6E4BA7E787D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:express:*:*:*","matchCriteriaId":"F04F901A-A846-4E45-8F48-C4D5F86CDFF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:workgroup:*:*:*","matchCriteriaId":"9D0D0938-DD1F-46F3-BF06-72C6BA85195C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1D276299-D403-4C41-ACBF-A23383CB3FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"D10F4882-F09F-449E-BB46-8532FC7E667F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"32618EBA-B913-4DA9-801D-24ED735D50A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:enterprise:*:*:*","matchCriteriaId":"4C1C6574-18E1-4FBC-B78D-788910659710"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:express:*:*:*","matchCriteriaId":"6A03EEE1-E6F3-44B1-B2F4-B1C48F155BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:workgroup:*:*:*","matchCriteriaId":"8A5BB979-A1A2-4C1B-879E-8EB96026C7CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5830263A-6970-43B8-BF08-2886327004A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"9B6725E8-476E-41DA-AC46-B898467FE553"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"9AF7330E-EAA4-4063-879D-9DC5B7505EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"73EF53E9-B6C9-4A8F-8EE9-4D190DA686BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:express:*:*:*","matchCriteriaId":"F98A9F67-78B0-40E5-8CAF-37B6B2AA6F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:workgroup:*:*:*","matchCriteriaId":"D7AF250F-8D36-4596-9754-2718EFBA5B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1F67DD01-F0E6-420E-A144-A8DD001BBBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"6D38B577-3919-4E91-9EBC-A5E247AAED2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"36831245-948F-443F-A231-F4451154E96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:enterprise:*:*:*","matchCriteriaId":"89037FB6-8E7D-4E4E-957B-39AC7A7E7693"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:express:*:*:*","matchCriteriaId":"382FE250-BD14-4051-9666-4CDDBDF4D6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:workgroup:*:*:*","matchCriteriaId":"376217A0-1D6C-4279-9528-D738920A127F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3AA78533-899B-4482-97A7-7E2730C18C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"88B4D2AF-6831-4B8B-B093-1ECF8A0BABBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"F64EC511-E8E4-459F-99F2-8B0167B3DC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:enterprise:*:*:*","matchCriteriaId":"A0D8A2E7-E382-4E9B-A409-0C27C3F6819C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:express:*:*:*","matchCriteriaId":"B254202B-1A6C-4506-BE7F-2B746DF1EFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:workgroup:*:*:*","matchCriteriaId":"E7BF68DD-442D-4AA9-9139-A2A0FF903FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:application_server:*:*:*","matchCriteriaId":"C22B49A3-FE14-4677-A141-935AE852E459"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"278FEDCA-CDE6-4EB6-BCD8-B4B0507DC9A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:unlimited:*:*:*","matchCriteriaId":"B0106414-9BB7-4189-B30E-E5D2B92DCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:application_server:*:*:*","matchCriteriaId":"057148B7-7877-406B-BCCA-4F73EB763E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"FCE19A5D-FD98-4894-9E3F-402201183C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:unlimited:*:*:*","matchCriteriaId":"657F1C1B-7C19-499A-9E83-5C02E6CCBBF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:application_server:*:*:*","matchCriteriaId":"87F1950D-DA81-4FE9-92A7-FFA4C848712C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"D88F6FBC-E7EC-4DCD-83C2-B97796A8FABE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:unlimited:*:*:*","matchCriteriaId":"7C1FDAEF-9898-45BF-B6F8-3B11643E3E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:application_server:*:*:*","matchCriteriaId":"BB04D50F-A3D4-450B-9B54-B01EF5262875"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:enterprise:*:*:*","matchCriteriaId":"2BFBADE9-6B3A-4E57-B5C7-CB1F64A2A117"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:unlimited:*:*:*","matchCriteriaId":"DBF9677A-C9A3-4E7B-9F6C-D5B25D3199E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:application_server:*:*:*","matchCriteriaId":"8E9DC60B-AD0B-411E-8C45-FC13BAE808E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:enterprise:*:*:*","matchCriteriaId":"BE06C451-7ACE-4C51-97D3-0706670289A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:unlimited:*:*:*","matchCriteriaId":"A485805A-CAD3-4413-9884-B5FDA2335EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:application_server:*:*:*","matchCriteriaId":"813AE8F1-4CBC-48C1-BD8A-E34B504FCCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"A7F6A685-02F4-4588-9E93-F5B3786C3798"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:unlimited:*:*:*","matchCriteriaId":"D9F2DA09-A6AB-4E8E-8DD2-944F3C212C77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:application_server:*:*:*","matchCriteriaId":"8E6366D7-1F03-458D-A85B-F58A7C42EA22"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:enterprise:*:*:*","matchCriteriaId":"FACC7C87-6BB7-4538-B6FC-0B751D674855"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:unlimited:*:*:*","matchCriteriaId":"4EA683DC-1241-4B82-BEAC-E5A1DA37CEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:application_server:*:*:*","matchCriteriaId":"DC1FDA00-1A3E-4520-ABBA-F9A28CF1D5D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:enterprise:*:*:*","matchCriteriaId":"C6B3BA4F-A16F-466E-890D-342A11A4D91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:unlimited:*:*:*","matchCriteriaId":"4B778C91-03D0-4A20-9D68-A2F52D9A3302"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*","matchCriteriaId":"2952EB24-A015-4EC7-85E3-88588D0AB15B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"2ECC11D3-7D77-4823-8B34-DD76E131D74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"E1D36687-32AF-43E2-97D9-FDF602F89318"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"DD80ADF4-35D3-4534-AACD-C00D80870723"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*","matchCriteriaId":"8D274B00-C986-4A5D-94B2-79F4A613D951"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup:*:*:*","matchCriteriaId":"67A935CA-7AF6-4DA9-958E-DF4BC8E2B3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E5FA4086-9B5D-4352-B717-3F826DE17D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"D3396279-1384-42C7-AE23-9C22027BF849"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"2B41AD1A-4EC2-4FB9-BE50-07F4EA8DB52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"08B19729-1FF1-4253-9C76-707357FC3085"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:express:*:*:*","matchCriteriaId":"84283835-03F9-496B-B22F-C201BB53F9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:workgroup:*:*:*","matchCriteriaId":"221885F3-AD20-46B4-983F-51349493B259"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD79FF24-6C10-437B-86AF-E211B8C6FDC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"92E3C74F-6764-4D96-B5BC-2395B95F8A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"2811974B-5CBD-4A14-8309-6FAC942B36EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"957BCDB3-D975-451D-8EB8-B06BFDF22AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:express:*:*:*","matchCriteriaId":"2F46AA23-B030-4752-9B23-0B84A9A9D849"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:workgroup:*:*:*","matchCriteriaId":"EB7647F0-40F1-4861-8F5A-7A60D0406171"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7ABB145C-44EE-47F5-9439-DE6433F8008E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"B7B3A7E6-72C8-48AF-85D7-2D8B47545E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"9385C154-3FE2-4C9B-ABB2-E0AC9D32F410"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:enterprise:*:*:*","matchCriteriaId":"8B05B2E7-77DB-4C2A-8FB0-81AE7424573E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:express:*:*:*","matchCriteriaId":"66361477-AF76-4C7B-A400-473448F48C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:workgroup:*:*:*","matchCriteriaId":"C5F04C50-77EB-4D29-B17A-B6962BB71A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F138E08-6808-4371-9E9C-096B01126B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"DE8DB42E-633E-483A-84F0-404900E9CEA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"70CA5418-9B60-4972-B38E-12560C3ADFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:enterprise:*:*:*","matchCriteriaId":"71990C6B-6942-4319-90A2-19F5ED136B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:express:*:*:*","matchCriteriaId":"CF3CB891-AE62-4E0E-926A-7355554E022E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:workgroup:*:*:*","matchCriteriaId":"57513E4A-AC67-4DC3-8FAD-309BBEF64360"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"813AE6CA-39B5-448C-8781-F2C3B499160A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"B3F57784-9A43-4B4B-8910-C8509CF92EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"DE19053A-9DE6-40AA-BFAA-CE98AB1360F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"456DF2B9-1107-4F4B-BF8E-2CCCAC5CFCC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:express:*:*:*","matchCriteriaId":"73776FA2-6E94-49FF-AE08-6A4767C1DC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:workgroup:*:*:*","matchCriteriaId":"B60627D6-FBB6-492A-B7FF-2733EA1E8F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:application_server:*:*:*","matchCriteriaId":"44010A01-4E33-4A6D-83DE-6235AEEE90F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F40068BF-82CC-43D5-99BC-1228337995FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:unlimited:*:*:*","matchCriteriaId":"97626150-FED1-49F7-9CA5-4A5C61A5544C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.1:*:*:*:application_server:*:*:*","matchCriteriaId":"C679EB6F-C5C7-4206-B6D4-931D47D99FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"C2CB92C8-26B8-4CBE-9B1A-2E32BF22AFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.1:*:*:*:unlimited:*:*:*","matchCriteriaId":"84266CFB-28C7-4CA6-9019-F5E76BE4B334"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.2:*:*:*:application_server:*:*:*","matchCriteriaId":"3A07AC99-0665-4CF4-A5D3-BDAC0031F4C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"AD9FB45B-35E8-43B8-B64B-E36EA9B8614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.2:*:*:*:unlimited:*:*:*","matchCriteriaId":"DF0FDD49-560E-4413-9577-4258A205E24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.3:*:*:*:application_server:*:*:*","matchCriteriaId":"573E9E55-9192-4DAD-808C-40383043E69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.3:*:*:*:enterprise:*:*:*","matchCriteriaId":"ED4D2143-BE03-43ED-ADBE-2FE007774356"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.3:*:*:*:unlimited:*:*:*","matchCriteriaId":"F7D6A273-8D1A-4D5B-A48C-AEF57CB9EB50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.4:*:*:*:application_server:*:*:*","matchCriteriaId":"6CF6EBC2-4172-4916-A31B-BDE3257C057B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.4:*:*:*:enterprise:*:*:*","matchCriteriaId":"115908C3-8273-482A-BA95-60E7A9309E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.4:*:*:*:unlimited:*:*:*","matchCriteriaId":"F3D6B5E7-63F0-4A6E-992D-05D4A3A4E189"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.5:*:*:*:application_server:*:*:*","matchCriteriaId":"78CF81B1-08BA-4216-9FB1-B5430F0474BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"73C671CA-712E-485B-97DD-FA6246FAA61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:10.1.0.5:*:*:*:unlimited:*:*:*","matchCriteriaId":"FC5837DD-D508-4695-ADF8-2AAE0D853CCC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*","matchCriteriaId":"CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"3D9E7D2A-42B9-4D07-A107-BBD839E59858"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"FD27164C-7554-46E1-B755-27C74D2EC3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*","matchCriteriaId":"F199F7B4-F273-4D45-AE08-7B5DAE6E0794"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*","matchCriteriaId":"ACEB3F4A-6411-4456-9B89-A43562189BD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*","matchCriteriaId":"1749B7DC-08BB-474B-BA5A-52602459C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8A8E221-7045-4BAD-9B29-ABBC5216559D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"178CD2CC-B0D6-4F9B-A831-A2ACCB7A84A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"21A98521-C943-4161-A363-B7B95BDA9834"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"C214C846-04C9-4F22-A7D3-0198D9DC7F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:express:*:*:*","matchCriteriaId":"D6A59399-CBAB-47F2-A10B-30AAD4CBB155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:workgroup:*:*:*","matchCriteriaId":"F7517329-D20E-47F1-95F1-77B8F5675D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56C39DC1-AD23-4F26-9727-EC0FBDF84BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"72FA0609-7995-4424-A8C9-B804300D54DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"BE75DDE9-58B4-4851-A1B2-65CB8E877C51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"8ADE94C4-769A-4AAE-A5FB-55575016D51A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:express:*:*:*","matchCriteriaId":"63999EAB-82B3-4617-B81D-57B1230CC8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:workgroup:*:*:*","matchCriteriaId":"F97D1D66-0CC4-4CB4-AEEC-1A89825430B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2513D42C-E558-4CC7-88D3-BB44F1B40157"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"654ADB90-BD74-4D48-AACA-6A5872188489"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"CB725265-78B3-46C2-8440-D0774E1546E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:enterprise:*:*:*","matchCriteriaId":"1E62C8AD-00D0-4D01-89A2-5C167EFA01BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:express:*:*:*","matchCriteriaId":"286FE494-777D-4833-8155-73EBFE5FE9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:workgroup:*:*:*","matchCriteriaId":"75A10653-BDF2-400F-9BE6-D97D206FA05B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F441BE8-AEC0-44F0-875E-03C65A45CF68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"969490BD-E0E7-4084-B7DE-4E1F8A577A3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"AA58137A-A4CA-4599-89A7-7ECFFEC6FD21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:enterprise:*:*:*","matchCriteriaId":"73419A77-34EC-405D-A0DD-F74038A9AA55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:express:*:*:*","matchCriteriaId":"E7AFFD68-912E-4EC3-8BD3-AFB0FF2ED35B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:workgroup:*:*:*","matchCriteriaId":"53AF9275-862F-4B16-B396-644A4274F59C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"036E9715-CFAA-4F2A-B432-181EDCA3D812"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"15800A2B-0F00-41A6-984F-B240A8808EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"A3CF9276-2F50-4276-9599-4C1FACDD5FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"2F894A3D-A9A5-4031-B06A-967659941B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:express:*:*:*","matchCriteriaId":"C86BD01F-EDC8-4DF8-B9ED-5FBB73CFF207"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:workgroup:*:*:*","matchCriteriaId":"15BBE131-F21A-4B7F-B9B7-364EF4030881"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A55FBA0-4DFC-493D-91EF-EB56C241F9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"A390F0B7-D555-4C97-B15B-AC6A43787E46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"F90DFB7F-6814-4B10-B7C7-E237464D3D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:enterprise:*:*:*","matchCriteriaId":"4F5EAB4D-E6C3-4D39-AD82-DEFBB53919EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:express:*:*:*","matchCriteriaId":"48334AA6-4F27-4E4B-A18A-264654225886"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:workgroup:*:*:*","matchCriteriaId":"62F74620-7648-4EC9-8677-E9454B8EAB17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B539123F-B8AC-4051-9458-A780C68E9667"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"F120F1BA-E1CA-4334-B9D4-E8AD3DAFC713"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"7AA3EE6C-8312-403B-84E6-DBD7510DBE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:enterprise:*:*:*","matchCriteriaId":"2074CA1A-BB2A-4F60-8547-0A39BEDD09F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:express:*:*:*","matchCriteriaId":"72EB4294-534E-4AE1-8F29-E0D135E1E7F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:workgroup:*:*:*","matchCriteriaId":"D5AF5C44-3736-4FA0-BA19-2845F57BB043"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D3958E50-1F97-4C06-AF22-C635FB2557A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"7FBF2CE1-BF7E-4635-A4C2-B8F5F2338161"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"296B7182-3453-47D1-B54A-C2D1336424B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:enterprise:*:*:*","matchCriteriaId":"AABD6673-F7A6-486A-A83E-89F0172311ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:express:*:*:*","matchCriteriaId":"5A1D1E23-2979-4188-B12D-66CF0F681354"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:workgroup:*:*:*","matchCriteriaId":"9B31EAB3-D885-452A-93B2-22A3F94FEB08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"57AC4D14-805A-42F6-9348-D13C9A48136F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"BE50990D-E66E-4A19-88D8-7B5CB5CA4A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"FD0EE0C0-B089-4A2A-8438-3F31BA1CCB3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:enterprise:*:*:*","matchCriteriaId":"E76E023D-7784-4B6C-BD01-534CAF5593D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:express:*:*:*","matchCriteriaId":"22406FC8-D248-4F29-9ACC-C5F759EC6FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:workgroup:*:*:*","matchCriteriaId":"5640DC5A-2C5E-4B17-95D9-5FBCF73A5C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"0B54C55B-9288-4E04-B0D6-6765E5217DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"31215FF9-5DEC-4B2B-86C3-1ADE658F6B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"B39D6D16-6B10-4C87-BFA4-981ABD4DFD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:enterprise:*:*:*","matchCriteriaId":"C8640FCE-EA72-43BD-939A-AF48E1B534C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:express:*:*:*","matchCriteriaId":"F926754F-71A8-4570-B5F7-38C7F1F9C464"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:workgroup:*:*:*","matchCriteriaId":"4E028577-7C4C-4091-81F4-7872CC6F2E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"AA99C5A3-D43E-4942-AE87-8DA46FCDCD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:advanced_enterprise:*:*:*","matchCriteriaId":"5A3E5BD5-6C94-4128-BA0B-1F434E185746"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:advanced_workgroup:*:*:*","matchCriteriaId":"D608FE25-68DB-4436-9C30-14B2D509F7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:enterprise:*:*:*","matchCriteriaId":"7647800B-5603-42A4-8CBC-6A0BA228F1D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:express:*:*:*","matchCriteriaId":"95C63204-F838-4CE4-B98C-21461E8028D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:workgroup:*:*:*","matchCriteriaId":"938864B9-44D0-47E6-9961-9C4474AC6643"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:application_server:*:*:*","matchCriteriaId":"3F75FF9A-AAAE-4EFA-B698-230B5CCD0940"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:enterprise:*:*:*","matchCriteriaId":"4D38B30C-4CC3-43C9-9360-0A79C36A222F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:unlimited:*:*:*","matchCriteriaId":"3599AC98-ACD3-4A09-9764-080A6B8F56A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.1:*:*:*:application_server:*:*:*","matchCriteriaId":"C7D25C1C-3560-48B9-A7E1-1E268BDE5A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"2E22AE16-1F17-4F1D-8C00-949729FA3A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.1:*:*:*:unlimited:*:*:*","matchCriteriaId":"B26A6BF8-F321-4EC3-8EE9-1396C0513B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.2:*:*:*:application_server:*:*:*","matchCriteriaId":"927E9A8F-82B4-4D3B-B800-F1A11A90046E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"AFD159D3-2FE5-4815-8365-53CC36204B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.2:*:*:*:unlimited:*:*:*","matchCriteriaId":"524EC7BA-7470-4D09-8796-CAF9D5A85DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.3:*:*:*:application_server:*:*:*","matchCriteriaId":"D044ABF8-2F9A-4505-9BB7-776A90D647C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.3:*:*:*:enterprise:*:*:*","matchCriteriaId":"AB7D388A-456A-490A-9D4B-4AE2BCC871C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.3:*:*:*:unlimited:*:*:*","matchCriteriaId":"A841C615-D049-44CA-BB0E-BCC526535227"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.4:*:*:*:application_server:*:*:*","matchCriteriaId":"D5BE71A5-6298-4E05-859E-153C47C3B032"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.4:*:*:*:enterprise:*:*:*","matchCriteriaId":"D8FC0956-2B4D-43E0-ABD7-23915DCA8E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.4:*:*:*:unlimited:*:*:*","matchCriteriaId":"5528F9F8-80D2-4AA8-B151-FABEABCFFC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.5:*:*:*:application_server:*:*:*","matchCriteriaId":"113F8614-32BE-4A9E-B770-BE768947C13A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"77B720B6-E253-4FEE-A9EE-CE4C455FBEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.5:*:*:*:unlimited:*:*:*","matchCriteriaId":"2A73D3F8-803E-4E75-9E01-8F004C50190B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.6:*:*:*:application_server:*:*:*","matchCriteriaId":"0592E180-F4DC-424F-93A4-4B0C6350C6F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.6:*:*:*:enterprise:*:*:*","matchCriteriaId":"DCAE5624-B81B-4253-A416-D2111B10F29F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.6:*:*:*:unlimited:*:*:*","matchCriteriaId":"C662B9B9-D210-484A-9D43-A30585052F31"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.7:*:*:*:application_server:*:*:*","matchCriteriaId":"7172F912-E08B-4102-B38D-A3B1671DED62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.7:*:*:*:enterprise:*:*:*","matchCriteriaId":"B219F088-3C1D-4468-9990-35D48E3C1092"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.7:*:*:*:unlimited:*:*:*","matchCriteriaId":"FFA270A6-81CD-4D24-B37F-9BE7AD4AC258"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.8:*:*:*:application_server:*:*:*","matchCriteriaId":"7DE842AD-EECE-4CF4-886C-91AF654C7492"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.8:*:*:*:enterprise:*:*:*","matchCriteriaId":"6766C050-5775-4C58-BC77-C9B6A8EDF3E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.8:*:*:*:unlimited:*:*:*","matchCriteriaId":"AD9377C9-3F5C-4F9A-92FF-18F3E4312CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.9:*:*:*:application_server:*:*:*","matchCriteriaId":"5E4899B5-2326-4A30-BE94-E66272B14FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.9:*:*:*:enterprise:*:*:*","matchCriteriaId":"E9EBF086-C6C9-4386-9645-3E97A61ADC8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.9:*:*:*:unlimited:*:*:*","matchCriteriaId":"DD7C0F7C-7682-49FF-AAA5-C6D59D00214D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.10:*:*:*:application_server:*:*:*","matchCriteriaId":"DF7307CA-59F9-41F9-B7B6-C5EAC6F01883"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.10:*:*:*:enterprise:*:*:*","matchCriteriaId":"CAFE61E6-92A6-4409-937A-A3620579EFDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.10:*:*:*:unlimited:*:*:*","matchCriteriaId":"819EB03B-445B-42A5-96D7-56E1D5D21088"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.11:*:*:*:application_server:*:*:*","matchCriteriaId":"32C4BA27-E82C-4453-BC80-22A74568B229"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.11:*:*:*:enterprise:*:*:*","matchCriteriaId":"79FEC79B-F178-4D66-97BF-9E6909DB5F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_connect:9.7.0.11:*:*:*:unlimited:*:*:*","matchCriteriaId":"AB2DA26B-B0DD-4995-86BD-2BC455888415"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12462","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12487","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12488","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT13350","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21979984","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85979","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1035660","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT13350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21979984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1205","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-28T01:59:01.693","lastModified":"2026-06-17T00:41:28.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.0 for EC-CUBE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el plugin shiro8 (1) category_freearea_ addition_plugin plugin 1.0 y (2) itemdetail_freearea_ addition_plugin 1.0 para EC-CUBE permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shiro8:category_freearea_addition:1.0:*:*:*:*:ec-cube:*:*","matchCriteriaId":"2840234B-8CC8-487C-A132-DB4EF906EA5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:shiro8:itemdetail_freearea_addition:1.0:*:*:*:*:ec-cube:*:*","matchCriteriaId":"893F41B4-ADA9-4824-A282-A799AEA7C49C"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN63384827/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000057","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/products/detail.php?product_id=505","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/88872","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN63384827/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/products/detail.php?product_id=505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/88872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1199","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-30T10:59:01.160","lastModified":"2026-06-17T00:41:27.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to bypass intended IP address restrictions via unspecified vectors, a different vulnerability than CVE-2016-1200."},{"lang":"es","value":"La página de inicio de sesión en la pantalla de administración en LOCKON EC-CUBE 3.0.0 hasta la versión 3.0.9 permite a atacantes remotos eludir restricciones destinadas a direcciones IP a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-1200."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CB551616-10D8-4EF4-9FA9-E7F5986E8627"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C614924A-401D-484B-96AA-87D1C071D994"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D7B27593-E73B-45C9-A1BF-A3CFF97F3850"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9272BD35-622B-40BA-8A7E-C2BFED8831AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"72BAC75E-415C-43A6-90DA-F8DCBE8B1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"74022ECE-0307-4FEE-B6E8-C575B106D6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"225965E9-0C6C-4F16-B0DB-73C7057E0DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4260F22D-636C-47A6-8A4E-89FAC3085F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0603E775-3E8D-458D-B2BD-8698F6BC32D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"38A08F69-72BD-47DF-9EF3-E3DA80FAEBBD"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN47473944/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000051","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/info/weakness/weakness.php?id=65","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://www.ec-cube.net/info/weakness/201604/","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN47473944/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/info/weakness/weakness.php?id=65","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.ec-cube.net/info/weakness/201604/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1200","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-04-30T10:59:02.270","lastModified":"2026-06-17T00:41:27.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-1199."},{"lang":"es","value":"La pantalla de ajustes en LOCKON EC-CUBE 3.0.7 hasta la versión 3.0.9 permite a usuarios remotos autenticados eludir restricciones destinadas al acceso a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-1199."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4260F22D-636C-47A6-8A4E-89FAC3085F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0603E775-3E8D-458D-B2BD-8698F6BC32D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"38A08F69-72BD-47DF-9EF3-E3DA80FAEBBD"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN11458774/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000052","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/info/weakness/weakness.php?id=66","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90503","source":"vultures@jpcert.or.jp"},{"url":"https://www.ec-cube.net/info/weakness/201604/","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN11458774/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/info/weakness/weakness.php?id=66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.ec-cube.net/info/weakness/201604/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2809","sourceIdentifier":"security@mozilla.org","published":"2016-04-30T17:59:06.083","lastModified":"2026-06-17T00:44:30.040","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution."},{"lang":"es","value":"El actualizador Mozilla Maintenance Service en Mozilla Firefox en versiones anteriores a 46.0 sobre Windows permite a atacantes remotos asistidos por usuario eliminar archivos arbitrarios aprovechando la ejecución de un determinado archivo local."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"45.0.2","matchCriteriaId":"97000851-C511-487E-A5E8-FCB173D76624"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-40.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1212939","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-40.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1212939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2810","sourceIdentifier":"security@mozilla.org","published":"2016-04-30T17:59:07.350","lastModified":"2026-06-17T00:44:30.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 46.0 sobre Android en versiones anteriores a 5.0 permite a atacantes eludir requerimientos destinados al acceso Signature a través de una aplicación manipulada que aprovecha permisos content-provider, según lo demostrado por la lectura del historial del navegador o una contraseña guardada."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.4","matchCriteriaId":"53885773-16E2-4D30-BBA4-43F928098515"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"45.0.2","matchCriteriaId":"97000851-C511-487E-A5E8-FCB173D76624"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-41.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1229681","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-41.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1229681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2813","sourceIdentifier":"security@mozilla.org","published":"2016-04-30T17:59:11.163","lastModified":"2026-06-17T00:44:30.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to CVE-2016-1780."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 46.0 sobre Android no restringe adecuadamente el acceso JavaScript a datos de orientation y motion, lo que permite a atacantes remotos obtener información sensible sobre el entorno de un dispositivo físico, y posiblemente descubrir valores de PIN, a través de un sitio web manipulado, un problema similar a CVE-2016-1780."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","matchCriteriaId":"8255F035-04C8-4158-B301-82101711939C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"45.0.2","matchCriteriaId":"97000851-C511-487E-A5E8-FCB173D76624"}]}]}],"references":[{"url":"http://dl.acm.org/citation.cfm?id=2714650","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-43.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1197901","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://dl.acm.org/citation.cfm?id=2714650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-43.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1197901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2816","sourceIdentifier":"security@mozilla.org","published":"2016-04-30T17:59:13.647","lastModified":"2026-06-17T00:44:30.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 46.0 permite a atacantes remotos eludir el mecanismo de protección Content Security Policy (CSP) a través del tipo de contenido multipart/x-mixed-replace."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"45.0.2","matchCriteriaId":"97000851-C511-487E-A5E8-FCB173D76624"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-45.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2936-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2936-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2936-3","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1223743","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-45.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2936-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2936-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2936-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1223743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2817","sourceIdentifier":"security@mozilla.org","published":"2016-04-30T17:59:14.647","lastModified":"2026-06-17T00:44:31.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL."},{"lang":"es","value":"La funcionalidad de sandbox WebExtension en browser/components/extensions/ext-tabs.js en Mozilla Firefox en versiones anteriores a 46.0 no restringe adecuadamente la herencia principal durante llamadas API chrome.tabs.create y chrome.tabs.update, lo que permite a atacantes remotos llevar a cabo ataques Universal XSS (UXSS) a través de una extensión manipulada que accede a una URL (1) javascript: o (2) data:."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"45.0.2","matchCriteriaId":"97000851-C511-487E-A5E8-FCB173D76624"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-46.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2936-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2936-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2936-3","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1227462","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-46.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2936-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2936-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2936-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1227462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2820","sourceIdentifier":"security@mozilla.org","published":"2016-04-30T17:59:15.773","lastModified":"2026-06-17T00:44:31.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element."},{"lang":"es","value":"La funcionalidad Firefox Health Reports (también conocida como FHR o about:healthreport) en Mozilla Firefox en versiones anteriores a 46.0 no restringe adecuadamente el origen de eventos, lo que facilita a atacantes remotos modificar preferencias de compartición aprovechando acceso al elemento IFRAME remote-report."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"45.0.2","matchCriteriaId":"97000851-C511-487E-A5E8-FCB173D76624"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-48.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2936-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2936-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2936-3","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=870870","source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-48.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2936-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2936-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2936-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=870870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4415","sourceIdentifier":"cve@mitre.org","published":"2016-05-01T01:59:01.143","lastModified":"2026-06-17T00:47:30.813","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted file."},{"lang":"es","value":"wiretap/vwr.c en el intérprete de archivo Ixia IxVeriWave en Wireshark 2.x en versiones anteriores a 2.0.2 incrementa incorrectamente una determinada cuenta de octeto, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de buffer basado en memoria dinámica y caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11795","source":"cve@mitre.org"},{"url":"https://code.google.com/p/google-security-research/issues/detail?id=647","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-12.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/google-security-research/issues/detail?id=647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4416","sourceIdentifier":"cve@mitre.org","published":"2016-05-01T01:59:02.143","lastModified":"2026-06-17T00:47:30.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.2 mishandles the Grouping subfield, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-ieee80211.c en el disector IEEE 802.11 en Wireshark 2.x en versiones anteriores a 2.0.2 maneja incorrectamente el subcampo Grouping, lo que permite a atacantes remotos provocar una denegación de servicio (sobrelectura de buffer y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11818","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-13.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4417","sourceIdentifier":"cve@mitre.org","published":"2016-05-01T01:59:03.503","lastModified":"2026-06-17T00:47:31.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet that triggers a 0xff tag value."},{"lang":"es","value":"Error por un paso en epan/dissectors/packet-gsm_abis_oml.c en el disector GSM A-bis OML en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.x en versiones anteriores a 2.0.2 permite a atacantes remotos provocar una denegación de servicio (sobrelectura de buffer y caída de aplicación) a través de un paquete manipulado que desencadena un valor de etiqueta 0xff."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11825","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-14.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4418","sourceIdentifier":"cve@mitre.org","published":"2016-05-01T01:59:04.503","lastModified":"2026-06-17T00:47:31.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet that triggers an empty set."},{"lang":"es","value":"epan/dissectors/packet-ber.c en el disector ASN.1 BER en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.x en versiones anteriores a 2.0.2 permite a atacantes remotos provocar una denegación de servicio (sobrelectura de buffer y caída de aplicación) a través de un paquete manipulado que desencadena un conjunto vacío."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12106","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-15.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4419","sourceIdentifier":"cve@mitre.org","published":"2016-05-01T01:59:05.613","lastModified":"2026-06-17T00:47:31.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to cause a denial of service (large loop) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-spice.c en el disector SPICE en Wireshark 2.x en versiones anteriores a 2.0.2 maneja incorrectamente datos capability, lo que permite a atacantes remotos provocar una denegación de servicio (bucle grande) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12151","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-16.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4420","sourceIdentifier":"cve@mitre.org","published":"2016-05-01T01:59:06.550","lastModified":"2026-06-17T00:47:31.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NFS dissector in Wireshark 2.x before 2.0.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"El disector NFS en Wireshark 2.x en versiones anteriores a 2.0.2 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"https://www.wireshark.org/security/wnpa-sec-2016-17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4421","sourceIdentifier":"cve@mitre.org","published":"2016-05-01T01:59:07.830","lastModified":"2026-06-17T00:47:31.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (deep recursion, stack consumption, and application crash) via a packet that specifies deeply nested data."},{"lang":"es","value":"epan/dissectors/packet-ber.c en el disector ASN.1 BER en Wireshark 1.12.x en versiones anteriores a 1.12.10 y 2.x en versiones anteriores a 2.0.2 permite a atacantes remotos provocar una denegación de servicio (recursión profunda, consumo de pila y caída de aplicación) a través de un paquete que especifica datos profundamente anidados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11822","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-18.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7316","sourceIdentifier":"security@debian.org","published":"2016-05-02T10:59:01.357","lastModified":"2026-06-16T23:04:02.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault for an iovec of nonzero length."},{"lang":"es","value":"mm/filemap.c en el kernel de Linux en versiones anteriores a 2.6.25 permite a usuarios locales provocar una denegación de servicio (bucle infinito) a través de una llamada a sistema writev que desencadena un iovec de longitud cero, seguido por un fallo de página para un iovec de longitud cero."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.24","matchCriteriaId":"3902B4CD-3000-4E95-8B99-07D8CE27676B"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=124d3b7041f9a0ca7c43a6293e1cae4576c32fd5","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.25","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/6","source":"security@debian.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302009","source":"security@debian.org"},{"url":"https://github.com/torvalds/linux/commit/124d3b7041f9a0ca7c43a6293e1cae4576c32fd5","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=124d3b7041f9a0ca7c43a6293e1cae4576c32fd5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.25","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/24/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/124d3b7041f9a0ca7c43a6293e1cae4576c32fd5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2011-5321","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:02.373","lastModified":"2026-06-16T23:36:21.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted access to a device file under the /dev/pts directory."},{"lang":"es","value":"La función tty_open en drivers/tty/tty_io.c en el kernel de Linux en versiones anteriores a 3.1.1 no maneja adecuadamente un fallo de búsqueda de controlador, lo que permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) o posiblemente tener otro impacto no especificado a través de acceso manipulado a un archivo de dispositivo bajo el directorio /dev/pts."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"F7A0F527-5ACD-40DA-94D0-B47D2EE5C970"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c290f8358acaeffd8e0c551ddcc24d1206143376","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1221.html","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/03/13/17","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1201887","source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/c290f8358acaeffd8e0c551ddcc24d1206143376","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c290f8358acaeffd8e0c551ddcc24d1206143376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/03/13/17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1201887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/c290f8358acaeffd8e0c551ddcc24d1206143376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2014-9717","sourceIdentifier":"cve@mitre.org","published":"2016-05-02T10:59:06.593","lastModified":"2026-06-17T00:18:52.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace."},{"lang":"es","value":"fs/namespace.c en el kernel de Linux en versiones anteriores a 4.0.2 procesa llamadas de sistema MNT_DETACH umount2 sin verificar que el indicador MNT_LOCKED no está establecido, lo que permite a usuarios locales eludir restricciones dedicadas al acceso y navegar a localizaciones de archivos de sistema bajo un montaje llamando a umount2 en un espacio de nombres de usuario."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.1","matchCriteriaId":"D460F925-66B4-4BED-BD3B-91A8C60B8AC4"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce07d891a0891d3c0d0c2d73d577490486b809e1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/04/17/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/74226","source":"cve@mitre.org"},{"url":"http://www.spinics.net/lists/linux-containers/msg30786.html","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1226751","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/ce07d891a0891d3c0d0c2d73d577490486b809e1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://groups.google.com/forum/message/raw?msg=linux.kernel/HnegnbXk0Vs/RClojwJzAFEJ","source":"cve@mitre.org"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce07d891a0891d3c0d0c2d73d577490486b809e1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/04/17/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/74226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.spinics.net/lists/linux-containers/msg30786.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1226751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/ce07d891a0891d3c0d0c2d73d577490486b809e1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://groups.google.com/forum/message/raw?msg=linux.kernel/HnegnbXk0Vs/RClojwJzAFEJ","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-1350","sourceIdentifier":"cve@mitre.org","published":"2016-05-02T10:59:07.857","lastModified":"2026-06-17T00:22:14.780","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program."},{"lang":"es","value":"El subsistema VFS en el kernel de Linux 3.x provee un conjunto incompleto de requerimientos para operaciones setattr que subespecifica eliminando atributos de extensión de privilegios, lo que permite a usuarios locales provocar una denegación de servicio (desprovisión de capacidad) a través de una invocación fallida of a system call, según lo demostrado usando chown para eliminar una capacidad una capacidad de ping o del programa dumpcap de Wireshark."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-552"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndIncluding":"3.19.8","matchCriteriaId":"CB997E9A-FBEE-415A-9B18-37FCAEA17DB2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C60FA8B1-1802-4522-A088-22171DCF7A93"}]}]}],"references":[{"url":"http://marc.info/?l=linux-kernel&m=142153722930533&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/01/24/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/76075","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185139","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=142153722930533&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/01/24/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/76075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-1573","sourceIdentifier":"cve@mitre.org","published":"2016-05-02T10:59:08.997","lastModified":"2026-06-17T00:22:37.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability."},{"lang":"es","value":"La función nft_flush_table en net/netfilter/nf_tables_api.c en el kernel de Linux en versiones anteriores a 3.18.5 no maneja adecuadamente la interacción entre saltos cross-chain y borrado de conjuntos de reglas, lo que permite a usuarios locales provocar una denegación de servicio (pánico) aprovechando la capacidad CAP_NET_ADMIN."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.18.4","matchCriteriaId":"C9EF6873-629E-4D34-BB62-52C6B5EB13F2"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a2f18db0c68fec96631c10cad9384c196e9008ac","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1137.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1138.html","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/02/10/13","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/72552","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1190966","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/a2f18db0c68fec96631c10cad9384c196e9008ac","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a2f18db0c68fec96631c10cad9384c196e9008ac","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1137.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1138.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/02/10/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/72552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1190966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/a2f18db0c68fec96631c10cad9384c196e9008ac","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-2672","sourceIdentifier":"cve@mitre.org","published":"2016-05-02T10:59:10.310","lastModified":"2026-06-17T00:24:31.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstr_replacement pointers and consequently does not provide any protection against instruction faulting, which allows local users to cause a denial of service (panic) by triggering a fault, as demonstrated by an unaligned memory operand or a non-canonical address memory operand."},{"lang":"es","value":"La implementación de xsave/xrstor en arch/x86/include/asm/xsave.h en el kernel de Linux en versiones anteriores a 3.19.2 crea determinados punteros .altinstr_replacement y consecuentemente no provee ninguna protección contra fallo de instrucciones, lo que permite a usuarios locales provocar una denegación de servicio (pánico) desencadenando un fallo, según lo demostrado por un operando de memoria no alineada o un operando de dirección de memoria no canónico."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.19.1","matchCriteriaId":"F826E30E-CA66-4654-B8A4-F18D32B89116"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06c8173eb92bbfc03a0fe8bb64315857d0badd06","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2015/03/22/1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1204729","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/06c8173eb92bbfc03a0fe8bb64315857d0badd06","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06c8173eb92bbfc03a0fe8bb64315857d0badd06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/03/22/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1204729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/06c8173eb92bbfc03a0fe8bb64315857d0badd06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-4170","sourceIdentifier":"cve@mitre.org","published":"2016-05-02T10:59:12.623","lastModified":"2026-06-17T00:26:51.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread."},{"lang":"es","value":"Condición de carrera en la función ldsem_cmpxchg en drivers/tty/tty_ldsem.c en el kernel de Linux en versiones anteriores a 3.13-rc4-next-20131218 permite a usuarios locales provocar una denegación de servicio (interbloqueo de ldsem_down_read y ldsem_down_write) estableciendo un nuevo hilo tty durante la desconexión de un hilo tty previo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.13.3","matchCriteriaId":"7E7A459C-0A2D-4CD2-9FCD-4592B31F774C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"9835B192-FE11-4FB6-B1D8-C47530A46014"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.1_s390x:*:*:*:*:*:*:*","matchCriteriaId":"B4860C7C-372F-4AE1-A893-2EB952042638"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.1_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"5B6ED0AA-CD87-47A5-8E82-C9C7BD14F1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.1_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"97DB8096-0177-4F72-A324-196EB5DF6C66"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/05/26/1","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/74820","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2016:1395","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1218879","source":"cve@mitre.org","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae","source":"cve@mitre.org"},{"url":"https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/05/26/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/74820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1218879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2015-4176","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:13.843","lastModified":"2026-06-17T00:26:52.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary files by leveraging user-namespace root access for deletion of a file or directory."},{"lang":"es","value":"fs/namespace.c en el kernel de Linux en versiones anteriores a 4.0.2 no soporta correctamente conectividad de montaje, lo que permite a usuarios locales leer archivos arbitrarios aprovechando acceso root al espacio de nombres de usuario para eliminar un archivo o directorio."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.1","matchCriteriaId":"D460F925-66B4-4BED-BD3B-91A8C60B8AC4"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e0c9c0afd2fc958ffa34b697972721d81df8a56f","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/06/04/5","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1249442","source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/e0c9c0afd2fc958ffa34b697972721d81df8a56f","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e0c9c0afd2fc958ffa34b697972721d81df8a56f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/06/04/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1249442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/e0c9c0afd2fc958ffa34b697972721d81df8a56f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-4177","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:15.203","lastModified":"2026-06-17T00:26:52.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call."},{"lang":"es","value":"La función collect_mounts en fs/namespace.c en el kernel de Linux en versiones anteriores a 4.0.5 no considera correctamente que se pueda ejecutar después de que una ruta sea desmontada, lo que permite a usuarios locales provocar una denegación de servicio (caída de sistema) aprovechando acceso root al espacio de nombres de usuario para una llamada de sistema MNT_DETACH umount2."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"C2A79CCA-B60A-4054-830E-B89A2CB2ABEF"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cd4a40174b71acd021877341684d8bb1dc8ea4ae","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2015/05/29/10","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2015/05/29/5","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.5","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/06/04/5","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248486","source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/cd4a40174b71acd021877341684d8bb1dc8ea4ae","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cd4a40174b71acd021877341684d8bb1dc8ea4ae","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2015/05/29/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2015/05/29/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/06/04/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/cd4a40174b71acd021877341684d8bb1dc8ea4ae","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-4178","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:16.203","lastModified":"2026-06-17T00:26:52.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The fs_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal consistency of a certain list data structure, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call, related to fs/fs_pin.c and include/linux/fs_pin.h."},{"lang":"es","value":"La implementación de fs_pin en el kernel de Linux en versiones anteriores a 4.0.5 no asegura la consistencia interna de una determinada estructura de datos de lista, lo que permite a usuarios locales provocar una denegación de servicio (caída de sistema) aprovechando acceso root al espacio de nombres de usuario para una llamada de sistema MNT_DETACH umount2, relacionado con fs/fs_pin.c y include/linux/fs_pin.h."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"C2A79CCA-B60A-4054-830E-B89A2CB2ABEF"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=820f9f147dcce2602eefd9b575bbbd9ea14f0953","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2015/05/29/10","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2015/05/29/5","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.5","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/06/04/5","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1249849","source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/820f9f147dcce2602eefd9b575bbbd9ea14f0953","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=820f9f147dcce2602eefd9b575bbbd9ea14f0953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2015/05/29/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2015/05/29/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/06/04/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1249849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/820f9f147dcce2602eefd9b575bbbd9ea14f0953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-8324","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:18.577","lastModified":"2026-06-17T00:34:19.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function."},{"lang":"es","value":"La implementación de ext4 en el kernel de Linux en versiones anteriores a 2.6.34 no rastrea correctamente la inicalización de determinadas estructuras de datos, lo que permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y pánico) a través de un dispositivo USB manipulado, relacionado con la función ext4_fill_super."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.33.20","matchCriteriaId":"B8187F7E-B31E-4C1C-8EB3-384193B7D7EE"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=744692dc059845b2a3022119871846e74d4f6e11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.34","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0855.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/11/23/2","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267261","source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/744692dc059845b2a3022119871846e74d4f6e11","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=744692dc059845b2a3022119871846e74d4f6e11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.34","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0855.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/11/23/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/744692dc059845b2a3022119871846e74d4f6e11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-8839","sourceIdentifier":"cve@mitre.org","published":"2016-05-02T10:59:22.110","lastModified":"2026-06-17T00:35:20.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling."},{"lang":"es","value":"Múltiples condiciones de carrera en la implementación del sistema de archivos ext4 en el kernel de Linux en versiones anteriores a 4.5 permite a usuarios locales provocar una denegación de servicio (corrupción de disco) escribiendo a una página que está asociada con un archivo de usuario diferente después del manejo de hole punching desincronizado y de fallo de página."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.221","matchCriteriaId":"B2207A54-26BD-4745-8C85-232815AB8788"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5:rc1:*:*:*:*:*:*","matchCriteriaId":"5011ED56-97F0-4754-9C98-B28B806DF6DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5:rc2:*:*:*:*:*:*","matchCriteriaId":"B7FC0A28-90D9-4DF3-8A2A-49C3D4CB470A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5:rc3:*:*:*:*:*:*","matchCriteriaId":"9D90B29E-F7B6-4EAB-83D2-1C339310D34D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5:rc4:*:*:*:*:*:*","matchCriteriaId":"02A2E198-C184-459C-9B7C-8A9C74A6DCEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5:rc5:*:*:*:*:*:*","matchCriteriaId":"F091733F-C9E6-4222-8EA0-9DDEC70EB129"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5:rc6:*:*:*:*:*:*","matchCriteriaId":"E4736F08-176D-4F49-A59D-E8C0F6DDEC8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5:rc7:*:*:*:*:*:*","matchCriteriaId":"80AD3822-AE03-412E-8E14-0DAD0BDCA028"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea3d7209ca01da209cda6f0dea8be9cc4b7a933b","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/01/4","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/85798","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035455","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3005-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3006-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3007-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1842","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2077","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2669","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323577","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/ea3d7209ca01da209cda6f0dea8be9cc4b7a933b","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea3d7209ca01da209cda6f0dea8be9cc4b7a933b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/01/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/85798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3005-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3006-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3007-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/ea3d7209ca01da209cda6f0dea8be9cc4b7a933b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2053","sourceIdentifier":"cve@mitre.org","published":"2016-05-02T10:59:25.470","lastModified":"2026-06-17T00:43:20.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c."},{"lang":"es","value":"La función asn1_ber_decoder en lib/asn1_decoder.c en el kernel de Linux en versiones anteriores a 4.3 permite a atacantes provocar una denegación de servicio (pánico) a través de un archivo ASN.1 BER que carece de clave pública, llevando a un manejo incorrecto por la función public_key_verify_signature en crypto/asymmetric_keys/public_key.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"24716AE4-6BBB-4E20-B9CC-8D2D43014BBD"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d62e9dd6da45bbf0f33a8617afc5fe774c8f45f","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/4","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036763","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300237","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/0d62e9dd6da45bbf0f33a8617afc5fe774c8f45f","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d62e9dd6da45bbf0f33a8617afc5fe774c8f45f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/25/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/0d62e9dd6da45bbf0f33a8617afc5fe774c8f45f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2185","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:28.720","lastModified":"2026-06-17T00:43:37.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor."},{"lang":"es","value":"La función ati_remote2_probe en drivers/input/misc/ati_remote2.c en el kernel de Linux en versiones anteriores a 4.5.1 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de un valor de dispositivos finales manipulado en un descriptor de dispositivo USB."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"F61E0DB9-4FAB-4B47-91DA-A0FAF09E3747"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/bugtraq/2016/Mar/116","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/90","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/84341","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283362","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283363","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317014","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/Mar/116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/90","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-2186","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:29.863","lastModified":"2026-06-17T00:43:37.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor."},{"lang":"es","value":"La función powermate_probe en drivers/input/misc/powermate.c en el kernel de Linux en versiones anteriores a 4.5.1 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de un valor de dispositivos finales manipulado en un descriptor de dispositivo USB."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"F61E0DB9-4FAB-4B47-91DA-A0FAF09E3747"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c6ba456711687b794dcf285856fc14e2c76074f","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/bugtraq/2016/Mar/117","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/85","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/84337","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317015","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/9c6ba456711687b794dcf285856fc14e2c76074f","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c6ba456711687b794dcf285856fc14e2c76074f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/Mar/117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/85","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/9c6ba456711687b794dcf285856fc14e2c76074f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-2187","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:30.847","lastModified":"2026-06-17T00:43:37.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor."},{"lang":"es","value":"La función gtco_probe en drivers/input/tablet/gtco.c en el kernel de Linux hasta la versión 4.5.2 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de un valor de dispositivos finales manipulado en un descriptor de dispositivo USB."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.2","matchCriteriaId":"8E93DE20-F6CD-4B8B-836D-7844A2697466"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"B942E0F5-7FDC-4AE5-985D-25F4EA7406F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11:extra:*:*:*:*:*:*","matchCriteriaId":"4B24E780-3254-4577-BCFF-7FBB6D97C780"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"095856BE-4E55-4FEA-BCAC-352C29083545"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=162f98dea487206d9ab79fc12ed64700667a894d","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/85425","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2989-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2998-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3004-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3005-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3006-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3007-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317017","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/162f98dea487206d9ab79fc12ed64700667a894d","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=162f98dea487206d9ab79fc12ed64700667a894d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/85425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2989-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2998-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3004-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3005-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3006-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3007-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/162f98dea487206d9ab79fc12ed64700667a894d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-2188","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:32.080","lastModified":"2026-06-17T00:43:38.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor."},{"lang":"es","value":"La función iowarrior_probe en drivers/usb/misc/iowarrior.c en el kernel de Linux en versiones anteriores a 4.5.1 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de un valor de dispositivos finales manipulado en un descriptor de dispositivo USB."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"F61E0DB9-4FAB-4B47-91DA-A0FAF09E3747"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ec0ef3a82125efc36173062a50624550a900ae0","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/bugtraq/2016/Mar/118","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/87","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317018","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/4ec0ef3a82125efc36173062a50624550a900ae0","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39556/","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ec0ef3a82125efc36173062a50624550a900ae0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/Mar/118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Mar/87","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/4ec0ef3a82125efc36173062a50624550a900ae0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39556/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-3136","sourceIdentifier":"security@opentext.com","published":"2016-05-02T10:59:35.520","lastModified":"2026-06-17T00:45:09.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors."},{"lang":"es","value":"La función mct_u232_msr_to_state en drivers/usb/serial/mct_u232.c en el kernel de Linux en versiones anteriores a 4.5.1 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de un dispositivo USB manipulado sin dos descriptores de dispositivo final interrupt-in."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"F61E0DB9-4FAB-4B47-91DA-A0FAF09E3747"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4e9a0b05257f29cf4b75f3209243ed71614d062e","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"security@opentext.com"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"security@opentext.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"security@opentext.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/14/2","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/84299","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283370","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317007","source":"security@opentext.com"},{"url":"https://github.com/torvalds/linux/commit/4e9a0b05257f29cf4b75f3209243ed71614d062e","source":"security@opentext.com"},{"url":"https://www.exploit-db.com/exploits/39541/","source":"security@opentext.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4e9a0b05257f29cf4b75f3209243ed71614d062e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/14/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/4e9a0b05257f29cf4b75f3209243ed71614d062e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39541/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-3137","sourceIdentifier":"security@opentext.com","published":"2016-05-02T10:59:36.737","lastModified":"2026-06-17T00:45:09.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoint descriptor, related to the cypress_generic_port_probe and cypress_open functions."},{"lang":"es","value":"drivers/usb/serial/cypress_m8.c en el kernel de Linux en versiones anteriores a 4.5.1 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de un dispositivo USB sin un descriptor de dispositivo final interrupt-in e interrupt-out, relacionado con las funciones cypress_generic_port_probe y cypress_open."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"F61E0DB9-4FAB-4B47-91DA-A0FAF09E3747"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c55aee1bf0e6b6feec8b2927b43f7a09a6d5f754","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"security@opentext.com"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"security@opentext.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"security@opentext.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/14/3","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/84300","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316996","source":"security@opentext.com"},{"url":"https://github.com/torvalds/linux/commit/c55aee1bf0e6b6feec8b2927b43f7a09a6d5f754","source":"security@opentext.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c55aee1bf0e6b6feec8b2927b43f7a09a6d5f754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/14/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/c55aee1bf0e6b6feec8b2927b43f7a09a6d5f754","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-3138","sourceIdentifier":"security@opentext.com","published":"2016-05-02T10:59:37.910","lastModified":"2026-06-17T00:45:09.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor."},{"lang":"es","value":"La función acm_probe en drivers/usb/class/cdc-acm.c en el kernel de Linux en versiones anteriores a 4.5.1 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de un dispositivo USB sin both a control y a data endpoint descriptor."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"F61E0DB9-4FAB-4B47-91DA-A0FAF09E3747"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8835ba4a39cf53f705417b3b3a94eb067673f2c9","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"security@opentext.com"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"security@opentext.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"security@opentext.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/14/4","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316204","source":"security@opentext.com"},{"url":"https://github.com/torvalds/linux/commit/8835ba4a39cf53f705417b3b3a94eb067673f2c9","source":"security@opentext.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8835ba4a39cf53f705417b3b3a94eb067673f2c9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/14/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2969-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/8835ba4a39cf53f705417b3b3a94eb067673f2c9","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-3140","sourceIdentifier":"security@opentext.com","published":"2016-05-02T10:59:39.520","lastModified":"2026-06-17T00:45:10.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor."},{"lang":"es","value":"La función digi_port_init en drivers/usb/serial/digi_acceleport.c en el kernel de Linux en versiones anteriores a 4.5.1 permite a atacantes físicamente próximos provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de un valor de dispositivos finales manipulado en un descriptor de dispositivo USB."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"F61E0DB9-4FAB-4B47-91DA-A0FAF09E3747"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5BFCA0A7-8EB8-4C6F-9039-2B6A224080D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"security@opentext.com"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"security@opentext.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"security@opentext.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/14/6","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/84304","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316995","source":"security@opentext.com"},{"url":"https://github.com/torvalds/linux/commit/5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f","source":"security@opentext.com"},{"url":"https://www.exploit-db.com/exploits/39537/","source":"security@opentext.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/14/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2996-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2997-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39537/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-3689","sourceIdentifier":"secalert@redhat.com","published":"2016-05-02T10:59:40.503","lastModified":"2026-06-17T00:46:11.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface."},{"lang":"es","value":"La función ims_pcu_parse_cdc_data en drivers/input/misc/ims-pcu.c en el kernel de Linux en versiones anteriores a 4.5.1 permite a atacantes físicamente próximos provocar una denegación de servicio (caída de sistema) a través de un dispositivo USB sin interfaz para un maestro y un esclavo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"F61E0DB9-4FAB-4B47-91DA-A0FAF09E3747"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ad220c96692eda76b2e3fd7279f3dcd1d8a8ff","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/30/6","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035441","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=971628","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320060","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/a0ad220c96692eda76b2e3fd7279f3dcd1d8a8ff","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ad220c96692eda76b2e3fd7279f3dcd1d8a8ff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/30/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2968-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2970-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2971-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=971628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/a0ad220c96692eda76b2e3fd7279f3dcd1d8a8ff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-3951","sourceIdentifier":"cve@mitre.org","published":"2016-05-02T10:59:41.490","lastModified":"2026-06-17T00:46:37.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor."},{"lang":"es","value":"Vulnerabilidad de liberación de memoria doble en drivers/net/usb/cdc_ncm.c en el kernel de Linux en versiones anteriores a 4.5 permite a atacantes físicamente próximos provocar una denegación de servicio (caída de sistema) o posiblemente tener otro impacto no especificado insertando un dispositivo USB con un descriptor USB no válido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"3C171088-A361-4950-A397-BB4FD83DBB68"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12:*:*:*:*:*:*:*","matchCriteriaId":"41BB6157-21C1-43AF-9468-2E49D9BEFEAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"BCEA3D62-99E0-48F9-A0CF-981BF28A509D"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12:*:*:*:*:*:*:*","matchCriteriaId":"0441632F-40BF-432B-BB1C-6396C726C4F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5AB3CAA1-C20C-4A86-841E-EC0858164D7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:4.5.0:rc7:*:*:*:*:*:*","matchCriteriaId":"74D8F1E1-5953-48EB-A3FB-218ACA871E9A"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1666984c8625b3db19a9abc298931d35ab7bc64b","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4d06dd537f95683aba3651098ae288b7cbff8274","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/06/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91028","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036763","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2989-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2998-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3004-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324782","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/1666984c8625b3db19a9abc298931d35ab7bc64b","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/torvalds/linux/commit/4d06dd537f95683aba3651098ae288b7cbff8274","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.spinics.net/lists/netdev/msg367669.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1666984c8625b3db19a9abc298931d35ab7bc64b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4d06dd537f95683aba3651098ae288b7cbff8274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/06/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2989-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2998-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3004-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/1666984c8625b3db19a9abc298931d35ab7bc64b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/torvalds/linux/commit/4d06dd537f95683aba3651098ae288b7cbff8274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.spinics.net/lists/netdev/msg367669.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/415.html\">CWE-415: Double Free</a>"}},{"cve":{"id":"CVE-2016-0892","sourceIdentifier":"security_alert@emc.com","published":"2016-05-03T15:59:00.147","lastModified":"2026-06-17T00:38:25.433","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en EMC RSA Data Loss Prevention 9.6 en versiones anteriores a SP2 P5 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6:*:*:*:*:*:*:*","matchCriteriaId":"EE630023-87D1-4137-8CC4-466E1D4E07DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F270CB9C-D7D2-4921-81E5-B54444CC11DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3B18F724-E435-4528-950A-CECDC6064822"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC727F25-DFA1-468C-AEFC-20D53604D2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"997B7BB9-CAD7-4B1E-BAF8-777CC1F62E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2E55B9DC-287D-4575-8AB7-1E6E98B5C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C95F6F15-D629-40CB-84C7-B406D3B0950F"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/May/9","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1035714","source":"security_alert@emc.com"},{"url":"http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/May/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0893","sourceIdentifier":"security_alert@emc.com","published":"2016-05-03T15:59:01.723","lastModified":"2026-06-17T00:38:25.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages."},{"lang":"es","value":"EMC RSA Data Loss Prevention 9.6 en versiones anteriores a SP2 P5 permite a usuarios autenticados remotos obtener información sensible leyendo mensajes de error."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6:*:*:*:*:*:*:*","matchCriteriaId":"EE630023-87D1-4137-8CC4-466E1D4E07DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F270CB9C-D7D2-4921-81E5-B54444CC11DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3B18F724-E435-4528-950A-CECDC6064822"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC727F25-DFA1-468C-AEFC-20D53604D2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"997B7BB9-CAD7-4B1E-BAF8-777CC1F62E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2E55B9DC-287D-4575-8AB7-1E6E98B5C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C95F6F15-D629-40CB-84C7-B406D3B0950F"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/May/9","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1035714","source":"security_alert@emc.com"},{"url":"http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/May/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0894","sourceIdentifier":"security_alert@emc.com","published":"2016-05-03T15:59:02.803","lastModified":"2026-06-17T00:38:25.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter."},{"lang":"es","value":"EMC RSA Data Loss Prevention 9.6 en versiones anteriores a SP2 P5 permite a usuarios autenticados remotos eludir restricciones destinadas al acceso de objetos a través de un parámetro modificado."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6:*:*:*:*:*:*:*","matchCriteriaId":"EE630023-87D1-4137-8CC4-466E1D4E07DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F270CB9C-D7D2-4921-81E5-B54444CC11DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3B18F724-E435-4528-950A-CECDC6064822"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC727F25-DFA1-468C-AEFC-20D53604D2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"997B7BB9-CAD7-4B1E-BAF8-777CC1F62E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2E55B9DC-287D-4575-8AB7-1E6E98B5C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C95F6F15-D629-40CB-84C7-B406D3B0950F"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/May/9","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1035714","source":"security_alert@emc.com"},{"url":"http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/May/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0895","sourceIdentifier":"security_alert@emc.com","published":"2016-05-03T15:59:03.787","lastModified":"2026-06-17T00:38:25.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity."},{"lang":"es","value":"EMC RSA Data Loss Prevention 9.6 en versiones anteriores a SP2 P5 permite a atacantes remotos llevar a cabo ataques de secuestro de clic a través de elementos del sitio web con transparencia u opacidad manipuladas."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6:*:*:*:*:*:*:*","matchCriteriaId":"EE630023-87D1-4137-8CC4-466E1D4E07DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F270CB9C-D7D2-4921-81E5-B54444CC11DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3B18F724-E435-4528-950A-CECDC6064822"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC727F25-DFA1-468C-AEFC-20D53604D2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"997B7BB9-CAD7-4B1E-BAF8-777CC1F62E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2E55B9DC-287D-4575-8AB7-1E6E98B5C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_data_loss_prevention:9.6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C95F6F15-D629-40CB-84C7-B406D3B0950F"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/May/9","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1035714","source":"security_alert@emc.com"},{"url":"http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/May/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2107","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T01:59:03.200","lastModified":"2026-06-17T00:43:27.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169."},{"lang":"es","value":"La implementación de AES-NI en OpenSSL en versiones anteriores a 1.0.1t y 1.0.2 en versiones anteriores a 1.0.2h no considera la asignación de memoria durante una comprobación de relleno determinada, lo que permite a atacantes remotos obtener información de texto claro sensible a través de un ataque de padding-oracle contra una sesión AES CBC . NOTA: esta vulnerabilidad existe debido a una corrección incorrecta para CVE-2013-0169."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1s","matchCriteriaId":"C1F608A0-78BE-4F17-9E41-70933E52B3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:helion_openstack:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"46D566AF-D1DE-4EAD-B881-DC40D1DE780C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:helion_openstack:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"81BED703-422A-4937-8BF0-F83C248188F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:helion_openstack:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A241BABC-E6A8-43B1-BED6-77FC38E337BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:helion_openstack:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DBE8AEFE-C74B-4E24-8EBA-35207DE756E3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.45","matchCriteriaId":"1CBD1B3E-644C-42B4-A556-7A4C58D219D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"0.12.0","versionEndExcluding":"0.12.14","matchCriteriaId":"2E35B5D6-6D7B-4D04-A8E4-88C4C47270AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.4.4","matchCriteriaId":"BA51558F-F55C-48B3-870B-6D1225998AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.11.1","matchCriteriaId":"D8D63E80-A861-4393-A868-9845F521CD04"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A53CB0E-3FBA-4796-BC81-6003A7DC29DE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX212736","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/89760","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035721","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=68595c0c2886e7942a14f98c17a55a88afb6c292","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39768/","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX212736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/89760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=68595c0c2886e7942a14f98c17a55a88afb6c292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39768/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2167","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T18:59:00.117","lastModified":"2026-06-17T00:43:34.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repository realm string."},{"lang":"es","value":"La función canonicalize_username en svnserve/cyrus_auth.c en Apache Subversion en versiones anteriores a 1.8.16 y 1.9.x en versiones anteriores a 1.9.4, cuando se utiliza autenticación Cyrus SASL, permite a atacantes remotos autenticarse y eludir restricciones destinadas al acceso a través de una cadena realm que se prefija a un repositorio de cadena realm esperado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.15","matchCriteriaId":"DD9BA15E-397D-4B1F-B755-8FFBBF58AE59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"892FF423-1848-4E69-8C4C-E1972B656196"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"9ACF37C7-8752-4A8F-B7E3-2E813C4A0DF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"74200C33-9505-48EB-964D-6CA28C7F6DB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"09FBAFE7-986D-4B24-8122-FDCC380331C9"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184545.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00044.html","source":"secalert@redhat.com"},{"url":"http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgJet+7_MAhomFVOXPgLtewcUw9w=k9zdPCkq5tvPxVMA%40mail.gmail.com%3E","source":"secalert@redhat.com"},{"url":"http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgfn1iKueW51EpmXzXi_URNfGNofZSgOyW1_jnSeNm5DQ%40mail.gmail.com%3E","source":"secalert@redhat.com"},{"url":"http://subversion.apache.org/security/CVE-2016-2167-advisory.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3561","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/89417","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035706","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.417496","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201610-05","source":"secalert@redhat.com"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgJet+7_MAhomFVOXPgLtewcUw9w=k9zdPCkq5tvPxVMA%40mail.gmail.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgfn1iKueW51EpmXzXi_URNfGNofZSgOyW1_jnSeNm5DQ%40mail.gmail.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://subversion.apache.org/security/CVE-2016-2167-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/89417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.417496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2168","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T18:59:01.710","lastModified":"2026-06-17T00:43:34.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check."},{"lang":"es","value":"La función req_check_access en el módulo mod_authz_svn en el servidor httpd en Apache Subversion en versiones anteriores a 1.8.16 y 1.9.x en versiones anteriores a 1.9.4 permite a usuarios remotos autenticados provocar una denegación de servicio (referencia a puntero NULL y caída) a través de una cabecera manipulada en una petición (1) MOVE o (2) COPY, involucrando una verificación de autorización."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.15","matchCriteriaId":"DD9BA15E-397D-4B1F-B755-8FFBBF58AE59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"892FF423-1848-4E69-8C4C-E1972B656196"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"9ACF37C7-8752-4A8F-B7E3-2E813C4A0DF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"74200C33-9505-48EB-964D-6CA28C7F6DB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:subversion:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"09FBAFE7-986D-4B24-8122-FDCC380331C9"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184545.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00044.html","source":"secalert@redhat.com"},{"url":"http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgJet+7_MAhomFVOXPgLtewcUw9w=k9zdPCkq5tvPxVMA%40mail.gmail.com%3E","source":"secalert@redhat.com"},{"url":"http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgfn1iKueW51EpmXzXi_URNfGNofZSgOyW1_jnSeNm5DQ%40mail.gmail.com%3E","source":"secalert@redhat.com"},{"url":"http://subversion.apache.org/security/CVE-2016-2168-advisory.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3561","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/89320","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035707","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.417496","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201610-05","source":"secalert@redhat.com"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgJet+7_MAhomFVOXPgLtewcUw9w=k9zdPCkq5tvPxVMA%40mail.gmail.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgfn1iKueW51EpmXzXi_URNfGNofZSgOyW1_jnSeNm5DQ%40mail.gmail.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://subversion.apache.org/security/CVE-2016-2168-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/89320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.417496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-3715","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T18:59:04.727","lastModified":"2026-06-17T00:46:14.567","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image."},{"lang":"es","value":"El codificador EPHEMERAL en ImageMagick en versiones anteriores a 6.9.3-10 y 7.x en versiones anteriores a 7.0.1-1 permite a atacantes remotos eliminar archivos arbitrarios a través de una imagen manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T13:27:17.433989Z","id":"CVE-2016-3715","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2022-05-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"ImageMagick Arbitrary File Deletion Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-552"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*","matchCriteriaId":"967EC28A-607F-48F4-AD64-5E3041C768F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:*","matchCriteriaId":"C84EAAE7-0249-4EA1-B8D3-E039B03ACDC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*","matchCriteriaId":"2148300C-ECBD-4ED5-A164-79629859DD43"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:6.7_s390x:*:*:*:*:*:*:*","matchCriteriaId":"837F0D24-99B3-4093-A45A-53ADB0367FCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.2_s390x:*:*:*:*:*:*:*","matchCriteriaId":"357FDE3E-2248-4BCD-B726-97C4D92FDCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.3_s390x:*:*:*:*:*:*:*","matchCriteriaId":"E420B889-BB89-4B64-B0E0-7E9B8545B959"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:*","matchCriteriaId":"B908AEF5-67CE-42D4-961D-C0E7ADB78ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:*","matchCriteriaId":"0F8EB695-5EA3-46D2-941E-D7F01AB99A48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x:*:*:*:*:*:*:*","matchCriteriaId":"1E1DB003-76B8-4D7B-A6ED-5064C3AE1C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:*","matchCriteriaId":"FFC68D88-3CD3-4A3D-A01B-E9DBACD9B9CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"6D8D654F-2442-4EA0-AF89-6AC2CD214772"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"8BCF87FD-9358-42A5-9917-25DF0180A5A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:6.7_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"9835090F-120A-4A53-B4A8-375DD6999167"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"8E5B5F9E-D749-45E5-8538-7CED9620C00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"188019BF-3700-4B3F-BFA5-553B2B545B7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"9B8B2E32-B838-4E51-BAA2-764089D2A684"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"4319B943-7B19-468D-A160-5895F7F997A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"39C1ABF5-4070-4AA7-BAB8-4F63E1BD91FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"8036E2AE-4E44-4FA5-AFFB-A3724BFDD654"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"7A584AAA-A14F-4C64-8FED-675DC36F69A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.2_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"D373A806-8A25-4BD4-8511-879D8755C326"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.3_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"CFE6C909-798B-4B7A-9BD4-6741933DBC1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"E9A24D0C-604D-4421-AFA6-5D541DA2E94D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"3A2E3637-B6A6-4DA9-8B0A-E91F22130A45"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"F81F859C-DA89-4D1E-91D3-A000AD646203"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"418488A5-2912-406C-9337-B8E85D0C2B57"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:*","matchCriteriaId":"0AE981D4-0CA1-46FA-8E91-E1A4D5B31383"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F732C7C9-A9CC-4DEF-A8BE-D0F18C944C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.7z:*:*:*:*:*:*:*","matchCriteriaId":"FE561C57-71DE-434A-85BC-1FAAFDCC7058"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndExcluding":"6.9.3-10","matchCriteriaId":"87477201-64C5-490B-AAE1-23D26F774989"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*","matchCriteriaId":"3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*","matchCriteriaId":"693C9F8F-A8C1-4D06-8F31-E085E16E701C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*","matchCriteriaId":"D7B037A8-72A6-4DFF-94B2-D688A5F6F876"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*","matchCriteriaId":"44B8FEDF-6CB0-46E9-9AD7-4445B001C158"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:*","matchCriteriaId":"D5900A25-FDD7-4900-BF7C-F3ECCB714D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*","matchCriteriaId":"58D3B6FD-B474-4B09-B644-A8634A629280"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"F892F1B0-514C-42F7-90AE-12ACDFDC1033"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FD4EEF7C-CC33-4494-8531-7C0CC28A8823"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CBED083-B935-4C47-BBDA-F39D8EA277ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*","matchCriteriaId":"BD6136E8-74DE-48AF-A8AB-B0E93D34870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"CB6476C7-03F2-4939-AB85-69AA524516D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*","matchCriteriaId":"B12243B2-D726-404C-ABFF-F1AB51BA1783"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*","matchCriteriaId":"028ABA8F-4E7B-4CD0-B6FC-3A0941E254BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"ED540469-C4DD-485D-9B89-6877B2A74217"}]}]}],"references":[{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog","source":"secalert@redhat.com","tags":["Broken Link","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0726.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3580","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3746","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/03/18","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538378/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/89852","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2990-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-21","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39767/","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://www.imagemagick.org/script/changelog.php","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0726.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/03/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538378/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/89852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2990-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39767/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://www.imagemagick.org/script/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3715","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2016-3717","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T18:59:07.663","lastModified":"2026-06-17T00:46:14.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image."},{"lang":"es","value":"El codificador LABEL en ImageMagick en versiones anteriores a 6.9.3-10 y 7.x en versiones anteriores a 7.0.1-1 permite a atacantes remotos leer archivos arbitrarios a través de una imagen manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.7z:*:*:*:*:*:*:*","matchCriteriaId":"FE561C57-71DE-434A-85BC-1FAAFDCC7058"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndIncluding":"6.9.3-9","matchCriteriaId":"F89D4030-2804-4CFE-8DC1-66BC99720860"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*","matchCriteriaId":"3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*","matchCriteriaId":"693C9F8F-A8C1-4D06-8F31-E085E16E701C"}]}]}],"references":[{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0726.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3580","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/03/18","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/538378/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2990-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201611-21","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/39767/","source":"secalert@redhat.com"},{"url":"https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.imagemagick.org/script/changelog.php","source":"secalert@redhat.com"},{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0726.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/03/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538378/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2990-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201611-21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39767/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.imagemagick.org/script/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3718","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T18:59:08.960","lastModified":"2026-06-17T00:46:15.097","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image."},{"lang":"es","value":"Los codificadores (1) HTTP y (2) FTP en ImageMagick en versiones anteriores a 6.9.3-10 y 7.x en versiones anteriores a 7.0.1-1 permiten a atacantes remotos llevar a cabo ataques de falsificación de peticiones del lado del servidor (SSRF) a través de una imagen manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T13:27:43.837440Z","id":"CVE-2016-3718","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2022-05-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*","matchCriteriaId":"967EC28A-607F-48F4-AD64-5E3041C768F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:*","matchCriteriaId":"C84EAAE7-0249-4EA1-B8D3-E039B03ACDC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*","matchCriteriaId":"2148300C-ECBD-4ED5-A164-79629859DD43"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:6.7_s390x:*:*:*:*:*:*:*","matchCriteriaId":"837F0D24-99B3-4093-A45A-53ADB0367FCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.2_s390x:*:*:*:*:*:*:*","matchCriteriaId":"357FDE3E-2248-4BCD-B726-97C4D92FDCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.3_s390x:*:*:*:*:*:*:*","matchCriteriaId":"E420B889-BB89-4B64-B0E0-7E9B8545B959"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:*","matchCriteriaId":"B908AEF5-67CE-42D4-961D-C0E7ADB78ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:*","matchCriteriaId":"0F8EB695-5EA3-46D2-941E-D7F01AB99A48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x:*:*:*:*:*:*:*","matchCriteriaId":"1E1DB003-76B8-4D7B-A6ED-5064C3AE1C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:*","matchCriteriaId":"FFC68D88-3CD3-4A3D-A01B-E9DBACD9B9CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"6D8D654F-2442-4EA0-AF89-6AC2CD214772"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"8BCF87FD-9358-42A5-9917-25DF0180A5A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:6.7_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"9835090F-120A-4A53-B4A8-375DD6999167"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"8E5B5F9E-D749-45E5-8538-7CED9620C00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"188019BF-3700-4B3F-BFA5-553B2B545B7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"9B8B2E32-B838-4E51-BAA2-764089D2A684"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"4319B943-7B19-468D-A160-5895F7F997A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"39C1ABF5-4070-4AA7-BAB8-4F63E1BD91FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*","matchCriteriaId":"8036E2AE-4E44-4FA5-AFFB-A3724BFDD654"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"7A584AAA-A14F-4C64-8FED-675DC36F69A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.2_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"D373A806-8A25-4BD4-8511-879D8755C326"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.3_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"CFE6C909-798B-4B7A-9BD4-6741933DBC1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"E9A24D0C-604D-4421-AFA6-5D541DA2E94D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"3A2E3637-B6A6-4DA9-8B0A-E91F22130A45"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"F81F859C-DA89-4D1E-91D3-A000AD646203"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:*","matchCriteriaId":"418488A5-2912-406C-9337-B8E85D0C2B57"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:*","matchCriteriaId":"0AE981D4-0CA1-46FA-8E91-E1A4D5B31383"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F732C7C9-A9CC-4DEF-A8BE-D0F18C944C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.7z:*:*:*:*:*:*:*","matchCriteriaId":"FE561C57-71DE-434A-85BC-1FAAFDCC7058"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndExcluding":"6.9.3-10","matchCriteriaId":"87477201-64C5-490B-AAE1-23D26F774989"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*","matchCriteriaId":"3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*","matchCriteriaId":"693C9F8F-A8C1-4D06-8F31-E085E16E701C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*","matchCriteriaId":"D7B037A8-72A6-4DFF-94B2-D688A5F6F876"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*","matchCriteriaId":"44B8FEDF-6CB0-46E9-9AD7-4445B001C158"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:*","matchCriteriaId":"D5900A25-FDD7-4900-BF7C-F3ECCB714D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*","matchCriteriaId":"58D3B6FD-B474-4B09-B644-A8634A629280"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"F892F1B0-514C-42F7-90AE-12ACDFDC1033"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FD4EEF7C-CC33-4494-8531-7C0CC28A8823"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CBED083-B935-4C47-BBDA-F39D8EA277ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*","matchCriteriaId":"BD6136E8-74DE-48AF-A8AB-B0E93D34870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"CB6476C7-03F2-4939-AB85-69AA524516D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*","matchCriteriaId":"B12243B2-D726-404C-ABFF-F1AB51BA1783"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*","matchCriteriaId":"028ABA8F-4E7B-4CD0-B6FC-3A0941E254BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*","matchCriteriaId":"ED540469-C4DD-485D-9B89-6877B2A74217"}]}]}],"references":[{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0726.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3580","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/03/18","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538378/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2990-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-21","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39767/","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.imagemagick.org/script/changelog.php","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0726.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/03/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538378/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2990-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39767/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.imagemagick.org/script/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3718","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4008","sourceIdentifier":"cve@mitre.org","published":"2016-05-05T18:59:10.380","lastModified":"2026-06-17T00:46:43.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate."},{"lang":"es","value":"La función _asn1_extract_der_octet en lib/decoding.c en GNU Libtasn1 en versiones anteriores a 4.8, cuando se utiliza sin el indicador ASN1_DECODE_FLAG_STRICT_DER, permite a atacantes remotos provocar una denegación de servicio (recursión infinita) a través de un certificado manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtasn1:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"7838BCC2-1E49-4595-B3FE-17A4EFF4A1CD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*","matchCriteriaId":"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=a6e0a0b58f5cdaf4e9beca5bce69c09808cbb625","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=f435825c0f527a8e52e6ffbc3ad0bc60531d537e","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182299.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182907.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183221.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3568","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/11/3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2957-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2957-2","source":"cve@mitre.org"},{"url":"https://lists.gnu.org/archive/html/help-libtasn1/2016-04/msg00009.html","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201703-05","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=a6e0a0b58f5cdaf4e9beca5bce69c09808cbb625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=f435825c0f527a8e52e6ffbc3ad0bc60531d537e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182907.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/11/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2957-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2957-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.gnu.org/archive/html/help-libtasn1/2016-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201703-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0900","sourceIdentifier":"security_alert@emc.com","published":"2016-05-07T10:59:01.640","lastModified":"2026-06-17T00:38:26.317","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901."},{"lang":"es","value":"Vulnerabilidad de XSS en EMC RSA Authentication Manager en versiones anteriores a 8.1 SP1 P14 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-0901."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_authentication_manager:*:sp1:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"90C59BD9-11AA-4695-B7CA-C87E8E058121"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/May/23","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1035755","source":"security_alert@emc.com"},{"url":"http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/May/23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035755","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0901","sourceIdentifier":"security_alert@emc.com","published":"2016-05-07T10:59:02.640","lastModified":"2026-06-17T00:38:26.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900."},{"lang":"es","value":"Vulnerabilidad de XSS en EMC RSA Authentication Manager en versiones anteriores a 8.1 SP1 P14 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-0900."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_authentication_manager:*:sp1:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"90C59BD9-11AA-4695-B7CA-C87E8E058121"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/May/23","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1035755","source":"security_alert@emc.com"},{"url":"http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/May/23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035755","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0902","sourceIdentifier":"security_alert@emc.com","published":"2016-05-07T10:59:03.720","lastModified":"2026-06-17T00:38:26.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en EMC RSA Authentication Manager en versiones anteriores a 8.1 SP1 P14 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de separación de respuesta HTTP a través de vectores no especificados."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_authentication_manager:*:sp1:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"90C59BD9-11AA-4695-B7CA-C87E8E058121"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/May/23","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1035755","source":"security_alert@emc.com"},{"url":"http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2016/May/23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035755","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/93.html\">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>"}},{"cve":{"id":"CVE-2016-2010","sourceIdentifier":"cve@mitre.org","published":"2016-05-07T10:59:07.220","lastModified":"2026-06-17T00:43:15.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011."},{"lang":"es","value":"Vulnerabilidad de XSS en HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00 y 10.01 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-2011."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.20:*:*:*:*:*:*:*","matchCriteriaId":"93A17CB7-36DC-4C72-9CE8-FBD9AE9DBBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.23:*:*:*:*:*:*:*","matchCriteriaId":"286DE555-633A-495C-A598-2DE77C984DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.24:*:*:*:*:*:*:*","matchCriteriaId":"102AFE74-39B0-4BBD-9E07-73E04B1880FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.25:*:*:*:*:*:*:*","matchCriteriaId":"0C22809D-82B4-44DD-BFE6-C68DA0CEF634"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:10.00:*:*:*:*:*:*:*","matchCriteriaId":"78F62362-4E86-49AA-A577-822CA8EA81AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:10.01:*:*:*:*:*:*:*","matchCriteriaId":"90F0CEDE-3476-4B75-970E-BB7527D047B0"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035767","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2011","sourceIdentifier":"cve@mitre.org","published":"2016-05-07T10:59:08.330","lastModified":"2026-06-17T00:43:15.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010."},{"lang":"es","value":"Vulnerabilidad de XSS en HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00 y 10.01 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-2010."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.20:*:*:*:*:*:*:*","matchCriteriaId":"93A17CB7-36DC-4C72-9CE8-FBD9AE9DBBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.23:*:*:*:*:*:*:*","matchCriteriaId":"286DE555-633A-495C-A598-2DE77C984DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.24:*:*:*:*:*:*:*","matchCriteriaId":"102AFE74-39B0-4BBD-9E07-73E04B1880FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.25:*:*:*:*:*:*:*","matchCriteriaId":"0C22809D-82B4-44DD-BFE6-C68DA0CEF634"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:10.00:*:*:*:*:*:*:*","matchCriteriaId":"78F62362-4E86-49AA-A577-822CA8EA81AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:10.01:*:*:*:*:*:*:*","matchCriteriaId":"90F0CEDE-3476-4B75-970E-BB7527D047B0"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035767","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2012","sourceIdentifier":"cve@mitre.org","published":"2016-05-07T10:59:09.423","lastModified":"2026-06-17T00:43:15.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors."},{"lang":"es","value":"HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00 y 10.01 permite a atacantes remotos eludir la autenticación a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.20:*:*:*:*:*:*:*","matchCriteriaId":"93A17CB7-36DC-4C72-9CE8-FBD9AE9DBBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.23:*:*:*:*:*:*:*","matchCriteriaId":"286DE555-633A-495C-A598-2DE77C984DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.24:*:*:*:*:*:*:*","matchCriteriaId":"102AFE74-39B0-4BBD-9E07-73E04B1880FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.25:*:*:*:*:*:*:*","matchCriteriaId":"0C22809D-82B4-44DD-BFE6-C68DA0CEF634"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:10.00:*:*:*:*:*:*:*","matchCriteriaId":"78F62362-4E86-49AA-A577-822CA8EA81AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:10.01:*:*:*:*:*:*:*","matchCriteriaId":"90F0CEDE-3476-4B75-970E-BB7527D047B0"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035767","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2013","sourceIdentifier":"cve@mitre.org","published":"2016-05-07T10:59:10.470","lastModified":"2026-06-17T00:43:15.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00 y 10.01 permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.20:*:*:*:*:*:*:*","matchCriteriaId":"93A17CB7-36DC-4C72-9CE8-FBD9AE9DBBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.23:*:*:*:*:*:*:*","matchCriteriaId":"286DE555-633A-495C-A598-2DE77C984DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.24:*:*:*:*:*:*:*","matchCriteriaId":"102AFE74-39B0-4BBD-9E07-73E04B1880FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:9.25:*:*:*:*:*:*:*","matchCriteriaId":"0C22809D-82B4-44DD-BFE6-C68DA0CEF634"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:10.00:*:*:*:*:*:*:*","matchCriteriaId":"78F62362-4E86-49AA-A577-822CA8EA81AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager_i:10.01:*:*:*:*:*:*:*","matchCriteriaId":"90F0CEDE-3476-4B75-970E-BB7527D047B0"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035767","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-6551","sourceIdentifier":"secure@symantec.com","published":"2016-05-07T14:59:01.197","lastModified":"2026-06-17T00:31:03.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for key-exchange packets."},{"lang":"es","value":"Veritas NetBackup 7.x hasta la versión 7.5.0.7 y 7.6.0.x hasta la versión 7.6.0.4 y NetBackup Appliance hasta la versión 2.5.4 y 2.6.0.x hasta la versión 2.6.0.4 no utilizan TLS para el tráfico de la consola de administración al servidor NBU, lo que permite a atacantes remotos obtener información sensible husmeando la red en busca de paquetes de intercambio de clave."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:1.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D99C75EB-3507-4704-A565-AB2CF5369A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:1.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EC406C50-6C2B-4160-890F-29DC444DC886"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:1.2:*:*:*:*:*:*:*","matchCriteriaId":"778FBECC-2C4C-45D5-A1E8-6678C541AA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.0:*:*:*:*:*:*:*","matchCriteriaId":"46E3145F-197D-4860-AF50-8970CC803BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A17E4E50-9D65-460F-8BE1-27A174A6254A"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5A861A3-FF48-47AD-BDE0-323E12CB7819"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7EC7B2BA-DC01-4611-921B-C8C94651F142"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.5:*:*:*:*:*:*:*","matchCriteriaId":"B7002266-E3B0-4A96-BE09-741A30E74B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"04D8275D-EE04-4BF7-9482-AE75A2E21F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5C24158D-E922-4B07-8F67-58DD714346E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"658F2C00-3B49-4011-9F83-62ED504F7476"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.6:*:*:*:*:*:*:*","matchCriteriaId":"AE16FC2F-C5E8-43E5-A644-F4D5FF06B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A48563EA-D19E-4B62-8AE9-BE15D5EB8932"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6E294AFF-E630-4A50-B3DE-E16AF3E595E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B9465004-79E0-46B0-B66A-48F3665ADA8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A0C61-6B44-4344-AFC9-834B5B653B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AA84E2A3-6A57-4753-A6A6-61F6C4D817E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1F92467E-E91F-464F-B8C0-8724E4DB83CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_appliance:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"16F9CE3B-72E9-4A37-8E42-5495AB4E8C33"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.0:*:*:*:*:*:*:*","matchCriteriaId":"ACD568CB-7839-4DD4-AA6C-E3F14D54477B"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4356423A-17CF-4013-977B-F151BB5CC206"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D6B50CD5-C171-4E78-A22F-9B9ADFF505CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EF9E0A06-0022-43B1-9DFD-025D4FB13055"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B3F9EB4-412C-4CC0-95FC-8C56F1AAD880"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F34BBD63-741B-4AAE-BFFE-7BAACFF1BCA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"40301990-E272-40C0-90B7-FCDA3B4B5CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EAED7E07-8FFC-48AD-9D50-0D65ACEE1529"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9163537F-6657-4758-A980-6CCC8283F51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FAD0859E-A3D1-416B-B841-EB052CAF6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"54A5CAC2-5DD8-4FAE-B661-32A0017A557A"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D741998D-20C0-4627-BF23-023D6C341746"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"01F5DFE7-64AF-4228-A30A-340B7BAA86EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D479700-9A02-466B-A2CD-107F6EAF4AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E185B358-0805-4241-9960-23216974BEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B672A9C-7549-4120-A966-D24090575506"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E464653E-CFE4-4F9E-A021-DB16D9CE6046"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2C760A6C-ADA4-4D5D-8C63-54B1B93B1DEF"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035704","source":"secure@symantec.com"},{"url":"https://www.veritas.com/content/support/en_US/security/VTS16-001.html","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.veritas.com/content/support/en_US/security/VTS16-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2350","sourceIdentifier":"cret@cert.org","published":"2016-05-07T14:59:03.617","lastModified":"2026-06-17T00:43:52.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) getimageajax.php, (2) move_partition_frame.html, or (3) wmInfo.html."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS sobre el Accellion File Transfer Appliance (FTA) en versiones anteriores a FTA_9_12_40 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de la entrada no especificada a (1) getimageajax.php, (2) move_partition_frame.html o (3) wmInfo.html."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"9_11_210","matchCriteriaId":"B26E9441-E350-4EAB-9620-A13EA9AA5013"}]}]}],"references":[{"url":"http://devco.re/blog/2016/04/21/how-I-hacked-facebook-and-found-someones-backdoor-script-eng-ver/","source":"cret@cert.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/505560","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://devco.re/blog/2016/04/21/how-I-hacked-facebook-and-found-someones-backdoor-script-eng-ver/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/505560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-2454","sourceIdentifier":"security@android.com","published":"2016-05-09T10:59:32.500","lastModified":"2026-06-17T00:44:05.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Qualcomm hardware video codec in Android before 2016-05-01 on Nexus 5 devices allows remote attackers to cause a denial of service (reboot) via a crafted file, aka internal bug 26221024."},{"lang":"es","value":"El códec hardware de vídeo Qualcomm en Android en versiones anteriores a 2016-05-01 sobre dispositivos Nexus 5 permite a atacantes remotos to provocar una denegación de servicio (reinicio) a través de un archivo manipulado, también conocido como error interno 26221024."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_5:-:*:*:*:*:*:*:*","matchCriteriaId":"25DB8689-116F-49B5-91F5-BCBA8854BD42"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2457","sourceIdentifier":"security@android.com","published":"2016-05-09T10:59:34.797","lastModified":"2026-06-17T00:44:05.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179."},{"lang":"es","value":"server/pm/UserManagerService.java en Wi-Fi en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-05-01 permite a atacantes eludir restricciones previstas sobre cambios de configuración Wi-Fi aprovechando acceso como invitado, también conocido como error interno 27411179."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/12332e05f632794e18ea8c4ac52c98e82532e5db","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/12332e05f632794e18ea8c4ac52c98e82532e5db","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2458","sourceIdentifier":"security@android.com","published":"2016-05-09T10:59:36.190","lastModified":"2026-06-17T00:44:06.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The compose functionality in AOSP Mail in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly restrict attachments, which allows attackers to obtain sensitive information via a crafted application, related to ComposeActivity.java and ComposeActivityEmail.java, aka internal bug 27335139."},{"lang":"es","value":"La funcionalidad compose en AOSP Mail en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-05-01 no restringe adecuadamente archivos adjuntos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, relacionado con ComposeActivity.java y ComposeActivityEmail.java, también conocido como error interno 27335139."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/apps/Email/+/2791f0b33b610247ef87278862e66c6045f89693","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/packages/apps/UnifiedEmail/+/a55168330d9326ff2120285763c818733590266a","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/apps/Email/+/2791f0b33b610247ef87278862e66c6045f89693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/packages/apps/UnifiedEmail/+/a55168330d9326ff2120285763c818733590266a","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2459","sourceIdentifier":"security@android.com","published":"2016-05-09T10:59:37.297","lastModified":"2026-06-17T00:44:06.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27556038."},{"lang":"es","value":"mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-05-01 no inicializa determinadas estructuras de datos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, relacionado con IGraphicBufferConsumer.cpp y IGraphicBufferProducer.cpp, también conocido como error interno 27556038."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1BBFD29-6A53-4B1E-9611-680442CD04EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:google:android_one:-:*:*:*:*:*:*:*","matchCriteriaId":"50A96E21-4545-41AD-9FDB-E6F2B59F2DEF"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_5:-:*:*:*:*:*:*:*","matchCriteriaId":"25DB8689-116F-49B5-91F5-BCBA8854BD42"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_5x:-:*:*:*:*:*:*:*","matchCriteriaId":"881D2748-D79A-491F-97AA-BB83BBDFD348"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_6:-:*:*:*:*:*:*:*","matchCriteriaId":"065B6512-4BB7-4A7D-B5C8-61E27B07D588"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_6p:-:*:*:*:*:*:*:*","matchCriteriaId":"A988DE0D-BFF2-453E-B502-A53F7976145A"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_7_\\(2013\\):-:*:*:*:*:*:*:*","matchCriteriaId":"8C58736F-CD29-489E-95AF-4066E688705D"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_9:-:*:*:*:*:*:*:*","matchCriteriaId":"1018566D-5DBE-44BD-BA05-1F6A6375C32F"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_player:-:*:*:*:*:*:*:*","matchCriteriaId":"C28515A5-7911-40B0-971D-9F593142170E"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:pixel_c:-:*:*:*:*:*:*:*","matchCriteriaId":"9526852E-8BF4-42AA-A9BC-84FEC564B871"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2460","sourceIdentifier":"security@android.com","published":"2016-05-09T10:59:38.360","lastModified":"2026-06-17T00:44:06.303","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27555981."},{"lang":"es","value":"mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-05-01 no inicializa determinadas estructuras de datos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, relacionado con IGraphicBufferConsumer.cpp y IGraphicBufferProducer.cpp, también conocido como error interno 27555981."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5207","sourceIdentifier":"secalert@redhat.com","published":"2016-05-09T20:59:00.133","lastModified":"2026-06-17T00:28:40.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified methods."},{"lang":"es","value":"Apache Cordova iOS en versiones anteriores a 4.0.0 podrían permitir a atacantes eludir un mecanismo de protección de lista blanca de URL en una aplicación y cargar recursos arbitrarios aprovechando métodos no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"},{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cordova:*:*:*:*:*:iphone_os:*:*","versionEndIncluding":"3.9.1","matchCriteriaId":"BA6EE506-56CA-4B72-9C7B-DF832C3BFF2B"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN35341085/index.html","source":"secalert@redhat.com"},{"url":"http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000058.html","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/136840/Apache-Cordova-iOS-3.9.1-Access-Bypass.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/538211/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/88764","source":"secalert@redhat.com"},{"url":"https://cordova.apache.org/announcements/2016/04/27/security.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN35341085/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/136840/Apache-Cordova-iOS-3.9.1-Access-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538211/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/88764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cordova.apache.org/announcements/2016/04/27/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5208","sourceIdentifier":"secalert@redhat.com","published":"2016-05-09T20:59:02.417","lastModified":"2026-06-17T00:28:40.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link."},{"lang":"es","value":"Apache Cordova iOS en versiones anteriores a 4.0.0 permite a atacantes remotos ejecutar plugins arbitrarios a través de un enlace."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cordova:*:*:*:*:*:iphone_os:*:*","versionEndIncluding":"3.9.1","matchCriteriaId":"BA6EE506-56CA-4B72-9C7B-DF832C3BFF2B"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN41772178/index.html","source":"secalert@redhat.com"},{"url":"http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000059.html","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/136839/Apache-Cordova-iOS-3.9.1-Arbitrary-Plugin-Execution.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/538210/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/88797","source":"secalert@redhat.com"},{"url":"https://cordova.apache.org/announcements/2016/04/27/security.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN41772178/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/136839/Apache-Cordova-iOS-3.9.1-Arbitrary-Plugin-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538210/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/88797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cordova.apache.org/announcements/2016/04/27/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4561","sourceIdentifier":"security@debian.org","published":"2016-05-10T19:59:04.307","lastModified":"2026-06-17T00:47:47.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message."},{"lang":"es","value":"Vulnerabilidad de XSS en la función cgierror en CGI.pm en ikiwiki en versiones anteriores a 3.20160506 podría permitir a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados que implican un mensaje de error."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:*:*:*:*:*:*:*:*","versionEndIncluding":"3.20160121","matchCriteriaId":"8F8F89FC-3CF4-40DA-933B-4D0C3A1F2253"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://ikiwiki.info/security/#index43h2","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://source.ikiwiki.branchable.com/?p=source.git%3Ba=commitdiff%3Bh=32ef584dc5abb6ddb9f794f94ea0b2934967bba7","source":"security@debian.org"},{"url":"http://www.debian.org/security/2016/dsa-3571","source":"security@debian.org"},{"url":"http://ikiwiki.info/security/#index43h2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://source.ikiwiki.branchable.com/?p=source.git%3Ba=commitdiff%3Bh=32ef584dc5abb6ddb9f794f94ea0b2934967bba7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0149","sourceIdentifier":"secure@microsoft.com","published":"2016-05-11T01:59:04.993","lastModified":"2026-06-17T00:37:00.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows man-in-the-middle attackers to obtain sensitive cleartext information via vectors involving injection of cleartext data into the client-server data stream, aka \"TLS/SSL Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6 y 4.6.1 permite a atacantes man-in-the-middle obtener información sensible en texto plano a través de vectores que implican la inyección de datos en texto claro en el flujo de datos cliente-servidor, también conocido como \"TLS/SSL Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D400E856-2B2E-4CEA-8CA5-309FDF371CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8EDC4407-7E92-4E60-82F0-0C87D1860D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"40B3A045-B08A-44E0-91BE-726753F6A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*","matchCriteriaId":"280FE663-23BE-45D2-9B31-5F577E390B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FF0B660D-1F30-4D45-B98B-726EDB8CB90F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90026","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035842","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-065","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/90026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0168","sourceIdentifier":"secure@microsoft.com","published":"2016-05-11T01:59:07.680","lastModified":"2026-06-17T00:37:03.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to obtain sensitive information via a crafted document, aka \"Windows Graphics Component Information Disclosure Vulnerability,\" a different vulnerability than CVE-2016-0169."},{"lang":"es","value":"GDI en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold y 1511 permite a atacantes remotos obtener información sensible a través de un documento manipulado, también conocido como \"Windows Graphics Component Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2016-0169."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*","matchCriteriaId":"FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*","matchCriteriaId":"7519928D-0FF2-4584-8058-4C7764CD5671"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*","matchCriteriaId":"80EB5690-B20F-457A-A202-FBADAA17E05C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137094/Microsoft-Windows-gdi32.dll-Information-Disclosure.html","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/89862","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035823","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-055","source":"secure@microsoft.com"},{"url":"http://packetstormsecurity.com/files/137094/Microsoft-Windows-gdi32.dll-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/89862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0169","sourceIdentifier":"secure@microsoft.com","published":"2016-05-11T01:59:08.807","lastModified":"2026-06-17T00:37:03.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to obtain sensitive information via a crafted document, aka \"Windows Graphics Component Information Disclosure Vulnerability,\" a different vulnerability than CVE-2016-0168."},{"lang":"es","value":"GDI en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold y 1511 permite a atacantes remotos obtener información sensible a través de un documento manipulado, también conocido como \"Windows Graphics Component Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2016-0168."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*","matchCriteriaId":"7519928D-0FF2-4584-8058-4C7764CD5671"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137095/Microsoft-Windows-gdi32.dll-Data-Copy.html","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/89863","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035823","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-055","source":"secure@microsoft.com"},{"url":"http://packetstormsecurity.com/files/137095/Microsoft-Windows-gdi32.dll-Data-Copy.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/89863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0181","sourceIdentifier":"secure@microsoft.com","published":"2016-05-11T01:59:21.347","lastModified":"2026-06-17T00:37:04.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor Code Integrity (HVCI) protection mechanism and perform RWX markings of kernel-mode pages via a crafted application, aka \"Hypervisor Code Integrity Security Feature Bypass.\""},{"lang":"es","value":"Microsoft Windows 10 Gold y 1511 permite a usuarios locales eludir el mecanismo de protección Virtual Secure Mode Hypervisor Code Integrity (HVCI) y llevar a cabo marcados RWX de páginas de modo kernel a través de una aplicación manipulada, también conocido como \"Hypervisor Code Integrity Security Feature Bypass\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90048","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035843","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-066","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/90048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0190","sourceIdentifier":"secure@microsoft.com","published":"2016-05-11T01:59:32.130","lastModified":"2026-06-17T00:37:05.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 does not properly check whether RemoteFX RDP USB disk accesses originate from the user who mounted a disk, which allows local users to read arbitrary files on these disks via RemoteFX requests, aka \"Remote Desktop Protocol Drive Redirection Information Disclosure Vulnerability.\""},{"lang":"es","value":"Volume Manager Driver en Microsoft Windows 8.1, Windows Server 2012 Gold y R2 y Windows RT 8.1 no verifica correctamente si accesos a disco RemoteFX RDP USB fueron originados desde el usuario que montó un disco, lo que permite a usuarios locales leer archivos arbitrarios sobre estos discos a través de peticiones RemoteFX, también conocido como \"Remote Desktop Protocol Drive Redirection Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90075","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035844","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-067","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/90075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0194","sourceIdentifier":"secure@microsoft.com","published":"2016-05-11T01:59:36.963","lastModified":"2026-06-17T00:37:05.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 10 y 11 permite a atacantes remotos eludir permisos de archivo y obtener información sensible a través de un sitio web manipulado, también conocido como \"Internet Explorer Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90004","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1035820","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-275","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/90004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1113","sourceIdentifier":"psirt@adobe.com","published":"2016-05-11T01:59:42.403","lastModified":"2026-06-17T00:41:19.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Adobe ColdFusion 10 en versiones anteriores a Update 19, 11 en versiones anteriores a Update 8 y 2016 en versiones anteriores a Update 1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:-:*:*:*:*:*:*","matchCriteriaId":"BB4E08F7-C133-4083-906A-335B9880BA04"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update1:*:*:*:*:*:*","matchCriteriaId":"1C4D259E-56B1-4D53-80A9-52D0687779C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update10:*:*:*:*:*:*","matchCriteriaId":"191E8CC6-8AD5-40DE-8B5D-1A8BCAEE855D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update11:*:*:*:*:*:*","matchCriteriaId":"FDAC841B-3FE8-46F6-84B4-650D939225F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update12:*:*:*:*:*:*","matchCriteriaId":"AC034BEB-0ADB-4340-8AFB-30EF67E72815"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update13:*:*:*:*:*:*","matchCriteriaId":"C8F1ABAB-C4FF-45FD-8C64-23E79F40C043"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update14:*:*:*:*:*:*","matchCriteriaId":"F56CFA71-3D5E-4A0B-BA4C-9756D0727F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update15:*:*:*:*:*:*","matchCriteriaId":"4DB7821D-F4A7-4772-A25B-D925C90478CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update16:*:*:*:*:*:*","matchCriteriaId":"0BB6DF8F-4CA1-448E-8E48-7C2165EC3AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update17:*:*:*:*:*:*","matchCriteriaId":"304F3518-82F3-4566-A44D-3FA8D1FEEBCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update18:*:*:*:*:*:*","matchCriteriaId":"B6F8C00C-60CA-4A53-92DF-FB2BF09CF9E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update2:*:*:*:*:*:*","matchCriteriaId":"09F8F645-DD28-4159-877E-40B4C8CDA4CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update3:*:*:*:*:*:*","matchCriteriaId":"1B83D6CF-4C45-4B7A-9AFC-9961E1FE0686"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update4:*:*:*:*:*:*","matchCriteriaId":"F54FF25A-EF5B-4DE0-802C-C9B00A963C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update5:*:*:*:*:*:*","matchCriteriaId":"705E7F38-9407-4148-835E-5AB994C05F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update6:*:*:*:*:*:*","matchCriteriaId":"DD7A193C-6CE4-4B80-9897-934BC915627F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update7:*:*:*:*:*:*","matchCriteriaId":"71302041-9BB6-406E-9E77-99AD1594C5C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update8:*:*:*:*:*:*","matchCriteriaId":"34472770-FFCE-4088-8658-FA0A552BEAA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update9:*:*:*:*:*:*","matchCriteriaId":"61BC9D5B-1208-4613-BD23-FEA9C404A503"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*","matchCriteriaId":"E217CE63-07DC-4A88-8877-181F33A21C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*","matchCriteriaId":"7D4BD25E-6856-40EC-98A8-ACB540992487"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*","matchCriteriaId":"82F81CF8-1482-4731-AD34-677B8D6B930B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*","matchCriteriaId":"57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*","matchCriteriaId":"8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*","matchCriteriaId":"96C50CD1-CE75-4D70-AD65-2DB6027D806A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*","matchCriteriaId":"AE1B1190-4699-4FB0-AD46-DF0233B5BA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*","matchCriteriaId":"827CB550-5078-4FD5-8B1F-616C06912AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*","matchCriteriaId":"B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90507","source":"psirt@adobe.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035829","source":"psirt@adobe.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/coldfusion/apsb16-16.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/coldfusion/apsb16-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1115","sourceIdentifier":"psirt@adobe.com","published":"2016-05-11T01:59:44.810","lastModified":"2026-06-17T00:41:19.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate."},{"lang":"es","value":"Adobe ColdFusion 10 en versiones anteriores a Update 19, 11 en versiones anteriores a Update 8 y 2016 en versiones anteriores a Update 1 no maneja correctamente comodines en campos name de certificados X.509, lo que podría permitir a atacantes man-in-the-middle suplantar servidoresservers a través de un certificado manipulado."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:-:*:*:*:*:*:*","matchCriteriaId":"BB4E08F7-C133-4083-906A-335B9880BA04"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update1:*:*:*:*:*:*","matchCriteriaId":"1C4D259E-56B1-4D53-80A9-52D0687779C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update10:*:*:*:*:*:*","matchCriteriaId":"191E8CC6-8AD5-40DE-8B5D-1A8BCAEE855D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update11:*:*:*:*:*:*","matchCriteriaId":"FDAC841B-3FE8-46F6-84B4-650D939225F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update12:*:*:*:*:*:*","matchCriteriaId":"AC034BEB-0ADB-4340-8AFB-30EF67E72815"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update13:*:*:*:*:*:*","matchCriteriaId":"C8F1ABAB-C4FF-45FD-8C64-23E79F40C043"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update14:*:*:*:*:*:*","matchCriteriaId":"F56CFA71-3D5E-4A0B-BA4C-9756D0727F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update15:*:*:*:*:*:*","matchCriteriaId":"4DB7821D-F4A7-4772-A25B-D925C90478CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update16:*:*:*:*:*:*","matchCriteriaId":"0BB6DF8F-4CA1-448E-8E48-7C2165EC3AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update17:*:*:*:*:*:*","matchCriteriaId":"304F3518-82F3-4566-A44D-3FA8D1FEEBCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update18:*:*:*:*:*:*","matchCriteriaId":"B6F8C00C-60CA-4A53-92DF-FB2BF09CF9E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update2:*:*:*:*:*:*","matchCriteriaId":"09F8F645-DD28-4159-877E-40B4C8CDA4CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update3:*:*:*:*:*:*","matchCriteriaId":"1B83D6CF-4C45-4B7A-9AFC-9961E1FE0686"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update4:*:*:*:*:*:*","matchCriteriaId":"F54FF25A-EF5B-4DE0-802C-C9B00A963C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update5:*:*:*:*:*:*","matchCriteriaId":"705E7F38-9407-4148-835E-5AB994C05F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update6:*:*:*:*:*:*","matchCriteriaId":"DD7A193C-6CE4-4B80-9897-934BC915627F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update7:*:*:*:*:*:*","matchCriteriaId":"71302041-9BB6-406E-9E77-99AD1594C5C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update8:*:*:*:*:*:*","matchCriteriaId":"34472770-FFCE-4088-8658-FA0A552BEAA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update9:*:*:*:*:*:*","matchCriteriaId":"61BC9D5B-1208-4613-BD23-FEA9C404A503"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*","matchCriteriaId":"E217CE63-07DC-4A88-8877-181F33A21C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*","matchCriteriaId":"7D4BD25E-6856-40EC-98A8-ACB540992487"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*","matchCriteriaId":"82F81CF8-1482-4731-AD34-677B8D6B930B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*","matchCriteriaId":"57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*","matchCriteriaId":"8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*","matchCriteriaId":"96C50CD1-CE75-4D70-AD65-2DB6027D806A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*","matchCriteriaId":"AE1B1190-4699-4FB0-AD46-DF0233B5BA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*","matchCriteriaId":"827CB550-5078-4FD5-8B1F-616C06912AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*","matchCriteriaId":"B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90514","source":"psirt@adobe.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035829","source":"psirt@adobe.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/coldfusion/apsb16-16.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/coldfusion/apsb16-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1236","sourceIdentifier":"security@debian.org","published":"2016-05-11T21:59:00.123","lastModified":"2026-06-17T00:41:31.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a (a) file or (b) directory in a repository."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en (1) revision.php, (2) log.php, (3) listing.php y (4) comp.php en WebSVN permite a atacantes dependientes de contexto inyectar secuencias de comandos web o HTML arbitrarios a través de el nombre de un (a) archivo o (b) directorio en un repositorio."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:websvn:websvn:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C70370-1F0B-4F83-AB3C-1C4F9D431263"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3572","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/05/22","source":"security@debian.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333673","source":"security@debian.org"},{"url":"http://www.debian.org/security/2016/dsa-3572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/05/22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3712","sourceIdentifier":"secalert@redhat.com","published":"2016-05-11T21:59:02.063","lastModified":"2026-06-17T00:46:14.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode."},{"lang":"es","value":"Desbordamiento de entero en el módulo VGA en QEMU permite a usuarios de SO invitado locales provocar una denegación de servicio (lectura fuera de límites y caída de proceso QEMU) editando registros VGA en modo VBE."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:x86:*","matchCriteriaId":"868DBD6C-E2FB-4710-969A-AC8C5A63B62F"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:x86:*","matchCriteriaId":"846F21C6-3D7F-4092-9C68-D5BEAFF7916F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"26A04769-0D4E-4B7B-B54C-C686FB69D85A"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.6.0:rc0:*:*:*:*:*:*","matchCriteriaId":"544B3E62-7AE7-4925-9E50-CAFDAD5A3851"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B8C11472-2B2A-4110-A04B-5CFBA0763432"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ECD3B63B-1388-4C24-B9B9-043C04FE1F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B10C154A-F559-4BE1-94AE-8619D4634564"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"F7126355-4164-4E54-BCC3-D3D6D1E5AF81"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"21690BAC-2129-4A33-9B48-1F3BF30072A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"DE91B02A-0F07-437D-8AFC-38541C5A04AD"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-2585.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0621.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX212736","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3573","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/09/4","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90314","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035794","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-179.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg01196.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2585.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0621.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX212736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/09/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-179.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg01196.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]}],"evaluatorComment":"CWE-190: Integer Overflow or Wraparound"}},{"cve":{"id":"CVE-2016-4496","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-05-12T01:59:11.620","lastModified":"2026-06-17T00:47:40.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow."},{"lang":"es","value":"Panasonic FPWIN Pro 5.x hasta la versión 7.x en versiones anteriores a 7.130 permite a usuarios locales provocar una denegación de servicio (escritura fuera de límites) o posiblemente tener otro impacto no especificado desencadenando un valor de índice manipulado, según lo demostrado por un desbordamiento de entero."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panasonic:fpwin_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"61AC28EA-C106-4DF3-B1E6-A2F882B23B38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90520","source":"ics-cert@hq.dhs.gov"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-333/","source":"ics-cert@hq.dhs.gov"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-335/","source":"ics-cert@hq.dhs.gov"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-336/","source":"ics-cert@hq.dhs.gov"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-337/","source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01","source":"ics-cert@hq.dhs.gov","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/90520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-333/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-335/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-336/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-337/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4497","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-05-12T01:59:12.683","lastModified":"2026-06-17T00:47:40.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\""},{"lang":"es","value":"Panasonic FPWIN Pro 5.x hasta la versión 7.x en versiones anteriores a 7.130 permite a usuarios locales provocar una denegación de servicio o posiblemente tener otro impacto no especificado a través de vectores que aprovechan \"confusión de tipo\"."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panasonic:fpwin_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"61AC28EA-C106-4DF3-B1E6-A2F882B23B38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90523","source":"ics-cert@hq.dhs.gov"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-334/","source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01","source":"ics-cert@hq.dhs.gov","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/90523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-334/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4498","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-05-12T01:59:13.730","lastModified":"2026-06-17T00:47:40.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors."},{"lang":"es","value":"Panasonic FPWIN Pro 5.x hasta la versión 7.x en versiones anteriores a 7.130 accede a un puntero no inicializado, lo que permite a usuarios locales provocar una denegación de servicio o posiblemente tener otro impacto no especificado a través de vectores desconocidos."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.1,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panasonic:fpwin_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"61AC28EA-C106-4DF3-B1E6-A2F882B23B38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90521","source":"ics-cert@hq.dhs.gov"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-332/","source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01","source":"ics-cert@hq.dhs.gov","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/90521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-332/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4499","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-05-12T01:59:14.857","lastModified":"2026-06-17T00:47:40.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (application crash) via unspecified vectors."},{"lang":"es","value":"Desbordamiento de buffer basado en memoria dinámica en Panasonic FPWIN Pro 5.x hasta la versión 7.x en versiones anteriores a 7.130 permite a usuarios locales provocar una denegación de servicio (caída de aplicación) a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panasonic:fpwin_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"61AC28EA-C106-4DF3-B1E6-A2F882B23B38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90522","source":"ics-cert@hq.dhs.gov"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-330/","source":"ics-cert@hq.dhs.gov"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-331/","source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/90522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-330/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-331/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-8099","sourceIdentifier":"cve@mitre.org","published":"2016-05-13T16:59:05.873","lastModified":"2026-06-17T00:34:02.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP DNS 12.x before 12.0.0 HF1; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 HF10; Enterprise Manager 3.0.0 through 3.1.1; BIG-IQ Cloud and BIG-IQ Security 4.0.0 through 4.5.0; BIG-IQ Device 4.2.0 through 4.5.0; BIG-IQ ADC 4.5.0; BIG-IQ Centralized Management 4.6.0; and BIG-IQ Cloud and Orchestration 1.0.0 on the 3900, 6900, 8900, 8950, 11000, 11050, PB100 and PB200 platforms, when software SYN cookies are configured on virtual servers, allow remote attackers to cause a denial of service (High-Speed Bridge hang) via an invalid TCP segment."},{"lang":"es","value":"F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller y PEM 11.3.x, 11.4.x en versiones anteriores a 11.4.1 HF10, 11.5.x en versiones anteriores a 11.5.4, 11.6.x en versiones anteriores a 11.6.1 y 12.x en versiones anteriores a 12.0.0 HF1; BIG-IP AAM 11.4.x en versiones anteriores a 11.4.1 HF10, 11.5.x en versiones anteriores a 11.5.4, 11.6.x en versiones anteriores a 11.6.1 y 12.x en versiones anteriores a 12.0.0 HF1; BIG-IP DNS 12.x en versiones anteriores a 12.0.0 HF1; BIG-IP Edge Gateway, WebAccelerator y WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x en versiones anteriores a 11.4.1 HF10, 11.5.x en versiones anteriores a 11.5.4 y 11.6.x en versiones anteriores a 11.6.1; BIG-IP PSM 11.3.x y 11.4.x en versiones anteriores a 11.4.1 HF10; Enterprise Manager 3.0.0 hasta la versión 3.1.1; BIG-IQ Cloud and BIG-IQ Security 4.0.0 hasta la versión 4.5.0; BIG-IQ Device 4.2.0 hasta la versión 4.5.0; BIG-IQ ADC 4.5.0; BIG-IQ Centralized Management 4.6.0; y BIG-IQ Cloud and Orchestration 1.0.0 en las plataformas 3900, 6900, 8900, 8950, 11000, 11050, PB100 y PB200, cuando las cookies del sofware SYN están configuradas en servidores virtuales, permite a atacantes remotos provocar una denegación de servicio (cuelgue de High-Speed Bridge) a través de un segmento TCP no válido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"ABF47456-CCA0-4817-9AEF-631DC152174E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FB5F9107-549C-40EF-B355-C7E93A979CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B1A1C200-30B2-4B38-BC74-D11E54530A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1C0312FC-8178-46DE-B4EE-00F2895073BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C9E574F6-34B6-45A6-911D-E5347DA22F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCF94129-8779-4D68-8DD4-B828CA633746"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D94751C-A340-4DE7-821A-5143FA0011E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC69B41E-C22D-48D2-8609-60C018F1F48D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"270EEBF6-46FA-48FC-BEC9-9C0838A86BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"93310708-E1FE-445A-BB1F-7D1F553AEC65"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1AD2C1D2-103E-4B0F-84AA-999F01E695F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"855E91A4-0A0C-4E5C-8019-FB513A793803"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FCCC2092-E109-4FF6-9B85-6C9434269851"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"8923BB93-96C1-417B-9172-4A81E731EBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"475F0EF8-42CB-4099-9C4A-390F946C4924"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"62B0A70A-D101-443E-A543-5EC35E23D66F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C4CB61D3-DF59-4EE0-A0F0-5899850496B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FF646EF0-56C8-492E-A78D-B00ECAA8D851"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0D42B922-A5F7-41FC-A361-BA0E065B5B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"13E6D2CA-CC4F-4317-A842-4DF0693B0CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AB017D7A-3290-4EF5-9647-B488771A5F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4F316C54-FAE4-48D8-9E40-ED358C30BF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AC0F5FD3-45E7-4D55-A3AC-6572FC0682D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5CDEC701-DAB3-4D92-AA67-B886E6693E46"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7507BDFF-5B52-4A06-9F8C-2B6F3958162A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6E0141FA-44E9-460E-B175-29A7FA251301"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8DD27EF7-3329-4009-959F-D2E4D5935E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3755740D-F1DC-4910-ADDD-9D491515201C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EA244A7D-F65D-4114-81C8-CE811959EA10"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5EA9F72C-8344-4370-B511-31BEC8BA63E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"96CF015E-C74B-4215-9103-8087BC1D12AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B276E4DF-69FC-4158-B93A-781A45605034"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"532AAF54-64EF-4852-B4F1-D5E660463704"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"52CD200C-1D14-471F-93C1-027CC676C26C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1850CE-D20D-4677-8CF2-1DB3A4EB33F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0A70B1E2-0B3D-4DE9-8ED9-777F73D0B750"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A7D226F1-6513-4233-BE20-58D7AB24978F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B33B2082-E040-4799-A260-BA687ED8614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A85766A4-2181-4719-ADCF-4FEA0031DB80"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2E93EE3-DB73-468E-87CA-4D277F283648"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B70D2BD5-8E3F-4B57-84EF-3AF40F6378F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D0EDB8E9-E6FB-406E-B1D3-C620F114804C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7507BDFF-5B52-4A06-9F8C-2B6F3958162A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6E0141FA-44E9-460E-B175-29A7FA251301"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8DD27EF7-3329-4009-959F-D2E4D5935E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3755740D-F1DC-4910-ADDD-9D491515201C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EA244A7D-F65D-4114-81C8-CE811959EA10"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5EA9F72C-8344-4370-B511-31BEC8BA63E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"96CF015E-C74B-4215-9103-8087BC1D12AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B276E4DF-69FC-4158-B93A-781A45605034"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"532AAF54-64EF-4852-B4F1-D5E660463704"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"17C28542-51A4-4464-ADF9-C6376F829F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"584853F9-644F-40B2-A28F-1CE9B51F84F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFE665CF-A633-474E-9519-D20E3D3958CF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EBA4FC82-F8FB-4F11-94DA-12D280A18E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0303BEA3-02EB-4F7C-96C5-29E231832CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27CAD4CD-9228-4DE5-A333-2862AC18F24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"283BF2C8-BED6-4FB5-91C0-E53F338F3AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D98BEE39-FD68-49FC-A2A2-8926FFA4BF51"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0003813A-C1A8-4ED1-A04C-7AE961E7FA22"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DEC1A702-0CCB-48F9-A42E-D8C756DD9D76"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"222B4DE7-1D3D-40DF-A9EB-EFABDA8FAEA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"96673865-3D37-4562-831E-3ACE9DFB471E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A49B1D82-3EC2-4E20-8FF5-58248905E964"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7E4CC3E0-F9B8-433F-A2B0-2306144F9B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B8993275-E17E-4A69-8D95-A8229E0E88D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0594DBC5-8470-416C-A5EA-E04F5AB2C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B50BF19F-71B4-47C0-A96E-6EB90FCC6AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BD3A3BA6-6F60-45CA-8F52-687B671B077A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"202B6870-718C-4F8D-9BAB-7ED6385BF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D7863D-B064-4D7A-A66B-C3D3523425FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A9F443F1-C43F-42AD-98E4-AE11C72F363E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"624EFAEB-15C2-422F-BAD1-D0BC37878349"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"76C1525D-46DE-4362-BBAD-095BBF718990"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"259C05BB-6349-4005-9372-21623DC5002D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E5D27D4A-BD5C-4FA9-AA72-F7956298DE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"12F86EB5-D581-4103-A802-44D968BA8D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"36F383ED-8CB5-400D-BFDB-BD5B8CD8C7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6203A11-82C3-4ABA-94E9-085BFF1A0E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E21D6206-4716-47FE-A733-F18343656E94"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D88F8F3B-DD8B-4BB3-BB68-C43583318400"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F677AF16-146D-41A5-ABF3-56DB9C0D6CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CE13DA9F-8460-430E-B939-BF17A7D37A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"70A04EB1-0C2C-4FC0-9E4D-05AFE65503D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"CF93E82F-D38C-4D4D-99EB-E334EE163C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A3471D34-A76C-498A-8C45-1553A579A88B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"24AEF0B2-7C8C-432C-A840-C2441A70343F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EBA4FC82-F8FB-4F11-94DA-12D280A18E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB5D327F-4233-45CE-A557-F7BA717AF057"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"99E5F378-E93E-45F6-A445-F2DAB5C423F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A9538F63-3DC9-42CC-87D5-3CA048AE52A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA52816-C4B7-4B1E-A950-EE9B571CB06B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F2AA5127-5314-4026-905D-937B7B62473F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"09E42DAA-700D-487C-9238-F7F3D75A8C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1B6EA0C0-9C26-4A87-98F1-5B317D606ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4D379372-A226-4230-B1F3-04C696518BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"22FAC35D-2803-49B0-9382-F14594B88FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3C72257B-FF99-4707-A0E3-316D538B1CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"23FF9627-E561-4CF7-A685-6E33D2F6C98C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"524B2D05-508C-47FF-94A0-6CC42060E638"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"974C5213-99F7-4E8A-AC6A-8759697F19C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E288D50B-7EFA-4FC8-938B-EE3765FFA24D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0E3D8A24-0B8D-432B-8F06-D0E1642E7C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A4489382-0668-4CFB-BA89-D54762937CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9850D0AA-B173-47B2-9B69-75E6D1FAF490"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B40837-EC2B-41FB-ACC3-806054EAF28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA2FA6B-3930-432F-8FB5-E73604CEFE42"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_enterprise_manager:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"13753E9F-11AA-41F4-930E-BD9866D03396"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_enterprise_manager:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8D04FC0C-5E44-4DAD-9542-C772EA35916C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_enterprise_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADE47FF9-E13D-41D3-BEA2-EF1B973CB0A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"96673865-3D37-4562-831E-3ACE9DFB471E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"200A9CE9-E56D-4EFA-AC8A-954F945DDDBB"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035873","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035874","source":"cve@mitre.org"},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/35/sol35358312.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/35/sol35358312.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2860","sourceIdentifier":"cve@mitre.org","published":"2016-05-13T16:59:08.060","lastModified":"2026-06-17T00:44:36.553","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions and create arbitrary groups as administrators by leveraging mishandling of the creator ID."},{"lang":"es","value":"La función newEntry en ptserver/ptprocs.c en OpenAFS en versiones anteriores a 1.6.17 permite a usuarios remotos autenticados de dominios Kerberos ajenos eludir las restricciones destinadas al acceso y crear grupos arbitrarios como administradores aprovechando que no maneja correctamente el ID creator."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.16","matchCriteriaId":"A5F1B642-7864-4117-B88C-70331F00BD16"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.openafs.org/?p=openafs.git%3Ba=commitdiff%3Bh=396240cf070a806b91fea81131d034e1399af1e0","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3569","source":"cve@mitre.org"},{"url":"http://www.openafs.org/pages/security/OPENAFS-SA-2016-001.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://lists.openafs.org/pipermail/openafs-announce/2016/000496.html","source":"cve@mitre.org"},{"url":"https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17","source":"cve@mitre.org"},{"url":"http://git.openafs.org/?p=openafs.git%3Ba=commitdiff%3Bh=396240cf070a806b91fea81131d034e1399af1e0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openafs.org/pages/security/OPENAFS-SA-2016-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.openafs.org/pipermail/openafs-announce/2016/000496.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4536","sourceIdentifier":"security@debian.org","published":"2016-05-13T16:59:11.920","lastModified":"2026-06-17T00:47:44.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic."},{"lang":"es","value":"El cliente en OpenAFS en versiones anteriores a 1.6.17 no inicializa adecuadamente las estructuras (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes y (4) ListAddrByAttributes, lo que podría permitir a atacantes remotos obtener información de memoria sensible aprovechando el acceso al tráfico de llamadas RPC."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.16","matchCriteriaId":"A5F1B642-7864-4117-B88C-70331F00BD16"}]}]}],"references":[{"url":"https://lists.openafs.org/pipermail/openafs-announce/2016/000496.html","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"https://www.openafs.org/pages/security/OPENAFS-SA-2016-002.txt","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"https://lists.openafs.org/pipermail/openafs-announce/2016/000496.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.openafs.org/pages/security/OPENAFS-SA-2016-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8530","sourceIdentifier":"psirt@us.ibm.com","published":"2016-05-14T15:59:00.177","lastModified":"2026-06-17T00:34:41.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument."},{"lang":"es","value":"Desbordamiento de buffer basado en pila en la función Initialize en un control ActiveX en IBM SPSS Statistics 19 y 20 en versiones anteriores a 20.0.0.2-IF0008, 21 en versiones anteriores a 21.0.0.2-IF0010, 22 en versiones anteriores a 22.0.0.2-IF0011, 23 en versiones anteriores a 23.0.0.3-IF0001 y 24 en versiones anteriores a 24.0.0.0-IF0003 permite a usuarios remotos autenticados ejecutar código arbitrario a través de un argumento largo."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.3,"impactScore":3.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_statistics:*:*:*:*:*:*:*:*","versionStartIncluding":"19.0.0.0","versionEndIncluding":"19.0.0.2","matchCriteriaId":"DB8BC3AC-FAF2-4944-B603-A358A4D78A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_statistics:*:*:*:*:*:*:*:*","versionStartIncluding":"20.0.0.0","versionEndExcluding":"20.0.0.2","matchCriteriaId":"976A9A5F-8D80-4A98-A356-465CCC041E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_statistics:*:*:*:*:*:*:*:*","versionStartIncluding":"21.0.0.0","versionEndExcluding":"21.0.0.2","matchCriteriaId":"1C2528D3-973F-4A65-8898-8DA57AE8B376"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_statistics:*:*:*:*:*:*:*:*","versionStartIncluding":"22.0.0.0","versionEndExcluding":"22.0.0.2","matchCriteriaId":"E31612B9-D503-4B8C-AA14-0B70B641AA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_statistics:*:*:*:*:*:*:*:*","versionStartIncluding":"23.0.0.0","versionEndExcluding":"23.0.0.3","matchCriteriaId":"F8CB8B4B-5777-4BB6-92FF-324CE1FC659E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spss_statistics:24.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2DE5B450-432B-4296-83C5-53354CB84F81"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21982035","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90524","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035867","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21982035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-2016","sourceIdentifier":"cve@mitre.org","published":"2016-05-14T15:59:05.117","lastModified":"2026-06-17T00:43:15.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user: entries, which allows local users to bypass intended access restrictions by leveraging the configuration of a parent directory."},{"lang":"es","value":"Base-VxFS-50 B.05.00.01 hasta la versión B.05.00.02, Base-VxFS-501 B.05.01.0 hasta la versión B.05.01.03, y Base-VxFS-51 B.05.10.00 hasta la versión B.05.10.02 en HPE HP-UX 11iv3 con VxFS 5.0, VxFS 5.0.1 y VxFS 5.1SP1 no maneja correctamente la herencia ACL para default:class: entries, default:other: entries y default:user: entries, lo que permite a usuarios locales eludir las restricciones destinadas al acceso aprovechando la configuración de un directorio padre."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.11i:v3:*:*:*:*:*:*","matchCriteriaId":"DCD6B8FB-B76F-4F94-B831-CEB3BDF0A275"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:base-vxfs-50:b.05.00.01:*:*:*:*:*:*:*","matchCriteriaId":"F172ABE7-98A6-4B67-97C7-71EB2E73FBEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:base-vxfs-50:b.05.00.02:*:*:*:*:*:*:*","matchCriteriaId":"22D3FC30-932D-4AFB-9A46-DD4028EA16A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:base-vxfs-501:b.05.01.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B0834C-B33E-409A-8C1C-513F94295867"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:base-vxfs-501:b.05.01.01:*:*:*:*:*:*:*","matchCriteriaId":"BBAB5C7A-18EE-488E-AB8E-F206DA27F06C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:base-vxfs-501:b.05.01.03:*:*:*:*:*:*:*","matchCriteriaId":"339AD386-DB43-4FBD-A2FD-2EA588F2E7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:base-vxfs-51:b.05.10.00:*:*:*:*:*:*:*","matchCriteriaId":"51FDC11B-8BFE-4CF7-81CD-4F70630C48BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:base-vxfs-51:b.05.10.02:*:*:*:*:*:*:*","matchCriteriaId":"711A8AB8-AF93-44C8-B63F-D3BDADD9FCF2"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035816","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121749","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1206","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-05-14T16:59:00.133","lastModified":"2026-06-17T00:41:28.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack."},{"lang":"es","value":"La implementación WPS en dispositivos I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S y WN-GDN/R3-U no limita conjeturas de PIN, lo que permite a atacantes remotos obtener acceso a la red a través de un ataque de fuerza bruta."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:iodata:wn-gdn\\/r3_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F4CB7025-E3A5-49DE-95B9-639C3EE65807"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:iodata:wn-gdn\\/r3:-:*:*:*:*:*:*:*","matchCriteriaId":"C73832A9-39D1-4C1A-811D-837344A151D5"},{"vulnerable":false,"criteria":"cpe:2.3:h:iodata:wn-gdn\\/r3-c:-:*:*:*:*:*:*:*","matchCriteriaId":"B693C2CD-528C-44D5-BB6B-86DA0D69426C"},{"vulnerable":false,"criteria":"cpe:2.3:h:iodata:wn-gdn\\/r3-s:-:*:*:*:*:*:*:*","matchCriteriaId":"ABBAED3B-F1EC-4E19-BD67-0F9C5799A299"},{"vulnerable":false,"criteria":"cpe:2.3:h:iodata:wn-gdn\\/r3-u:-:*:*:*:*:*:*:*","matchCriteriaId":"8C06B002-4EC1-466E-A96B-E0475642912E"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN25674893/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000061","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.iodata.jp/support/information/2016/wn-gdnr3_bfa/","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN25674893/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iodata.jp/support/information/2016/wn-gdnr3_bfa/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1207","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-05-14T16:59:01.197","lastModified":"2026-06-17T00:41:28.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier, and WN-G300R3 devices with firmware 1.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en dispositivos I-O DATA DEVICE WN-G300R con firmware 1.12 y versiones anteriores, dispositivos WN-G300R2 con firmware 1.12 y versiones anteriores, y dispositivos WN-G300R3 con firmware 1.01 y versiones anteriores permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:iodata:wn-g300r2:-:*:*:*:*:*:*:*","matchCriteriaId":"8063ED92-D48A-4138-B77A-FF473E67254E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:iodata:wn-g300r2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12","matchCriteriaId":"B656C136-C379-43B4-B033-A80E31C5397B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:iodata:wn-g300r3:-:*:*:*:*:*:*:*","matchCriteriaId":"185631B5-C854-4476-9061-539C67A63E58"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:iodata:wn-g300r3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.01","matchCriteriaId":"17ED79E2-1F25-413B-829A-488C4CF6F469"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:iodata:wn-g300r:-:*:*:*:*:*:*:*","matchCriteriaId":"0EB90734-00AB-4C53-A082-D89BD5F17864"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:iodata:wn-g300r_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12","matchCriteriaId":"FC15BB08-8A72-4EC0-BF74-7AFD7696B014"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN22978346/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000062","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.iodata.jp/support/information/2016/wn-g300r_xss/","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN22978346/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iodata.jp/support/information/2016/wn-g300r_xss/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1664","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-05-14T21:59:04.100","lastModified":"2026-06-17T00:42:22.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site."},{"lang":"es","value":"La función HistoryController::UpdateForCommit en content/renderer/history_controller.cc en Google Chrome en versiones anteriores a 50.0.2661.94 no maneja correctamente la interacción entre las navegaciones hacia delante del submarco y otras navegaciones hacia delante, lo que permite a atacantes remotos lo que permite a atacantes remotos suplantar la barra de dirección a través de un sitio web manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.87","matchCriteriaId":"564CADC6-8AB4-4FE0-8E0A-245E87712035"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B8C6E104-EDBC-481E-85B8-D39ED2058D39"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B74C62D-4A6D-4A4F-ADF6-A508322CD447"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.7z:*:*:*:*:*:*:*","matchCriteriaId":"FE561C57-71DE-434A-85BC-1FAAFDCC7058"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6E89B38A-3697-46DD-BB3F-E8D2373588BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0707.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3564","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/89106","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1848813005/","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/597322","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0707.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/89106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1848813005/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/597322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1665","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-05-14T21:59:05.367","lastModified":"2026-06-17T00:42:22.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code."},{"lang":"es","value":"La clase JSGenericLowering en compiler/js-generic-lowering.cc en Google V8, tal como se utiliza en Google Chrome en versiones anteriores a 50.0.2661.94, no maneja correctamente los operadores de comparación, lo que permite a atacantes remotos obtener información sensible a través de código JavaScript manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B8C6E104-EDBC-481E-85B8-D39ED2058D39"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B74C62D-4A6D-4A4F-ADF6-A508322CD447"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.7z:*:*:*:*:*:*:*","matchCriteriaId":"FE561C57-71DE-434A-85BC-1FAAFDCC7058"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6E89B38A-3697-46DD-BB3F-E8D2373588BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.87","matchCriteriaId":"564CADC6-8AB4-4FE0-8E0A-245E87712035"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0707.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3564","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/89106","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2960-1","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1925463003","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/606181","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0707.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/89106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2960-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1925463003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/606181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1670","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-05-14T21:59:10.383","lastModified":"2026-06-17T00:42:23.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID."},{"lang":"es","value":"Condición de carrera en la función ResourceDispatcherHostImpl::BeginRequest en content/browser/loader/resource_dispatcher_host_impl.cc en Google Chrome en versiones anteriores a 50.0.2661.102 permite a atacantes remotos hacer peticiones HTTP arbitrarias aprovechando el acceso a un proceso de renderizado y reutilizando una petición ID."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.87","matchCriteriaId":"564CADC6-8AB4-4FE0-8E0A-245E87712035"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1080.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90584","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035872","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2960-1","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1608573002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/578882","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2960-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1608573002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/578882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201605-02","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0381","sourceIdentifier":"psirt@us.ibm.com","published":"2016-05-15T01:59:01.457","lastModified":"2026-06-17T00:37:26.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows remote authenticated users to cause a denial of service (configuration outage) via a non-empty value."},{"lang":"es","value":"IBM Cognos TM1 10.2.2 en versiones anteriores a FP5, cuando el ajuste host/pmhub/pm/admin AdminGroups está vacío, permite a usuarios remotos autenticados provocar una denegación de servicio (interrupción de configuración) a través de un valor no vacío."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_tm1:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.2","matchCriteriaId":"A2F288C4-A6F6-492E-BBC4-95213D247BA5"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981936","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035930","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0390","sourceIdentifier":"psirt@us.ibm.com","published":"2016-05-15T01:59:02.847","lastModified":"2026-06-17T00:37:26.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Algorithmics Algo One Algo Risk Application (ARA) 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Algorithmics Algo One Algo Risk Application (ARA) 4.9.1 hasta la versión 5.1.0 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:algo_one:4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A672407B-4966-4A89-BF1B-2644CEAF172B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:algo_one:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"67A8F72A-746C-49E9-9FF3-06C31C0B22FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:algo_one:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"41A5BC2B-44B9-4E5E-8307-4A24258C8639"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981321","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-3152","sourceIdentifier":"secalert@redhat.com","published":"2016-05-16T10:59:01.220","lastModified":"2026-06-17T00:25:25.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a \"BACKRONYM\" attack."},{"lang":"es","value":"Oracle MySQL en versiones anteriores a 5.7.3, Oracle MySQL Connector/C (también conocido como libmysqlclient) en versiones anteriores a 6.1.3 y MariaDB en versiones anteriores a 5.5.44 utiliza la opción --ssl significa que SSL es opcional, lo que permite a atacantes man-in-the-middle suplantar servidores a través de un ataque de degradación de texto plano, también conocida como un ataque \"BACKRONYM\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.2","matchCriteriaId":"926168AA-A4C7-4D0F-B7E6-505F14EC6F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_connector\\/c:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.2","matchCriteriaId":"415DC27C-6D55-4A72-996C-4FAF6F236452"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.44","matchCriteriaId":"0355A15B-CA1A-4FC6-A56B-80867F7A3B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.20","matchCriteriaId":"ADBF8224-90AF-4BDB-8F1B-C54BD72D863C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A67A7B7A-998D-4B8C-8831-6E58406565FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndExcluding":"5.4.43","matchCriteriaId":"C6938C3C-06A2-47BD-8F9E-D2CF73A6E241"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.27","matchCriteriaId":"5AD26FB9-C4EA-493C-A0FA-B51F99179C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.6.11","matchCriteriaId":"442A88BF-E4CD-42CF-87B4-941E7A530F7D"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://mysqlblog.fivefarmers.com/2015/04/29/ssltls-in-5-6-and-5-5-ocert-advisory/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/131688/MySQL-SSL-TLS-Downgrade.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1646.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1647.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1665.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3311","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2015-003.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/535397/100/1100/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/74398","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1032216","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/security/cve/cve-2015-3152","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://github.com/mysql/mysql-server/commit/3bd5589e1a5a93f9c224badf983cd65c45215390","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://jira.mariadb.org/browse/MDEV-7937","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://www.duosecurity.com/blog/backronym-mysql-vulnerability","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161625.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://mysqlblog.fivefarmers.com/2014/04/02/redefining-ssl-option/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://mysqlblog.fivefarmers.com/2015/04/29/ssltls-in-5-6-and-5-5-ocert-advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/131688/MySQL-SSL-TLS-Downgrade.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1646.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1647.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1665.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2015-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/535397/100/1100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/74398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1032216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/security/cve/cve-2015-3152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/mysql/mysql-server/commit/3bd5589e1a5a93f9c224badf983cd65c45215390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://jira.mariadb.org/browse/MDEV-7937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://www.duosecurity.com/blog/backronym-mysql-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-3411","sourceIdentifier":"cve@mitre.org","published":"2016-05-16T10:59:02.360","lastModified":"2026-06-17T00:25:53.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\\0.xml attack that bypasses an intended configuration in which client users may read only .xml files."},{"lang":"es","value":"PHP en versiones anteriores a 5.4.40, 5.5.x en versiones anteriores a 5.5.24 y 5.6.x en versiones anteriores a 5.6.8 no asegura que los nombres de ruta carezcan de la secuencia %00, lo que podría permitir a atacantes remotos leer o escribir archivos arbitrarios a través de entrada manipulada para una aplicación que llama a (1) un método de carga DOMDocument, (2) la función xmlwriter_open_uri, (3) la función finfo_file o (4) la función hash_hmac_file, según lo demostrado mediante un ataque filename\\0.xml que elude una configuración prevista en la que los usuarios cliente pueden leer solamente archivos .xml."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.39","matchCriteriaId":"1228E622-0524-4254-BA07-6EED39637EA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F6D9B19-E64D-4BED-9194-17460CE19E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F644EA6C-50C6-4A1C-A4AC-287AA9477B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD47F30-74F5-48E8-8657-C2373FE2BD22"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0C09527B-6B47-41F8-BDE6-01C47E452286"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2E454D87-23CB-4D7F-90FE-942EE54D661F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1031E646-F2CF-4A3E-8E6A-5D4BC950BEDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"130E50C1-D209-4CFF-9399-69D561340FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C1F29948-9417-460B-8B04-D91AE4E8B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"A37D00C1-4F41-4400-9CE4-8E8BAA3E4142"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"093D08B7-CC3C-4616-8697-F15B253A7D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"E9CD8FEE-DE7B-47CB-9985-4092BFA071D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"A30B2D9E-F289-43C9-BFBC-1CEF284A417E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"FE41CFDF-8ECD-41C1-94A7-5AFD42C5DDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"6AEAC9BA-AF82-4345-839C-D339DCB962A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"1EFE682F-52E3-48EC-A993-F522FC29712F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"840EE3AC-5293-4F33-9E2C-96A0A2534B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"1C0FC407-96DB-425E-BB57-7A5BA839C37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"D3839C81-3DAB-4E1D-9D95-BEFFD491F43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"AC63A449-5D92-4F5F-8186-B58FFFBA54FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"F18236F6-2065-4A6A-93E7-FD90E650C689"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DEFBA84A-A4E4-438B-B9B5-8549809DCECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"146D3DC9-50F4-430B-B321-68ECE78879A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"1D5A7CA6-7653-46C5-8DF7-95584BF7A879"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"C5BA8300-2F4D-4C1E-8CCE-F45E8F3547A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CE65D0D4-CB56-4946-AB44-2EF554602A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F13E2D-A8F7-4B74-8D03-7905C81672C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE18933A-5FE6-41C7-B1B6-DA3E762C3FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9AE1289F-03A6-4621-B387-5F5ADAC4AE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"383697F5-D29E-475A-84F3-46B54A928889"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"786ED182-5D71-4197-9196-12AB5CF05F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:*","matchCriteriaId":"BF90980D-74AD-44AA-A7C5-A0B294CCE4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:*","matchCriteriaId":"48D6B69C-8F27-4F4C-B953-67A7F9C2FBA5"}]}]}],"references":[{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257","source":"cve@mitre.org"},{"url":"http://php.net/ChangeLog-5.php","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1135.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1186.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1187.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1218.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/75255","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1032709","source":"cve@mitre.org"},{"url":"https://bugs.php.net/bug.php?id=69353","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1186.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1187.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=69353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2015-3412","sourceIdentifier":"cve@mitre.org","published":"2016-05-16T10:59:03.423","lastModified":"2026-06-17T00:25:53.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension."},{"lang":"es","value":"PHP en versiones anteriores a 5.5.40, 5.5.x en versiones anteriores a 5.5.24 y 5.6.x en versiones anteriores a 5.6.8 no asegura que los nombres de ruta carezcan de secuencia %00, lo que permite a atacantes remotos leer archivos arbitrarios a través de una entrada manipulada que llama a la función stream_resolve_include_path en ext/standard/streamsfuncs.c, como se demuestra con un ataque filename\\0.extension que eluce una configuración deseada en la que los usuarios cliente pueden leer archivos con sólo una extensión específica."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.39","matchCriteriaId":"1228E622-0524-4254-BA07-6EED39637EA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F6D9B19-E64D-4BED-9194-17460CE19E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F644EA6C-50C6-4A1C-A4AC-287AA9477B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD47F30-74F5-48E8-8657-C2373FE2BD22"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0C09527B-6B47-41F8-BDE6-01C47E452286"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2E454D87-23CB-4D7F-90FE-942EE54D661F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1031E646-F2CF-4A3E-8E6A-5D4BC950BEDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"130E50C1-D209-4CFF-9399-69D561340FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C1F29948-9417-460B-8B04-D91AE4E8B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"A37D00C1-4F41-4400-9CE4-8E8BAA3E4142"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"093D08B7-CC3C-4616-8697-F15B253A7D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"E9CD8FEE-DE7B-47CB-9985-4092BFA071D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"A30B2D9E-F289-43C9-BFBC-1CEF284A417E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"FE41CFDF-8ECD-41C1-94A7-5AFD42C5DDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"6AEAC9BA-AF82-4345-839C-D339DCB962A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"1EFE682F-52E3-48EC-A993-F522FC29712F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"840EE3AC-5293-4F33-9E2C-96A0A2534B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"1C0FC407-96DB-425E-BB57-7A5BA839C37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"D3839C81-3DAB-4E1D-9D95-BEFFD491F43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"AC63A449-5D92-4F5F-8186-B58FFFBA54FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"F18236F6-2065-4A6A-93E7-FD90E650C689"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DEFBA84A-A4E4-438B-B9B5-8549809DCECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"146D3DC9-50F4-430B-B321-68ECE78879A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"1D5A7CA6-7653-46C5-8DF7-95584BF7A879"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"C5BA8300-2F4D-4C1E-8CCE-F45E8F3547A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CE65D0D4-CB56-4946-AB44-2EF554602A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F13E2D-A8F7-4B74-8D03-7905C81672C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE18933A-5FE6-41C7-B1B6-DA3E762C3FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9AE1289F-03A6-4621-B387-5F5ADAC4AE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"383697F5-D29E-475A-84F3-46B54A928889"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"786ED182-5D71-4197-9196-12AB5CF05F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:*","matchCriteriaId":"BF90980D-74AD-44AA-A7C5-A0B294CCE4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:*","matchCriteriaId":"48D6B69C-8F27-4F4C-B953-67A7F9C2FBA5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]}],"references":[{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257","source":"cve@mitre.org"},{"url":"http://php.net/ChangeLog-5.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1135.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1186.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1187.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1218.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/75250","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1032709","source":"cve@mitre.org"},{"url":"https://bugs.php.net/bug.php?id=69353","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4435b9142ff9813845d5c97ab29a5d637bedb257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1186.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1187.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=69353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-4598","sourceIdentifier":"secalert@redhat.com","published":"2016-05-16T10:59:05.813","lastModified":"2026-06-17T00:27:34.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\\0.html attack that bypasses an intended configuration in which client users may write to only .html files."},{"lang":"es","value":"PHP en versiones anteriores a 5.4.42, 5.5.x en versiones anteriores a 5.5.26 y 5.6.x en versiones anteriores a 5.6.10 no asegura que los nombres de ruta carezcan de la secuencia %00, lo que podría permitir a atacantes remotos leer o escribir archivos arbitrarios a través de entrada manipulada para una aplicación que llama a (1) un método para guardar DOMDocument o (2) la función imagepsloadfont GD, según lo demostrado mediante un ataque filename\\0.html que elude una configuración prevista en la que los usuarios cliente pueden escribir solamente en archivos .html."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.41","matchCriteriaId":"51E65991-DA29-4501-9B30-6719C5CEDAA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F6D9B19-E64D-4BED-9194-17460CE19E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F644EA6C-50C6-4A1C-A4AC-287AA9477B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD47F30-74F5-48E8-8657-C2373FE2BD22"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0C09527B-6B47-41F8-BDE6-01C47E452286"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2E454D87-23CB-4D7F-90FE-942EE54D661F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1031E646-F2CF-4A3E-8E6A-5D4BC950BEDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"130E50C1-D209-4CFF-9399-69D561340FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C1F29948-9417-460B-8B04-D91AE4E8B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"A37D00C1-4F41-4400-9CE4-8E8BAA3E4142"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"093D08B7-CC3C-4616-8697-F15B253A7D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"E9CD8FEE-DE7B-47CB-9985-4092BFA071D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"A30B2D9E-F289-43C9-BFBC-1CEF284A417E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"FE41CFDF-8ECD-41C1-94A7-5AFD42C5DDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"6AEAC9BA-AF82-4345-839C-D339DCB962A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"1EFE682F-52E3-48EC-A993-F522FC29712F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"840EE3AC-5293-4F33-9E2C-96A0A2534B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"1C0FC407-96DB-425E-BB57-7A5BA839C37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"D3839C81-3DAB-4E1D-9D95-BEFFD491F43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"AC63A449-5D92-4F5F-8186-B58FFFBA54FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"F18236F6-2065-4A6A-93E7-FD90E650C689"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DEFBA84A-A4E4-438B-B9B5-8549809DCECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"146D3DC9-50F4-430B-B321-68ECE78879A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"1D5A7CA6-7653-46C5-8DF7-95584BF7A879"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"C5BA8300-2F4D-4C1E-8CCE-F45E8F3547A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"59A42F02-F363-4C13-BE83-19F757B84455"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"423ECD5F-5611-4D9A-8BE8-E4DC1527AF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CE65D0D4-CB56-4946-AB44-2EF554602A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F13E2D-A8F7-4B74-8D03-7905C81672C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE18933A-5FE6-41C7-B1B6-DA3E762C3FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9AE1289F-03A6-4621-B387-5F5ADAC4AE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"383697F5-D29E-475A-84F3-46B54A928889"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"786ED182-5D71-4197-9196-12AB5CF05F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:*","matchCriteriaId":"BF90980D-74AD-44AA-A7C5-A0B294CCE4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:*","matchCriteriaId":"48D6B69C-8F27-4F4C-B953-67A7F9C2FBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B53DC0C3-EA19-4465-B65A-BC7CDB10D8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.9:*:*:*:*:*:*:*","matchCriteriaId":"BEA4DFC1-6C0C-42FB-9F47-E3E1AA9E47E0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]}],"references":[{"url":"http://php.net/ChangeLog-5.php","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1135.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1186.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1187.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1218.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1219.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3344","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/06/16/12","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/75244","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032709","source":"secalert@redhat.com"},{"url":"https://bugs.php.net/bug.php?id=69719","source":"secalert@redhat.com"},{"url":"http://php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1186.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1187.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/06/16/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=69719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8838","sourceIdentifier":"secalert@redhat.com","published":"2016-05-16T10:59:23.410","lastModified":"2026-06-17T00:35:20.760","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152."},{"lang":"es","value":"ext/mysqlnd/mysqlnd.c en PHP en versiones anteriores a 5.4.43, 5.5.x en versiones anteriores 5.5.27 y 5.6.x en versiones anteriores a 5.6.11 usa una opción de cliente SSL para indicar que el SSL es opcional, lo que permite a atacantes man-in-the-middle falsificar servidores a través de un ataque de degradación de texto plano, un problema relacionado con la CVE-2015-3152."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F6D9B19-E64D-4BED-9194-17460CE19E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"3D25E591-448C-4E3B-8557-6E48F7571796"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"6DA18F3F-B4B5-40C3-BF19-67C1F0C1787D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"3AF783C9-26E7-4E02-BD41-77B9783667E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"EF49701D-ECE4-4CEB-BDAB-24C09C8AD4B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"7AEDF6F7-001D-4A35-A26F-417991AD377F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"4031DB99-B4B4-41EC-B3C1-543D92C575A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D5450EA7-A398-49D2-AA8E-7C95B074BAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04FE0E4E-BC94-4DC9-BE9B-DC57B952B2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"BB8E09D8-9CBE-4279-88B7-24A214A5A537"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"2D41ECCE-887D-49A2-9BB3-B559495AC55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"79B418BC-27F4-4443-A0F7-FF4ADA568C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"8EEBDF62-BA1B-4438-9AEA-8B56AA5713E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F644EA6C-50C6-4A1C-A4AC-287AA9477B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD47F30-74F5-48E8-8657-C2373FE2BD22"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0C09527B-6B47-41F8-BDE6-01C47E452286"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2E454D87-23CB-4D7F-90FE-942EE54D661F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1031E646-F2CF-4A3E-8E6A-5D4BC950BEDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"130E50C1-D209-4CFF-9399-69D561340FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C1F29948-9417-460B-8B04-D91AE4E8B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"A37D00C1-4F41-4400-9CE4-8E8BAA3E4142"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"093D08B7-CC3C-4616-8697-F15B253A7D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"E9CD8FEE-DE7B-47CB-9985-4092BFA071D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"A30B2D9E-F289-43C9-BFBC-1CEF284A417E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"FE41CFDF-8ECD-41C1-94A7-5AFD42C5DDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"6AEAC9BA-AF82-4345-839C-D339DCB962A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"1EFE682F-52E3-48EC-A993-F522FC29712F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"840EE3AC-5293-4F33-9E2C-96A0A2534B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"1C0FC407-96DB-425E-BB57-7A5BA839C37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"D3839C81-3DAB-4E1D-9D95-BEFFD491F43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"AC63A449-5D92-4F5F-8186-B58FFFBA54FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"F18236F6-2065-4A6A-93E7-FD90E650C689"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DEFBA84A-A4E4-438B-B9B5-8549809DCECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"146D3DC9-50F4-430B-B321-68ECE78879A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"1D5A7CA6-7653-46C5-8DF7-95584BF7A879"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"C5BA8300-2F4D-4C1E-8CCE-F45E8F3547A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"59A42F02-F363-4C13-BE83-19F757B84455"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"423ECD5F-5611-4D9A-8BE8-E4DC1527AF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"44FE4648-22C5-44A6-A6DF-8B235EB7DEF5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"5BF4E8FF-A3EC-43E8-A0C1-FD38AFCB77B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"54ADECFC-3C07-43BC-B296-6C25AC7F1C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"FE192054-2FBB-4388-A52A-422E20DEA2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"F0195D48-3B42-4AC0-B9C5-436E01C63879"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"BF0E5D67-ABC1-41A5-94E1-7DD3CDB51D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"319E0573-B1AD-40B6-B4BC-8BE67ED3EFDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"1A7C00EB-87B7-4EB7-A4AC-8665D8C78467"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"21BFCF10-786A-4D1E-9C37-50A1EC6056F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"95A6D6C8-5F46-4897-A0B0-778631E8CE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F13E2D-A8F7-4B74-8D03-7905C81672C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE18933A-5FE6-41C7-B1B6-DA3E762C3FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9AE1289F-03A6-4621-B387-5F5ADAC4AE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"383697F5-D29E-475A-84F3-46B54A928889"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"786ED182-5D71-4197-9196-12AB5CF05F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:*","matchCriteriaId":"BF90980D-74AD-44AA-A7C5-A0B294CCE4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:*","matchCriteriaId":"48D6B69C-8F27-4F4C-B953-67A7F9C2FBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B53DC0C3-EA19-4465-B65A-BC7CDB10D8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.9:*:*:*:*:*:*:*","matchCriteriaId":"BEA4DFC1-6C0C-42FB-9F47-E3E1AA9E47E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.10:*:*:*:*:*:*:*","matchCriteriaId":"D904E21A-4B3B-4D96-850C-0C0315F14E6D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.42","matchCriteriaId":"A3E9AE25-4513-4EDA-863B-EBC4B955539D"}]}]}],"references":[{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=97aa752fee61fccdec361279adbfb17a3c60f3f4","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html","source":"secalert@redhat.com"},{"url":"http://php.net/ChangeLog-5.php","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2952-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2952-2","source":"secalert@redhat.com"},{"url":"https://bugs.php.net/bug.php?id=69669","source":"secalert@redhat.com"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=97aa752fee61fccdec361279adbfb17a3c60f3f4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2952-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2952-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=69669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0306","sourceIdentifier":"psirt@us.ibm.com","published":"2016-05-17T14:08:00.123","lastModified":"2026-06-17T00:37:18.360","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8.5.5.10, when FIPS 140-2 is enabled, misconfigures TLS, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"IBM WebSphere Application Server (WAS) 7.0 en versiones anteriores a 7.0.0.41, 8.0 en versiones anteriores a 8.0.0.13 y 8.5 en versiones anteriores a 8.5.5.10, cuando FIPS 140-2 está activado, configura incorrectamente TLS, lo que permite a atacantes man-in-the-middle obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAC5F6C-D589-4337-88AD-4693AE953D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A8FC820-48D5-4850-82F7-8DA4A18EFF51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9BFBDE57-3895-4841-B23C-06336A7016EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"30B7A7B9-FCD1-4509-93CF-C5B736B04F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"90BA0923-4064-49D3-82A2-EEFC4B0F9A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"833256BB-E2A6-4FE9-BE4F-982578023E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE94EFF2-CA86-4179-8250-350DF0D2BE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"920F69CD-DEDB-4393-BE6E-B837BA6820B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"5662B903-5480-403D-BC3D-2222F88264A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"4D82C3F2-9C50-4D1A-B939-77FC53E44EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"03E6BAB6-D0D8-4698-BCF9-05D5A256FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EF042A51-E34A-482C-8601-9FD09E6C866A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*","matchCriteriaId":"3BFE6260-F130-44E1-9A31-985153F51385"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*","matchCriteriaId":"489E4427-4059-4026-B952-72364AFFC135"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.29:*:*:*:*:*:*:*","matchCriteriaId":"B95D1940-E5AD-4B59-80B4-C3370BB03169"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.31:*:*:*:*:*:*:*","matchCriteriaId":"C7083F0E-57BA-4828-99E0-ECA8B54E2069"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.33:*:*:*:*:*:*:*","matchCriteriaId":"799B6FA0-0094-4CE9-8C63-8DBFF45E7260"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.35:*:*:*:*:*:*:*","matchCriteriaId":"ABEFAA7D-56F8-4F73-A4E9-1A164B889F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.37:*:*:*:*:*:*:*","matchCriteriaId":"C39BC1E7-EDF9-4AD6-BA15-4E750903B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.39:*:*:*:*:*:*:*","matchCriteriaId":"28AF3645-415B-40BA-8024-32F7A3FCB7AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AF1667C5-D19B-469C-82D5-8406B6D75EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"89551609-69B7-452A-9CB2-04C12D268B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AF27B7D7-4442-47CA-880D-D3B5412AEF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B595B048-4204-49B4-9497-B8D119C8784D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC38B5D4-66A3-4671-9099-0F38D283BA94"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B357DB53-061F-43D5-9E9F-5D5468A5805B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"29ADADD2-EC21-4C45-A381-BC2091CD9F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2AD901DE-9258-40DA-A09B-B0CA9DCCF843"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8C21DDD3-C1CF-4CB2-BA13-4807F17AC5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A6DBD14D-F0F2-4606-BC55-ECB6CCA3EF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"1F994982-0972-4AC2-A0AB-BD3E46F7AA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7FAAF976-032D-49F7-AE25-29A85E371EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"B2B4F3AE-880A-45C9-8E31-A1F2548E58CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1FD8F9CE-4E98-4187-B84A-429FA1C65E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FC1D7570-4AB4-44B0-B5ED-D103F0946F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E709E36-B5D0-42E5-A305-AF385FD7F347"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"49506702-1B31-4421-8DEE-5B789272EC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"158777FD-83D1-44B9-83B4-A3F490CA76F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"EDA2FE6B-6E42-4E97-B803-DAB671D30FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"72F5A562-5B2E-4BC7-8A81-EFE5ED265803"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"168E2F18-56C6-4789-BBAC-C99D4792046F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B53EBD40-8E1A-4516-927D-ED1CF212B211"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"1A4E88BA-F637-4400-A64F-E6516AE8917C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"32C745A6-FDE7-4236-BA1D-8BB22D184AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C8EE753-8773-4DFF-90A7-35CE45C7EC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"F4B0179F-C523-4835-BDF2-E7C2166B4B8A"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56190","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21979231","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85978","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI56190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21979231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0323","sourceIdentifier":"psirt@us.ibm.com","published":"2016-05-17T14:08:01.437","lastModified":"2026-06-17T00:37:20.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote authenticated users to disable X.509 certificate validation, and consequently bypass an intended HTTPS trust-management feature, via unspecified vectors."},{"lang":"es","value":"El agente Auto-Scaling en Liberty para Java en IBM Bluemix en versiones anteriores a 2.7-20160321-1358 permite a usuarios remotos autentificados desactivar la validación de certificados X.509, y en consecuencia, eludir la característica de gestión de confianza HTTPS a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bluemix:-:*:*:*:*:*:*:*","matchCriteriaId":"AC274E23-45B5-4299-A0EC-65ABBD5EED0F"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21979682","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21979682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3721","sourceIdentifier":"secalert@redhat.com","published":"2016-05-17T14:08:05.593","lastModified":"2026-06-17T00:46:15.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables."},{"lang":"es","value":"Jenkins en versiones anteriores a 2.3 y LTS en versiones anteriores a 1.651.2 podría permitir a usuarios remotos autenticados inyectar parámetros de construcción arbitrarios en el entorno de construcción a través de variables del entorno."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-02T17:22:46.826118Z","id":"CVE-2016-3721","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"F33CEF04-05FA-444C-BB14-F3E3434AF61F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","versionEndIncluding":"1.651.1","matchCriteriaId":"587BB544-D4F5-4540-8A61-578FD30DB508"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"4A979807-E051-4BD5-8811-85FED039DB59"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/02/3","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"secalert@redhat.com"},{"url":"https://wiki.jenkins-ci.org/display/JENKINS/Plugins+affected+by+fix+for+SECURITY-170","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/02/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.jenkins-ci.org/display/JENKINS/Plugins+affected+by+fix+for+SECURITY-170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3722","sourceIdentifier":"secalert@redhat.com","published":"2016-05-17T14:08:07.047","lastModified":"2026-06-17T00:46:15.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the \"full name.\""},{"lang":"es","value":"Jenkins en versiones anteriores a 2.3 y LTS en versiones anteriores a 1.651.2 permiten a usuarios remotos autenticados con múltiples cuentas provocar una denegación de servicio (sin posibilidad de acceso) editando el \"full name\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","versionEndIncluding":"1.651.1","matchCriteriaId":"587BB544-D4F5-4540-8A61-578FD30DB508"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"F33CEF04-05FA-444C-BB14-F3E3434AF61F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"4A979807-E051-4BD5-8811-85FED039DB59"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"secalert@redhat.com"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3723","sourceIdentifier":"secalert@redhat.com","published":"2016-05-17T14:08:07.983","lastModified":"2026-06-17T00:46:15.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints."},{"lang":"es","value":"Jenkins en versiones anteriores a 2.3 y LTS en versiones anteriores a 1.651.2 permite a usuarios remotos autenticados con acceso a lectura obtener información sensible de instalación de plugin aprovechando la falta de comprobaciones de permisos en dispositivos XML/JSON API no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"4A979807-E051-4BD5-8811-85FED039DB59"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","versionEndIncluding":"1.651.1","matchCriteriaId":"587BB544-D4F5-4540-8A61-578FD30DB508"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"F33CEF04-05FA-444C-BB14-F3E3434AF61F"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"secalert@redhat.com"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3724","sourceIdentifier":"secalert@redhat.com","published":"2016-05-17T14:08:08.843","lastModified":"2026-06-17T00:46:15.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration."},{"lang":"es","value":"Jenkins en versiones anteriores a 2.3 y LTS en versiones anteriores a 1.651.2 permite a usuarios remotos autenticados con acceso avanzado a lectura obtener información sensible de contraseña leyendo la configuración de trabajo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"F33CEF04-05FA-444C-BB14-F3E3434AF61F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"1.649","matchCriteriaId":"18F2C087-76F7-40F2-83DA-4C643363629C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","versionEndIncluding":"1.651.1","matchCriteriaId":"587BB544-D4F5-4540-8A61-578FD30DB508"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"secalert@redhat.com"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3725","sourceIdentifier":"secalert@redhat.com","published":"2016-05-17T14:08:09.780","lastModified":"2026-06-17T00:46:15.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption)."},{"lang":"es","value":"Jenkins en versiones anteriores a 2.3 y LTS en versiones anteriores a 1.651.2 permite a usuarios remotos autenticados desencadenar actualizaciones de metadatos provenientes de portales de actualización aprovechando la falta de comprobación de permisos. NOTA: este problema puede darse en combinación con el envenenamiento de la caché DNS para provocar una denegación de servicio (interrupción de servicio)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","versionEndIncluding":"1.651.1","matchCriteriaId":"587BB544-D4F5-4540-8A61-578FD30DB508"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"4A979807-E051-4BD5-8811-85FED039DB59"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"F33CEF04-05FA-444C-BB14-F3E3434AF61F"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"secalert@redhat.com"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3727","sourceIdentifier":"secalert@redhat.com","published":"2016-05-17T14:08:11.717","lastModified":"2026-06-17T00:46:16.127","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors."},{"lang":"es","value":"La URL API computer/(master)/api/xml en Jenkins en versiones anteriores a 2.3 y LTS en versiones anteriores a 1.651.2 permite a usuarios remotos autenticados con permiso avanzado de lectura para el nodo maestro obtener información sensible sobre la configuración global a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"4A979807-E051-4BD5-8811-85FED039DB59"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","versionEndIncluding":"1.651.1","matchCriteriaId":"587BB544-D4F5-4540-8A61-578FD30DB508"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"F33CEF04-05FA-444C-BB14-F3E3434AF61F"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"secalert@redhat.com"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cloudbees.com/jenkins-security-advisory-2016-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0731","sourceIdentifier":"secalert@redhat.com","published":"2016-05-18T14:59:03.007","lastModified":"2026-06-17T00:38:06.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration."},{"lang":"es","value":"El File Browser View en Apache Ambari en versiones anteriores a 2.2.1 permite a administradores remotos autenticados leer archivos arbitrarios a través de un archivo: URL en la configuración WebHDFS URL."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.0","matchCriteriaId":"58F6D1D1-1E2D-406C-AB6B-A971C9ED01BB"}]}]}],"references":[{"url":"https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.2.1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_releasenotes_ambari_2.2.1.0/content/ambari_relnotes-2.2.1.0-cves.html","source":"secalert@redhat.com"},{"url":"https://issues.apache.org/jira/browse/AMBARI-14780","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.2.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_releasenotes_ambari_2.2.1.0/content/ambari_relnotes-2.2.1.0-cves.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/jira/browse/AMBARI-14780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1802","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:14.403","lastModified":"2026-06-17T00:42:38.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive information via a crafted app."},{"lang":"es","value":"CCCrypt en CommonCrypto en Apple iOS en versiones anteriores a 9.3.2, OS X en versiones anteriores a 10.11.5, tvOS en versiones anteriores a 9.2.1 y watchOS en versiones anteriores a 2.2.1 no maneja correctamente los valores de retorno durante los cálculos de longitud de clave, lo que permite a atacantes obtener información sensible a través de una app manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.5","matchCriteriaId":"4737F65F-BD57-4700-A24F-839D05BC4144"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.1","matchCriteriaId":"D7868F77-ACEB-415C-838E-F953A72E97D5"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90694","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1807","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:19.560","lastModified":"2026-06-17T00:42:39.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecified vectors."},{"lang":"es","value":"Condición de carrera en el subsistema Disk Images en Apple iOS en versiones anteriores a 9.3.2, OS X en versiones anteriores a 10.11.5, tvOS en versiones anteriores a 9.2.1 y watchOS en versiones anteriores a 2.2.1 permite a usuarios locales obtener información sensible de la memoria del kernel a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.5","matchCriteriaId":"4737F65F-BD57-4700-A24F-839D05BC4144"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.1","matchCriteriaId":"D7868F77-ACEB-415C-838E-F953A72E97D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/137395/OS-X-iOS-Kernel-IOHDIXControllerUserClient-Use-After-Free.html","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/90694","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=732","source":"product-security@apple.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39929/","source":"product-security@apple.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/137395/OS-X-iOS-Kernel-IOHDIXControllerUserClient-Use-After-Free.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/90694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/39929/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1811","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:23.640","lastModified":"2026-06-17T00:42:40.040","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image."},{"lang":"es","value":"ImageIO en Apple iOS en versiones anteriores a 9.3.2, OS X en versiones anteriores a 10.11.5, tvOS en versiones anteriores a 9.2.1 y watchOS en versiones anteriores a 2.2.1 permite a atacantes remotos causar una denegación de servicio (referencia a puntero NULO) a través de una imagen manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.1","matchCriteriaId":"D7868F77-ACEB-415C-838E-F953A72E97D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.5","matchCriteriaId":"4737F65F-BD57-4700-A24F-839D05BC4144"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90694","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1814","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:27.093","lastModified":"2026-06-17T00:42:40.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app."},{"lang":"es","value":"IOAcceleratorFamily en Apple iOS en versiones anteriores a 9.3.2, OS X en versiones anteriores a 10.11.5 y tvOS en versiones anteriores a 9.2.1 permite a atacantes causar una denegación de servicio (referencia a puntero NULL) a través de una app manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.5","matchCriteriaId":"4737F65F-BD57-4700-A24F-839D05BC4144"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90696","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1833","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:47.097","lastModified":"2026-06-17T00:42:42.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."},{"lang":"es","value":"La función htmlCurrentChar en libxml2 en versiones anteriores a 2.9.4, como se utiliza en Apple iOS en versiones anteriores a 9.3.2, OS X en versiones anteriores a 10.11.5, tvOS en versiones anteriores a 9.2.1 y watchOS en versiones anteriores a 2.2.1, permite a atacantes remotos provocar una denegación de servicio (sobre lectura de buffer basado en memoria dinámica) a través de un documento XML manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.5","matchCriteriaId":"4737F65F-BD57-4700-A24F-839D05BC4144"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.1","matchCriteriaId":"D7868F77-ACEB-415C-838E-F953A72E97D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.4","matchCriteriaId":"AFAD619E-BF3F-4E56-AF88-5880F939333E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.5.0.0","versionEndIncluding":"7.5.2.10","matchCriteriaId":"A8998626-853F-4578-BD7A-68AFE5112EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartExcluding":"7.6.0.0","versionEndIncluding":"7.6.2.3","matchCriteriaId":"22581DE1-3615-47C1-9588-83AA881D51B9"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=636","source":"product-security@apple.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=758606","source":"product-security@apple.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=758606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1836","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:50.017","lastModified":"2026-06-17T00:42:43.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document."},{"lang":"es","value":"Vulnerabilidad de uso después de liberación de memoria en la función xmlDictComputeFastKey en libxml2 en versiones anteriores a 2.9.4, como se utiliza en Apple iOS en versiones anteriores a 9.3.2, OS X en versiones anteriores a 10.11.5, tvOS en versiones anteriores a 9.2.1 y watchOS en versiones anteriores a 2.2.1, permite a atacantes remotos provocar una denegación de servicio a través de un documento XML manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.5","matchCriteriaId":"4737F65F-BD57-4700-A24F-839D05BC4144"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.1","matchCriteriaId":"D7868F77-ACEB-415C-838E-F953A72E97D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.4","matchCriteriaId":"AFAD619E-BF3F-4E56-AF88-5880F939333E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.5.0.0","versionEndIncluding":"7.5.2.10","matchCriteriaId":"A8998626-853F-4578-BD7A-68AFE5112EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0.0","versionEndIncluding":"7.6.2.3","matchCriteriaId":"CA0CD65F-AF64-40D4-8102-7A351A9E3EBE"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Not Applicable","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=759398","source":"product-security@apple.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=45752d2c334b50016666d8f0ec3691e2d680f0a0","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-37","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206899","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206901","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206903","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206904","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Not Applicable","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=759398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=45752d2c334b50016666d8f0ec3691e2d680f0a0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1837","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:51.283","lastModified":"2026-06-17T00:42:43.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document."},{"lang":"es","value":"Múltiples vulnerabilidades de uso después de liberación de memoria en las funciones (1) htmlPArsePubidLiteral y (2) htmlParseSystemiteral en libxml2 en versiones anteriores a 2.9.4, como se utilizan en Apple iOS en versiones anteriores a 9.3.2, OS X en versiones anteriores a 10.11.5, tvOS en versiones anteriores a 9.2.1 y watchOS en versiones anteriores a 2.2.1, permiten a atacantes remotos provocar una denegación de servicio a través de un documento XML manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.5","matchCriteriaId":"4737F65F-BD57-4700-A24F-839D05BC4144"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.1","matchCriteriaId":"D7868F77-ACEB-415C-838E-F953A72E97D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.5.0.0","versionEndIncluding":"7.5.2.10","matchCriteriaId":"A8998626-853F-4578-BD7A-68AFE5112EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0.0","versionEndIncluding":"7.6.2.3","matchCriteriaId":"CA0CD65F-AF64-40D4-8102-7A351A9E3EBE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.4","matchCriteriaId":"AFAD619E-BF3F-4E56-AF88-5880F939333E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=760263","source":"product-security@apple.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=11ed4a7a90d5ce156a18980a4ad4e53e77384852","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=760263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=11ed4a7a90d5ce156a18980a4ad4e53e77384852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1838","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:52.237","lastModified":"2026-06-17T00:42:43.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."},{"lang":"es","value":"La función xmlPArserPrintFileContextInternal en libxml2 en versiones anteriores a 2.9.4, como se utiliza en Apple iOS en versiones anteriores a 9.3.2, OS X en versiones anteriores a 10.11.5, tvOS en versiones anteriores a 9.2.1 y watchOS en versiones anteriores a 2.2.1, permite a atacantes remotos provocar una denegación de servicio (sobre lectura de buffer basado en memoria dinámica) a través de un documento XML manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.5","matchCriteriaId":"4737F65F-BD57-4700-A24F-839D05BC4144"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.1","matchCriteriaId":"D7868F77-ACEB-415C-838E-F953A72E97D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.5.0.0","versionEndIncluding":"7.5.2.10","matchCriteriaId":"A8998626-853F-4578-BD7A-68AFE5112EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0.0","versionEndIncluding":"7.6.2.3","matchCriteriaId":"CA0CD65F-AF64-40D4-8102-7A351A9E3EBE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9.4","matchCriteriaId":"8CC4875D-A4B2-4A7C-B020-7C2E86412B7C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=639","source":"product-security@apple.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=758588","source":"product-security@apple.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=db07dd613e461df93dde7902c6505629bf0734e9","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-37","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=758588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=db07dd613e461df93dde7902c6505629bf0734e9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1839","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:53.190","lastModified":"2026-06-17T00:42:43.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."},{"lang":"es","value":"La función xmlDictAddString en libxml2 en versiones anteriores a 2.9.4, como se utiliza en Apple iOS en versiones anteriores a 9.3.2, OS X en versiones anteriores a 10.11.5, tvOS en versiones anteriores a 9.2.1 y watchOS en versiones anteriores a 2.2.1, permite a atacantes remotos provocar una denegación de servicio (sobre lectura de buffer basado en memoria dinámica) a través de un documento XML manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.5","matchCriteriaId":"4737F65F-BD57-4700-A24F-839D05BC4144"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.1","matchCriteriaId":"D7868F77-ACEB-415C-838E-F953A72E97D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.5.0.0","versionEndIncluding":"7.5.2.10","matchCriteriaId":"A8998626-853F-4578-BD7A-68AFE5112EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0.0","versionEndIncluding":"7.6.2.3","matchCriteriaId":"CA0CD65F-AF64-40D4-8102-7A351A9E3EBE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.4","matchCriteriaId":"AFAD619E-BF3F-4E56-AF88-5880F939333E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038623","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=758605","source":"product-security@apple.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=a820dbeac29d330bae4be05d9ecd939ad6b4aa33","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"product-security@apple.com","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-37","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=758605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=a820dbeac29d330bae4be05d9ecd939ad6b4aa33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1844","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T10:59:58.363","lastModified":"2026-06-17T00:42:44.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors."},{"lang":"es","value":"El componente Messages en Apple OS X en versiones anteriores a 10.11.5 no maneja correctamente cambios en las rotaciones, lo que permite a atacantes remotos modificar listas de contactos a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.4","matchCriteriaId":"40347FFA-6649-4B77-A252-728945507D43"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90696","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035895","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1851","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T11:00:04.787","lastModified":"2026-06-17T00:42:45.303","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors."},{"lang":"es","value":"La función Screen Locken Apple OS X en versiones anteriores a 10.11.5 no maneja correctamente perfiles de contraseña, lo que permite a atacantes físicamente próximos restablecer contraseñas caducadas en el estado de bloqueo de pantalla a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.4","matchCriteriaId":"40347FFA-6649-4B77-A252-728945507D43"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90696","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035895","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206567","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1858","sourceIdentifier":"product-security@apple.com","published":"2016-05-20T11:00:12.317","lastModified":"2026-06-17T00:42:46.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site."},{"lang":"es","value":"WebKit, como se utiliza en Apple iOS en versiones anteriores a 9.3.2, Safari en versiones anteriores a 9.1.1 y tvOS en versiones anteriores a 9.2.1, no maneja adecuadamente el seguimiento de los atributos taint, lo que permite a atacantes remotos obtener información sensible a través de una página web manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"9.1.1","matchCriteriaId":"126B016F-E036-4ED2-B123-844E19B701B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6E8ECB34-7053-47AD-8EB2-EE5DDE03E37A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.1","matchCriteriaId":"9918C95C-B5F9-4741-893D-828F18F20D9A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*","versionEndExcluding":"2.12.0","matchCriteriaId":"DDEDB3E3-4BDC-44C4-AA47-F7BA3180334E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00005.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/538522/100/0/threaded","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035888","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206564","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206565","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/May/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/538522/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2100","sourceIdentifier":"secalert@redhat.com","published":"2016-05-20T14:59:02.200","lastModified":"2026-06-17T00:43:26.040","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveraging the (1) edit_bookmarks or (2) destroy_bookmarks permission."},{"lang":"es","value":"Foreman en versiones anteriores a 1.10.3 y 1.11.0 en versiones anteriores a 1.11.0-RC2 permite a usuarios remotos autenticados leer, modificar o borrar marcadores privados aprovechando el permiso (1) edit_bookmarks o (2) destroy_bookmarks."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10.2","matchCriteriaId":"60DDCD5B-A866-4BC3-9A5C-063716D11A81"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"D4197DE0-AEB1-41CA-9264-22C29CCD7102"},{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:1.11.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E058208D-14B4-4D86-9B5D-57383FC5D5ED"}]}]}],"references":[{"url":"http://projects.theforeman.org/issues/13828","source":"secalert@redhat.com"},{"url":"http://theforeman.org/security.html#2016-2100","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/31/2","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHBA-2016:1500","source":"secalert@redhat.com"},{"url":"http://projects.theforeman.org/issues/13828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://theforeman.org/security.html#2016-2100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/31/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHBA-2016:1500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3739","sourceIdentifier":"secalert@redhat.com","published":"2016-05-20T14:59:05.450","lastModified":"2026-06-17T00:46:17.247","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate."},{"lang":"es","value":"Las funciones (1) mbed_connect_step1 en lib/vtls/mbedtls.c y (2) polarssl_connect_step1 en lib/vtls/polarssl.c en cURL y libcurl en versiones anteriores 7.49.0, cuando usan SSLv3 o hacen una conexión TSL a una URL que usa una dirección IP numérica, permiten a atacantes remotos engañar a los servidores a través de un certificado arbitrario válido."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.0:*:*:*:*:*:*:*","matchCriteriaId":"E5CA3936-4602-40E6-B75C-58D3F24268E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.1:*:*:*:*:*:*:*","matchCriteriaId":"D87C110C-21DD-438A-90EF-BE516CF59F3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.2:*:*:*:*:*:*:*","matchCriteriaId":"AD2D9E0E-2EED-4FB5-859C-05226FC48D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.3:*:*:*:*:*:*:*","matchCriteriaId":"7CA01E21-71CE-4B07-B5A6-D0D7AC493A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.4:*:*:*:*:*:*:*","matchCriteriaId":"51239254-31CE-4BF7-8669-1525BA391362"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.5:*:*:*:*:*:*:*","matchCriteriaId":"2E2BE20D-232D-4C86-81B0-C82CCC1CAA62"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.6:*:*:*:*:*:*:*","matchCriteriaId":"D652FD7C-1521-4391-AAE1-0A4D6F4CE8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.7:*:*:*:*:*:*:*","matchCriteriaId":"DB861143-F809-45CF-95BE-E64F4BA1A0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.22.0:*:*:*:*:*:*:*","matchCriteriaId":"E3480F4A-0AE0-4428-9EDA-5A6B994909A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.23.0:*:*:*:*:*:*:*","matchCriteriaId":"936BF59E-33A8-46BA-9FBD-8763812E2F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.23.1:*:*:*:*:*:*:*","matchCriteriaId":"33168C81-6DAE-40D6-9693-68390CD71DA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.24.0:*:*:*:*:*:*:*","matchCriteriaId":"424F9604-AA9A-4D45-A521-0BDEDB723659"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.25.0:*:*:*:*:*:*:*","matchCriteriaId":"DC6EBCEB-E52C-4FF5-B15A-6960F58090EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.26.0:*:*:*:*:*:*:*","matchCriteriaId":"D204E994-4591-403C-8EF3-D3B7BF4AA1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.27.0:*:*:*:*:*:*:*","matchCriteriaId":"EBF5418D-1162-4B1E-BC3D-06A3E084BEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.28.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA65F31-3D54-4F66-A0A3-2BD993FF38F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.28.1:*:*:*:*:*:*:*","matchCriteriaId":"41ACC9FE-62FF-424B-B4B8-B033FEAF7686"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.29.0:*:*:*:*:*:*:*","matchCriteriaId":"F8BC39E9-5945-4DC8-ACA8-1C9918D9F279"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.30.0:*:*:*:*:*:*:*","matchCriteriaId":"B9658447-FBB0-4DEA-8FEE-BD4D3D1BF7FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.31.0:*:*:*:*:*:*:*","matchCriteriaId":"5ECABFCB-0D02-4B5B-BB35-C6B3C0896348"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.32.0:*:*:*:*:*:*:*","matchCriteriaId":"5A5176F0-E62F-46FF-B536-DC0680696773"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.33.0:*:*:*:*:*:*:*","matchCriteriaId":"506A3761-3D24-43DB-88D8-4EB5B9E8BA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.34.0:*:*:*:*:*:*:*","matchCriteriaId":"0B6EF8B0-0E86-449C-A500-ACD902A78C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.35.0:*:*:*:*:*:*:*","matchCriteriaId":"4D558CC2-0146-4887-834E-19FCB1D512A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.36.0:*:*:*:*:*:*:*","matchCriteriaId":"6931764D-16AB-4546-9CE3-5B4E03BC984A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.38.0:*:*:*:*:*:*:*","matchCriteriaId":"EFC7535F-B8C7-490F-A2F9-1DCFD41A3C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.39.0:*:*:*:*:*:*:*","matchCriteriaId":"3CCBFE6D-F6A9-4394-9AF8-F830DC7E6A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.40.0:*:*:*:*:*:*:*","matchCriteriaId":"5DEBBFCA-6A18-4F8F-B841-50255C952FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.41.0:*:*:*:*:*:*:*","matchCriteriaId":"FEEAE437-A645-468B-B283-44799658F534"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.42.0:*:*:*:*:*:*:*","matchCriteriaId":"03F7EE95-4EBE-4306-ADFE-A1A92CAD5F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.42.1:*:*:*:*:*:*:*","matchCriteriaId":"79F7AE71-7A18-4737-9C02-0A3343B3AD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.43.0:*:*:*:*:*:*:*","matchCriteriaId":"BC589DE6-773A-43E8-9393-3083DB545671"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.44.0:*:*:*:*:*:*:*","matchCriteriaId":"24D735EA-04E3-47E7-A859-3CC1ED887E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.45.0:*:*:*:*:*:*:*","matchCriteriaId":"063C1A70-0869-4933-88D7-ECE7ACCF0F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.46.0:*:*:*:*:*:*:*","matchCriteriaId":"70B0A020-3DA1-4753-B810-C60E7CA06839"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.47.0:*:*:*:*:*:*:*","matchCriteriaId":"63A18050-0DA7-400A-B564-AC9A020D57CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.48.0:*:*:*:*:*:*:*","matchCriteriaId":"11D8B02D-5A97-4F9A-8EE8-D60D621E0B0D"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2024/03/27/4","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/90726","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035907","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.495349","source":"secalert@redhat.com"},{"url":"https://curl.haxx.se/CVE-2016-3739.patch","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://curl.haxx.se/changes.html#7_49_0","source":"secalert@redhat.com"},{"url":"https://curl.haxx.se/docs/adv_20160518.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201701-47","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2024/03/27/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.495349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://curl.haxx.se/CVE-2016-3739.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://curl.haxx.se/changes.html#7_49_0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://curl.haxx.se/docs/adv_20160518.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-47","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4439","sourceIdentifier":"secalert@redhat.com","published":"2016-05-20T14:59:07.450","lastModified":"2026-06-17T00:47:33.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors."},{"lang":"es","value":"La función esp_reg_write en hw/scsi/esp.c en el soporte 53C9X Fast SCSI Controller (FSC) en QEMU no comprueba correctamente el comando de longitud del buffer, lo que permite a los administradores de SO invitados locales provocar una denegación del servicio (escritura fuera de rango y caída del proceso QEMU) o potencialmente ejecutar código arbitrario en el anfitrión QEMU a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.0","matchCriteriaId":"EFCB21B5-E285-452B-B30E-6C9D21EF8072"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/19/3","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90760","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337502","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03273.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/19/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03273.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-4441","sourceIdentifier":"secalert@redhat.com","published":"2016-05-20T14:59:08.607","lastModified":"2026-06-17T00:47:33.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command."},{"lang":"es","value":"La función get_cmd en hw/scsi/esp.c en el soporte 53C9X Fast SCSI Controller (FSC) en QEMU no comprueba correctamente la extensión DMA, lo que permite a administradores locales invitados del sistema operativo provocar una denegación del servicio (escritura fuera de rango y caída del proceso QEMU) a través de vectores no especificados, involucrando un comando SCSI."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.0","matchCriteriaId":"EFCB21B5-E285-452B-B30E-6C9D21EF8072"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/19/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90762","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337505","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03274.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/19/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03274.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1401","sourceIdentifier":"psirt@cisco.com","published":"2016-05-21T01:59:00.113","lastModified":"2026-06-17T00:41:52.233","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de administración en Cisco Unified Computing System (UCS) Central Software 1.4(1a) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un valor manipulado, también conocida como Bug ID CSCuy91250."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_computing_system_central_software:1.4\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"6A507AA4-0F82-4081-B819-E76BA796F4D8"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ucs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035933","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ucs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9767","sourceIdentifier":"cve@mitre.org","published":"2016-05-22T01:59:00.163","lastModified":"2026-06-17T00:18:57.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la función ZipArchive::extractTo en ext/zip/php_zip.c en PHP en versiones anteriores a 5.4.45, 5.5.x en versiones anteriores a 5.5.29 y 5.6.x en versiones anteriores a 5.6.13 y ext/zip/ext_zip.cpp en HHVM en versiones anteriores a 3.12.1 permite a atacantes remotos crear directorios vacios arbitrarios a través de un archivo ZIP manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.45","matchCriteriaId":"1273AA6C-E3AC-4AB7-9EDC-5FC6F9F93145"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F6D9B19-E64D-4BED-9194-17460CE19E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F644EA6C-50C6-4A1C-A4AC-287AA9477B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD47F30-74F5-48E8-8657-C2373FE2BD22"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0C09527B-6B47-41F8-BDE6-01C47E452286"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2E454D87-23CB-4D7F-90FE-942EE54D661F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1031E646-F2CF-4A3E-8E6A-5D4BC950BEDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"130E50C1-D209-4CFF-9399-69D561340FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C1F29948-9417-460B-8B04-D91AE4E8B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"A37D00C1-4F41-4400-9CE4-8E8BAA3E4142"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"093D08B7-CC3C-4616-8697-F15B253A7D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"E9CD8FEE-DE7B-47CB-9985-4092BFA071D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"A30B2D9E-F289-43C9-BFBC-1CEF284A417E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"FE41CFDF-8ECD-41C1-94A7-5AFD42C5DDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"6AEAC9BA-AF82-4345-839C-D339DCB962A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"1EFE682F-52E3-48EC-A993-F522FC29712F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"AC63A449-5D92-4F5F-8186-B58FFFBA54FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"F18236F6-2065-4A6A-93E7-FD90E650C689"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DEFBA84A-A4E4-438B-B9B5-8549809DCECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"146D3DC9-50F4-430B-B321-68ECE78879A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"1D5A7CA6-7653-46C5-8DF7-95584BF7A879"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"C5BA8300-2F4D-4C1E-8CCE-F45E8F3547A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"59A42F02-F363-4C13-BE83-19F757B84455"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"423ECD5F-5611-4D9A-8BE8-E4DC1527AF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"44FE4648-22C5-44A6-A6DF-8B235EB7DEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.27:*:*:*:*:*:*:*","matchCriteriaId":"23006CC4-85FB-48AF-8F3A-97BC3FD7FAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.28:*:*:*:*:*:*:*","matchCriteriaId":"D6393D02-3968-4B0F-A2DE-61442E95DB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CE65D0D4-CB56-4946-AB44-2EF554602A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F13E2D-A8F7-4B74-8D03-7905C81672C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE18933A-5FE6-41C7-B1B6-DA3E762C3FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9AE1289F-03A6-4621-B387-5F5ADAC4AE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"383697F5-D29E-475A-84F3-46B54A928889"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"786ED182-5D71-4197-9196-12AB5CF05F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:*","matchCriteriaId":"BF90980D-74AD-44AA-A7C5-A0B294CCE4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:*","matchCriteriaId":"48D6B69C-8F27-4F4C-B953-67A7F9C2FBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B53DC0C3-EA19-4465-B65A-BC7CDB10D8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.9:*:*:*:*:*:*:*","matchCriteriaId":"BEA4DFC1-6C0C-42FB-9F47-E3E1AA9E47E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.10:*:*:*:*:*:*:*","matchCriteriaId":"D904E21A-4B3B-4D96-850C-0C0315F14E6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.11:*:*:*:*:*:*:*","matchCriteriaId":"C7CEF6D7-8966-45E7-BEBB-12055F5898C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.12:*:*:*:*:*:*:*","matchCriteriaId":"171C1035-414C-4F3A-90F4-1A8ED26E3346"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hiphop_virtual_machine_for_php_project:hiphop_virtual_machine_for_php:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"DC91F722-B416-42BE-8F06-13FE65154B3B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html","source":"cve@mitre.org"},{"url":"http://php.net/ChangeLog-5.php","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/16/20","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/76652","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035311","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2952-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2952-2","source":"cve@mitre.org"},{"url":"https://bugs.php.net/bug.php?id=67996","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugs.php.net/bug.php?id=70350","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://github.com/facebook/hhvm/commit/65c95a01541dd2fbc9c978ac53bed235b5376686","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/16/20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/76652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2952-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2952-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=67996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugs.php.net/bug.php?id=70350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://github.com/facebook/hhvm/commit/65c95a01541dd2fbc9c978ac53bed235b5376686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5714","sourceIdentifier":"cve@mitre.org","published":"2016-05-22T01:59:01.413","lastModified":"2026-06-17T00:29:38.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags."},{"lang":"es","value":"Vulnerabilidad de XSS en WordPress en versiones anteriores a 4.3.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios aprovechando el manejo incorrecto de elementos HTML no cerrados durante el procesamiento de etiquetas acortadas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.0","matchCriteriaId":"398224EA-459C-49CF-9176-B144CA74A0F2"}]}]}],"references":[{"url":"http://www.debian.org/security/2015/dsa-3375","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3383","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/76745","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1033979","source":"cve@mitre.org"},{"url":"https://codex.wordpress.org/Version_4.3.1","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/WordPress/WordPress/commit/f72b21af23da6b6d54208e5c1d65ececdaa109c8","source":"cve@mitre.org"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-5714","source":"cve@mitre.org"},{"url":"https://wordpress.org/news/2015/09/wordpress-4-3-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8186","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/76745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codex.wordpress.org/Version_4.3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/WordPress/WordPress/commit/f72b21af23da6b6d54208e5c1d65ececdaa109c8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-5714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wordpress.org/news/2015/09/wordpress-4-3-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5715","sourceIdentifier":"cve@mitre.org","published":"2016-05-22T01:59:02.617","lastModified":"2026-06-17T00:29:38.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors."},{"lang":"es","value":"La función mw_editPost en wp-includes/class-wp-xmlrpc-server.php en el subsistema XMLRPC en WordPress en versiones anteriores a 4.3.1 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y disponer para una publicación privada que sera publicada y adherida, a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.0","matchCriteriaId":"398224EA-459C-49CF-9176-B144CA74A0F2"}]}]}],"references":[{"url":"http://www.debian.org/security/2015/dsa-3375","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3383","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/76748","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1033979","source":"cve@mitre.org"},{"url":"https://codex.wordpress.org/Version_4.3.1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/WordPress/WordPress/commit/9c57f3a4291f2311ae05f22c10eedeb0f69337ab","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-5715","source":"cve@mitre.org"},{"url":"https://wordpress.org/news/2015/09/wordpress-4-3-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8188","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/76748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codex.wordpress.org/Version_4.3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/WordPress/WordPress/commit/9c57f3a4291f2311ae05f22c10eedeb0f69337ab","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-5715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wordpress.org/news/2015/09/wordpress-4-3-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7989","sourceIdentifier":"security@debian.org","published":"2016-05-22T01:59:03.867","lastModified":"2026-06-17T00:33:31.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714."},{"lang":"es","value":"Vulnerabilidad de XSS en la tabla de lista de usuarios en WordPress en versiones anteriores a 4.3.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una dirección de e-mail manipulada, una vulnerabilidad diferente de CVE-2015-5714."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.0","matchCriteriaId":"398224EA-459C-49CF-9176-B144CA74A0F2"}]}]}],"references":[{"url":"http://www.debian.org/security/2015/dsa-3375","source":"security@debian.org"},{"url":"http://www.debian.org/security/2015/dsa-3383","source":"security@debian.org"},{"url":"http://www.securitytracker.com/id/1033979","source":"security@debian.org"},{"url":"https://codex.wordpress.org/Version_4.3.1","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/WordPress/WordPress/commit/f91a5fd10ea7245e5b41e288624819a37adf290a","source":"security@debian.org","tags":["Patch"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7989","source":"security@debian.org"},{"url":"https://wordpress.org/news/2015/09/wordpress-4-3-1/","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8187","source":"security@debian.org"},{"url":"http://www.debian.org/security/2015/dsa-3375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codex.wordpress.org/Version_4.3.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/WordPress/WordPress/commit/f91a5fd10ea7245e5b41e288624819a37adf290a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wordpress.org/news/2015/09/wordpress-4-3-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8834","sourceIdentifier":"cve@mitre.org","published":"2016-05-22T01:59:04.757","lastModified":"2026-06-17T00:35:20.213","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440."},{"lang":"es","value":"Vulnerabilidad de XSS en wp-includes/wp-db.php en WordPress en versiones anteriores a 4.2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un comentario largo que se almacena de manera incorrecta debido a las limitaciones en el tipo de dato MySQL TEXT. NOTA: esta vulnerabilidad existe debido a una solución incompleta de CVE-2015-3440."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.1","matchCriteriaId":"BA8EFA8D-3D08-4C66-B8DE-3A8961C75740"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3639","source":"cve@mitre.org"},{"url":"https://codex.wordpress.org/Version_4.2.2","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://wordpress.org/news/2015/05/wordpress-4-2-2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codex.wordpress.org/Version_4.2.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://wordpress.org/news/2015/05/wordpress-4-2-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8878","sourceIdentifier":"cve@mitre.org","published":"2016-05-22T01:59:10.307","lastModified":"2026-06-17T00:35:25.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses."},{"lang":"es","value":"main/php_open_temporary_file.c en versiones anteriores a 5.5.28 y 5.6.x en versiones anteriores a 5.6.12 no asegura la protección contra amenazas, lo que permite a atacantes remotos provocar una denegación del servicio (condición de carrera y corrupción de la memoria dinámica) aprovechando una aplicación que ejecuta muchos accesos a archivos temporales."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.28","matchCriteriaId":"B9C0D35D-0789-471F-9252-FB4233D7E1F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.6.12","matchCriteriaId":"C946BEC6-918B-4C3F-9D2C-5FE90F693A2E"}]}]}],"references":[{"url":"http://www.php.net/ChangeLog-5.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.php.net/bug.php?id=70002","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.php.net/bug.php?id=70002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1564","sourceIdentifier":"security@debian.org","published":"2016-05-22T01:59:13.213","lastModified":"2026-06-17T00:42:10.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en wp-includes/class-wp-theme.php en WordPress en versiones anteriores a 4.4.1 permiten a atacantes remotos inyectar comandos de web o HTML arbitrarios a través de (1) nombre de hoja de estilo o (2) nombre de plantilla para wp-admin/customize.php."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.0","matchCriteriaId":"DD1784C9-AC24-462D-AB38-8899E8739D28"}]}]}],"references":[{"url":"http://twitter.com/brutelogic/statuses/685105483397619713","source":"security@debian.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2016/dsa-3444","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/08/4","source":"security@debian.org"},{"url":"http://www.securitytracker.com/id/1034622","source":"security@debian.org"},{"url":"https://codex.wordpress.org/Version_4.4.1","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"https://core.trac.wordpress.org/changeset/36185","source":"security@debian.org"},{"url":"https://wordpress.org/news/2016/01/wordpress-4-4-1-security-and-maintenance-release/","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8358","source":"security@debian.org"},{"url":"http://twitter.com/brutelogic/statuses/685105483397619713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2016/dsa-3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/01/08/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codex.wordpress.org/Version_4.4.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://core.trac.wordpress.org/changeset/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wordpress.org/news/2016/01/wordpress-4-4-1-security-and-maintenance-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8358","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4566","sourceIdentifier":"cve@mitre.org","published":"2016-05-22T01:59:30.247","lastModified":"2026-06-17T00:47:47.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack."},{"lang":"es","value":"Vulnerabilidad de XSS en plupload.flash.swf en Plupload en versiones anteriores a 2.1.9, como se utiliza en WordPress en versiones anteriores a 4.5.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un ataque Same-Origin Method Execution (SOME)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.1","matchCriteriaId":"DE5AB579-3BD2-49C4-9260-E8FB37637360"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plupload:plupload:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.8","matchCriteriaId":"3D289C49-B543-4DFB-B3BF-7DB7FE5FFA4E"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/07/2","source":"cve@mitre.org"},{"url":"http://www.plupload.com/punbb/viewtopic.php?pid=28690","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035818","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://codex.wordpress.org/Version_4.5.2","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://core.trac.wordpress.org/changeset/37382/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://gist.github.com/cure53/09a81530a44f6b8173f545accc9ed07e","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://wordpress.org/news/2016/05/wordpress-4-5-2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8489","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/07/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.plupload.com/punbb/viewtopic.php?pid=28690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://codex.wordpress.org/Version_4.5.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://core.trac.wordpress.org/changeset/37382/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://gist.github.com/cure53/09a81530a44f6b8173f545accc9ed07e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://wordpress.org/news/2016/05/wordpress-4-5-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-4567","sourceIdentifier":"cve@mitre.org","published":"2016-05-22T01:59:31.230","lastModified":"2026-06-17T00:47:48.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by \"jsinitfunctio%gn.\""},{"lang":"es","value":"Vulnerabilidad de XSS en flash/FlashMediaElement.as en MediaElement.js en versiones anteriores a 2.21.0, como se utiliza en WordPress en versiones anteriores a 4.5.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un formulario ofuscado del parámetro jsinitfunction, como es demostrado por \"jsinitfunctio%gn\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediaelementjs:mediaelement.js:*:*:*:*:*:*:*:*","versionEndIncluding":"2.20.1","matchCriteriaId":"7C1F3E4B-3818-4C0E-9BFA-B2183A8CE8D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.1","matchCriteriaId":"DE5AB579-3BD2-49C4-9260-E8FB37637360"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/07/2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035818","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://codex.wordpress.org/Version_4.5.2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://core.trac.wordpress.org/changeset/37371","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://gist.github.com/cure53/df34ea68c26441f3ae98f821ba1feb9c","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/johndyer/mediaelement/blob/master/changelog.md","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/johndyer/mediaelement/commit/34834eef8ac830b9145df169ec22016a4350f06e","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wordpress.org/news/2016/05/wordpress-4-5-2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8488","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/07/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://codex.wordpress.org/Version_4.5.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://core.trac.wordpress.org/changeset/37371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://gist.github.com/cure53/df34ea68c26441f3ae98f821ba1feb9c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/johndyer/mediaelement/blob/master/changelog.md","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/johndyer/mediaelement/commit/34834eef8ac830b9145df169ec22016a4350f06e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wordpress.org/news/2016/05/wordpress-4-5-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2151","sourceIdentifier":"secalert@redhat.com","published":"2016-05-22T20:59:00.097","lastModified":"2026-06-17T00:43:32.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"user/index.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 grants excessive authorization on the basis of the moodle/course:viewhiddenuserfields capability, which allows remote authenticated users to discover student e-mail addresses by leveraging the teacher role and reading a Participants list."},{"lang":"es","value":"user/index.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.13, 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3 concede excesiva autorización sobre la base de la capacidad de moodle/course:viewhiddenuserfields, lo que permite a usuarios remotos autenticados descubrir direcciones e-mail de estudiantes aprovechando el rol de profesor y leyendo una lista Participants."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD39692F-BC98-4AE3-B31A-4592D3212F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52433","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035333","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330173","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2152","sourceIdentifier":"secalert@redhat.com","published":"2016-05-22T20:59:01.097","lastModified":"2026-06-17T00:43:32.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an external DB profile field."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en auth/db/auth.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.13, 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un campo externo DB profile."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD39692F-BC98-4AE3-B31A-4592D3212F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035333","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330174","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2153","sourceIdentifier":"secalert@redhat.com","published":"2016-05-22T20:59:02.083","lastModified":"2026-06-17T00:43:32.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the advanced-search feature in mod_data in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted field in a URL, as demonstrated by a search form field."},{"lang":"es","value":"Vulnerabilidad de XSS en la funcionalidad advanced-search en mod_data en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.13, 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un campo manipulado en una URL, según lo demostrado por un campo de formulario de búsqueda."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD39692F-BC98-4AE3-B31A-4592D3212F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52727","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035333","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330175","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2154","sourceIdentifier":"secalert@redhat.com","published":"2016-05-22T20:59:03.097","lastModified":"2026-06-17T00:43:32.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to discover hidden course names by subscribing to a rule."},{"lang":"es","value":"admin/tool/monitor/lib.php en Event Monitor en Moodle 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3 no considera la capacidad moodle/course:viewhiddencourses, lo que permite a usuarios remotos autenticados descubrir el nombre de cursos ocultos suscribiéndose a una regla."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51167","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035333","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330176","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2155","sourceIdentifier":"secalert@redhat.com","published":"2016-05-22T20:59:04.130","lastModified":"2026-06-17T00:43:32.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The grade-reporting feature in Singleview (aka Single View) in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/grade:manage capability, which allows remote authenticated users to modify \"Exclude grade\" settings by leveraging the Non-Editing Instructor role."},{"lang":"es","value":"La funcionalidad grade-reporting en Singleview (también conocida como Single View) en Moodle 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3 no considera la capacidad moodle/grade:manage, lo que permite a usuarios remotos autenticados modificar ajustes \"Exclude grade\" aprovechando el rol Non-Editing Instructor."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52378","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035333","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330177","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2156","sourceIdentifier":"secalert@redhat.com","published":"2016-05-22T20:59:05.347","lastModified":"2026-06-17T00:43:32.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"calendar/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 provides calendar-event data without considering whether an activity is hidden, which allows remote authenticated users to obtain sensitive information via a web-service request."},{"lang":"es","value":"alendar/externallib.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.13, 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3 proporciona datos de eventos de calendario sin tener en cuenta si una actividad está oculta, lo que permite a usuarios remotos autenticados obtener información sensible a través de una petición de servicio web."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD39692F-BC98-4AE3-B31A-4592D3212F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52808","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035333","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330178","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2158","sourceIdentifier":"secalert@redhat.com","published":"2016-05-22T20:59:07.223","lastModified":"2026-06-17T00:43:33.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, when the forcelogin feature is enabled, allows remote attackers to obtain sensitive category-detail information from the navigation branch by leveraging the guest role for an Ajax request."},{"lang":"es","value":"lib/ajax/getnavbranch.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.13, 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3, cuando la funcionalidad forcelogin está activada, permite a atacantes remotos obtener información sensible del detalle de categoría de la rama de navegación aprovechando el rol de invitado para una petición Ajax."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD39692F-BC98-4AE3-B31A-4592D3212F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52774","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035333","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330180","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2159","sourceIdentifier":"secalert@redhat.com","published":"2016-05-22T20:59:08.177","lastModified":"2026-06-17T00:43:33.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The save_submission function in mod/assign/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote authenticated users to bypass intended due-date restrictions by leveraging the student role for a web-service request."},{"lang":"es","value":"La función save_submission en mod/assign/externallib.php en Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.13, 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3 permite a usuarios remotos autenticados eludir las restricciones de fecha de vencimiento previstas aprovechando el rol de estudiante para un petición de servicio web."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD39692F-BC98-4AE3-B31A-4592D3212F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52901","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035333","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330182","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2190","sourceIdentifier":"secalert@redhat.com","published":"2016-05-22T20:59:09.117","lastModified":"2026-06-17T00:43:38.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log."},{"lang":"es","value":"Moodle hasta la versión 2.6.11, 2.7.x en versiones anteriores a 2.7.13, 2.8.x en versiones anteriores a 2.8.11, 2.9.x en versiones anteriores a 2.9.5 y 3.0.x en versiones anteriores a 3.0.3 no restringe correctamente enlaces, lo que permite a atacantes remotos obtener información URL sensible leyendo un registro Referer."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.11","matchCriteriaId":"9F3E36CA-026A-4262-8CB7-73E0FC315A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E051AAC-EB40-491F-AF0E-EE8143C12567"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FADBE87F-1855-453B-B958-0CB8A7908A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B53A7D2-BDA2-4185-97C3-977A04876A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A51DFFA8-DFF0-429C-B697-F82F41621FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"19FD1565-0DA1-4BA8-A501-86F13D3D29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB754AF-3DA4-4459-A53B-3BC7B78CE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F57E8383-C3F3-480C-B9A9-49633DAAEC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"645E8B7B-1AE6-4F46-AFA9-7506685CD571"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0316A26A-8B51-4226-8D56-4A798A2D798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD39692F-BC98-4AE3-B31A-4592D3212F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"12737AF4-B2D5-4661-B06A-6A06FE95EC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"88C59A94-D225-478A-B23E-41C4324BC643"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D88385B1-EEFB-4825-BD8F-215C39FD86DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2782-D167-4237-B57D-2E4C04571524"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F277F979-12FA-47A5-B0A5-D174C2127A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"38498617-8E45-4E73-AE9F-C7A0D18FDE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"C9047769-BFF4-42DB-8B19-F6D16FA910A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"73A75ACE-FED2-4830-B259-744ABF25463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"F04EBA18-DFFF-4529-B647-98191325663B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"A3A746AB-5D58-4196-962A-D22454C3550B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C9224D94-1C48-468C-A39B-B2694ED178F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1C7EE9AD-E122-4288-9416-6D8F8790D75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C4FC2CC1-787B-480F-BC41-538CE2507CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"098BADF2-C1D3-406E-9E79-E25483178C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"611B027A-38D6-445E-BFA9-FA68524147DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C22EB95-6D8F-45F8-A000-795E259CF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B3EEF9-F300-461F-9407-0FFB3E3CD421"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035333","source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330181","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=330181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4482","sourceIdentifier":"cve@mitre.org","published":"2016-05-23T10:59:00.113","lastModified":"2026-06-17T00:47:38.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call."},{"lang":"es","value":"La función proc_connectinfo en drivers/usb/core/devio.c en el kernel de Linux hasta la versión 4.6 no inicializa una estructura de datos determinada, lo que permite a usuarios locales obtener información sensible del kernel de memoria de pila a través de una llamada USBDEVFS_CONNECTINFO ioctl manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"E9F34BEC-51BF-44FB-8919-029E2E8E5690"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*","matchCriteriaId":"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=681fef8380eb818c0b845fca5d2ab1dcbab114ee","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184414.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/04/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/90029","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3016-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-3","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-4","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-3","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3018-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3018-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3019-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3020-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332931","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/681fef8380eb818c0b845fca5d2ab1dcbab114ee","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=681fef8380eb818c0b845fca5d2ab1dcbab114ee","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/04/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3016-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3018-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3018-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3019-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3020-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/681fef8380eb818c0b845fca5d2ab1dcbab114ee","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4569","sourceIdentifier":"cve@mitre.org","published":"2016-05-23T10:59:08.097","lastModified":"2026-06-17T00:47:48.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface."},{"lang":"es","value":"La función snd_timer_user_params en sound/core/timer.c en el kernel de Linux hasta la versión 4.6 no inicializa una estructura de datos determinada, lo que permite a usuarios locales obtener información sensible del kernel de memoria de pila a través del uso manipulado de la interfaz ALSA timer."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"E9F34BEC-51BF-44FB-8919-029E2E8E5690"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A5FDEDA8-6F51-4945-B443-438CC987F235"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"E090E7B3-2346-463D-8A0C-8B482500CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CCAAE4A1-D542-43F3-B7FC-685BCDB248D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12.0:*:*:*:*:*:*:*","matchCriteriaId":"A961CBC6-3CA1-4A0F-BBE0-8F6315781B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:extra:*:*:*:*:*:*","matchCriteriaId":"A8877923-3E50-4F71-B501-E6997894D07E"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*","matchCriteriaId":"ADE9D807-6690-4D67-A6B3-68BBC9B50153"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF461FB4-8BA5-4065-9A69-DC017D3611C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1F003591-0639-476C-A014-03F06A274880"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cec8f96e49d9be372fdb0c3836dcf31ec71e457e","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/09/17","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/90347","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3016-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3016-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3016-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3016-4","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3017-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3017-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3017-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3018-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3018-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3019-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3020-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3021-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334643","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/cec8f96e49d9be372fdb0c3836dcf31ec71e457e","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cec8f96e49d9be372fdb0c3836dcf31ec71e457e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/09/17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3016-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3016-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3016-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3016-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3017-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3017-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3017-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3018-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3018-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3019-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3020-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3021-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/cec8f96e49d9be372fdb0c3836dcf31ec71e457e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4578","sourceIdentifier":"cve@mitre.org","published":"2016-05-23T10:59:09.050","lastModified":"2026-06-17T00:47:49.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions."},{"lang":"es","value":"sound/core/timer.c en el kernel de Linux hasta la versión 4.6 no inicializa determinadas estructuras de datos r1, lo que permite a usuarios locales obtener información sensible del kernel de memoria de pila a través del uso manipulado de la interfaz ALSA timer, relacionado con las funciones (1) snd_timer_user_ccallback y (2) snd_timer_user_tinterrupt."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"E9F34BEC-51BF-44FB-8919-029E2E8E5690"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4ec8cc8039a7063e24204299b462bd1383184a5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/11/5","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/90535","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3016-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-3","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-4","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-3","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3018-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3018-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3019-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3020-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335215","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/torvalds/linux/commit/e4ec8cc8039a7063e24204299b462bd1383184a5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/46529/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4ec8cc8039a7063e24204299b462bd1383184a5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/11/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/90535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3016-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3016-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3017-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3018-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3018-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3019-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3020-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3021-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/torvalds/linux/commit/e4ec8cc8039a7063e24204299b462bd1383184a5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/46529/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-4581","sourceIdentifier":"secalert@redhat.com","published":"2016-05-23T10:59:11.083","lastModified":"2026-06-17T00:47:50.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls."},{"lang":"es","value":"fs/pnode.c en el kernel de Linux en versiones anteriores a 4.5.4 no cruza adecuadamente la propagación del montaje de árbol en un determinado caso implicando un montaje esclavo, lo que permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL y OOPS) a través de una serie de llamadas de soporte manipuladas."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.3","matchCriteriaId":"E7AEB8DD-7C80-4B48-98E0-0502F1575337"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5ec0811d30378ae104f250bfc9b3640242d81e3f","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.4","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/11/2","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/90607","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2989-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2998-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3004-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3005-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3006-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3007-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333712","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/5ec0811d30378ae104f250bfc9b3640242d81e3f","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5ec0811d30378ae104f250bfc9b3640242d81e3f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/11/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2989-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2998-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3000-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3004-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3005-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3006-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3007-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/5ec0811d30378ae104f250bfc9b3640242d81e3f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-8558","sourceIdentifier":"secalert@redhat.com","published":"2016-05-23T19:59:00.307","lastModified":"2026-06-17T00:34:46.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list."},{"lang":"es","value":"La función ehci_process_itd en hw/usb/hcd-ehci.c en QEMU permite a administradores de SO locales invitados provocar una denegación de servicio (bucle infinito y consumo de CPU) a través de una lista iTD (de descriptor de transferencia isócrona) circular."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1.1","matchCriteriaId":"1E0091D0-CCD9-4017-A266-32576814AE63"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=156a2e4dbffa85997636a7a39ef12da6f1b40254","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3469","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3470","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3471","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/14/16","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/14/9","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/80694","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1277983","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02124.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201602-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=156a2e4dbffa85997636a7a39ef12da6f1b40254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/14/16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/14/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/80694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1277983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02124.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201602-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-4037","sourceIdentifier":"secalert@redhat.com","published":"2016-05-23T19:59:06.933","lastModified":"2026-06-17T00:46:46.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558."},{"lang":"es","value":"La función ehci_advance_state en hw/usb/hcd-ehci.c en QEMU permite a administradores de SO locales invitados provocar una denegación de servicio (bucle infinito y consumo de CPU) a través de una lista siTD (de descriptor de transferencia isócrona dividida) circular, problema relacionado con CVE-2015-8558."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*","matchCriteriaId":"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"26A04769-0D4E-4B7B-B54C-C686FB69D85A"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.6.0:rc0:*:*:*:*:*:*","matchCriteriaId":"544B3E62-7AE7-4925-9E50-CAFDAD5A3851"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B8C11472-2B2A-4110-A04B-5CFBA0763432"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ECD3B63B-1388-4C24-B9B9-043C04FE1F1B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1ae3f2f178087711f9591350abad133525ba93f2","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183275.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183350.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184209.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/18/3","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/18/6","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/86283","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg02691.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg02734.html","source":"secalert@redhat.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1ae3f2f178087711f9591350abad133525ba93f2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183275.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183350.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/18/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/18/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/86283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg02691.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg02734.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4783","sourceIdentifier":"cve@mitre.org","published":"2016-05-23T19:59:13.167","lastModified":"2026-06-17T00:48:12.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS).\""},{"lang":"es","value":"Vulnerabilidad de XSS en Lenovo SHAREit en versiones anteriores a 3.5.98_ww en Android en versiones anteriores a 4.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, también conocida como \"Universal XSS (UXSS)\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:shareit:3.5.98_ww:*:*:*:*:android:*:*","matchCriteriaId":"609C5EFA-DBCD-4E1E-AA85-988500CFA0A1"}]}]}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/len_6421","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.lenovo.com/us/en/product_security/len_6421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0264","sourceIdentifier":"psirt@us.ibm.com","published":"2016-05-24T15:59:00.117","lastModified":"2026-06-17T00:37:12.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de buffer en Java Virtual Machine (JVM) en IBM SDK, Java Technology Edition 6 en versiones anteriores a SR16 FP25 (6.0.16.25), 6 R1 en versiones anteriores a SR8 FP25 (6.1.8.25), 7 en versiones anteriores a SR9 FP40 (7.0.9.40), 7 R1 en versiones anteriores a SR3 FP40 (7.1.3.40) y 8 en versiones anteriores a SR3 (8.0.3.0) permite a atacantes remotos ejecutar código arbitrario a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*","versionStartIncluding":"6.0.0.0","versionEndExcluding":"6.0.16.25","matchCriteriaId":"A27846D2-F8BC-4A9B-9B59-E6E71BB869BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*","versionStartIncluding":"6.1.0.0","versionEndExcluding":"6.1.8.25","matchCriteriaId":"9F139472-2499-44AF-A466-0043BB83E254"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*","versionStartIncluding":"7.0.0.0","versionEndExcluding":"7.0.9.40","matchCriteriaId":"A44B197F-40EF-465F-9995-691EA879F121"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*","versionStartIncluding":"7.1.0.0","versionEndExcluding":"7.1.3.40","matchCriteriaId":"626BA0D0-5526-4344-822B-0F5837C43C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*","versionStartIncluding":"8.0.0.0","versionEndExcluding":"8.0.3.0","matchCriteriaId":"DDBE9092-9478-4899-88D2-95E4EDACB4FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*","matchCriteriaId":"D4840254-CC76-4113-BC61-360BD15582B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*","matchCriteriaId":"85EA16E0-9261-45C4-840F-5366E9EAC5E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"585614D3-1DAA-4256-83DE-AFE901154808"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_supplementary:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8440BA16-EAC4-4F27-99A4-795295DA6646"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*","matchCriteriaId":"6C81647C-9A53-481D-A54C-36770A093F90"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*","matchCriteriaId":"35BBD83D-BDC7-4678-BE94-639F59281139"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"CB6476C7-03F2-4939-AB85-69AA524516D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*","matchCriteriaId":"B12243B2-D726-404C-ABFF-F1AB51BA1783"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*","matchCriteriaId":"DB2A1559-651C-46B0-B436-8E03DC8A60D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*","matchCriteriaId":"9C649194-B8C2-49F7-A819-C635EE584ABF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FD4EEF7C-CC33-4494-8531-7C0CC28A8823"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CBED083-B935-4C47-BBDA-F39D8EA277ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*","matchCriteriaId":"BD6136E8-74DE-48AF-A8AB-B0E93D34870C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html","source":"psirt@us.ibm.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html","source":"psirt@us.ibm.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html","source":"psirt@us.ibm.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html","source":"psirt@us.ibm.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html","source":"psirt@us.ibm.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html","source":"psirt@us.ibm.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html","source":"psirt@us.ibm.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html","source":"psirt@us.ibm.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0701.html","source":"psirt@us.ibm.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0702.html","source":"psirt@us.ibm.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0708.html","source":"psirt@us.ibm.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0716.html","source":"psirt@us.ibm.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1039.html","source":"psirt@us.ibm.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV84035","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21980826","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035953","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","source":"psirt@us.ibm.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1216","source":"psirt@us.ibm.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0701.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0702.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0708.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0716.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV84035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21980826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-3672","sourceIdentifier":"secalert@redhat.com","published":"2016-05-25T15:59:00.113","lastModified":"2026-06-17T00:08:43.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr."},{"lang":"es","value":"La implementación de qemu en libvirt en versiones anteriores a 1.3.0 y Xen permite a usuarios locales del SO invitado provocar una denegación de servicio (consumo de disco anfitrión) escribiendo stdout o stderr."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.21","matchCriteriaId":"9A7A5FAD-60E5-4D53-86C5-36F05B21775B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*","matchCriteriaId":"C2B9CCC2-BAC5-4A65-B8D4-4B71EBBA0C2F"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/24/5","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035945","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-180.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=0d968ad715475a1660779bcdd2c5b38ad63db4cf","source":"secalert@redhat.com"},{"url":"https://libvirt.org/news-2015.html","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/24/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=0d968ad715475a1660779bcdd2c5b38ad63db4cf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://libvirt.org/news-2015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4020","sourceIdentifier":"secalert@redhat.com","published":"2016-05-25T15:59:04.927","lastModified":"2026-06-17T00:46:44.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR)."},{"lang":"es","value":"La función patch_instruction en hw/i386/kvmvapic.c en QEMU no inicializa la variable imm32, lo que permite a administradores locales del SO invitado obtener información sensible de la memoria de pila del anfitrión accediendo al Task Priority Register (TPR)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.0,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"3CF78B06-34D3-4BF8-883B-7B9643BBA7CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*","matchCriteriaId":"31EC146C-A6F6-4C0D-AF87-685286262DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9DAA72A4-AC7D-4544-89D4-5B07961D5A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*","matchCriteriaId":"E8B8C725-34CF-4340-BE7B-37E58CF706D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*","matchCriteriaId":"F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*","matchCriteriaId":"E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*","matchCriteriaId":"4E9AF77C-5D49-4842-9817-AD710A919073"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=691a02e2ce0c413236a78dee6f2651c937b09fb0","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/86067","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1856","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2392","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2408","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313686","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01106.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01118.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=691a02e2ce0c413236a78dee6f2651c937b09fb0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/86067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01106.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-4575","sourceIdentifier":"cve@mitre.org","published":"2016-05-25T15:59:06.300","lastModified":"2026-06-17T00:47:49.127","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 before AL00C00B361, CL00C92 before CL00C92B361, TL00HC01 before TL00HC01B361, and UL00C00 before UL00C00B361; CherryPlus smartphones with software TL00C00 before TL00C00B553, UL00C00 before UL00C00B553, and TL00MC01 before TL00MC01B553; and RIO smartphones with software AL00C00 before AL00C00B360 allows remote attackers to inject arbitrary web script or HTML via an email message."},{"lang":"es","value":"Vulnerabilidad de XSS en el email APP en smartphones Huawei PLK con software AL10C00 en versiones anteriores a AL10C00B211 y AL10C92 en versiones anteriores a AL10C92B211; smartphones ATH con software AL00C00 en versiones anteriores a AL00C00B361, CL00C92 en versiones anteriores a CL00C92B361, TL00HC01 en versiones anteriores a TL00HC01B361 y UL00C00 en versiones anteriores a UL00C00B361; smartphones CherryPlus con software TL00C00 en versiones anteriores a TL00C00B553, UL00C00 en versiones anteriores a UL00C00B553 y TL00MC01 en versiones anteriores a TL00MC01B553; y smartphones RIO con software AL00C00 en versiones anteriores a AL00C00B360 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un mensaje de email."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ath_firmware:al00c00:*:*:*:*:*:*:*","matchCriteriaId":"F6DB67AC-8BD0-457A-B810-B6509721D32F"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ath_firmware:cl00c92:*:*:*:*:*:*:*","matchCriteriaId":"C38376A3-4432-4E98-B141-B225102E2004"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ath_firmware:tl00hc01:*:*:*:*:*:*:*","matchCriteriaId":"82A32ECC-6190-4297-B5CB-BD379DFCA808"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ath_firmware:ul00c00:*:*:*:*:*:*:*","matchCriteriaId":"2E53EA8C-68BF-4D2D-BE64-8406AE423F32"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:ath:-:*:*:*:*:*:*:*","matchCriteriaId":"93508441-3835-4E42-9EE4-81BE855CF791"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:rio_firmware:al00c00:*:*:*:*:*:*:*","matchCriteriaId":"95EC8710-A960-4504-97F9-8FCD679702FE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:rio:-:*:*:*:*:*:*:*","matchCriteriaId":"824B416C-537A-4525-A611-2261D1B6DA9D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:plk_firmware:al10c00:*:*:*:*:*:*:*","matchCriteriaId":"F9ABF6E1-F898-47E2-8C8B-E85FAE42941C"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:plk_firmware:al10c92:*:*:*:*:*:*:*","matchCriteriaId":"DBAEDA23-61F6-4240-AA6A-E17C734AAD83"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:plk:-:*:*:*:*:*:*:*","matchCriteriaId":"6141EDCE-1950-48F3-8187-BE4FAFF274E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:cherryplus_firmware:tl00c00:*:*:*:*:*:*:*","matchCriteriaId":"FE07476A-AEA1-420D-B4C4-A120B9EBEA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:cherryplus_firmware:tl00mc01:*:*:*:*:*:*:*","matchCriteriaId":"4AF28C8B-E9CD-436B-AFFE-06CF891EA621"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:cherryplus_firmware:ul00c00:*:*:*:*:*:*:*","matchCriteriaId":"96C14166-EF1E-4034-B8AB-79F750BF1EB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:cherryplus:-:*:*:*:*:*:*:*","matchCriteriaId":"47C656C5-9B4F-4F6F-9F3C-6B6BC38035BF"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160507-01-emailapp-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160507-01-emailapp-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2784","sourceIdentifier":"cve@mitre.org","published":"2016-05-26T14:59:00.133","lastModified":"2026-06-17T00:44:23.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request."},{"lang":"es","value":"CMS Made Simple 2.x en versiones anteriores a 2.1.3 y 1.x en versiones anteriores a 1.12.2, cuando está activada la Smarty Cache, permiten a atacantes remotos llevar a cabo ataques de envenenamiento de la caché, modificar enlaces y llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) a través de una cabecera HTTP Host manipulada en una petición."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:*:*:*:*:*:*:*","matchCriteriaId":"43F7E5BD-553E-4731-BED1-7E7DB772AD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F4BF3B2C-1909-4CCF-A487-6378615D6A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD2946B5-8AAF-4386-8C31-7D291C31BB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5AB06C16-336C-4D85-84F6-24F079A2B144"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4FB1C531-AA30-4B89-A8BF-744B053B4983"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD0AE7F4-49F8-443A-9C8F-2F1C42F46713"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0203A997-A077-4A8A-A3FE-CA9D10FF43AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A5AAB099-B114-4A99-B086-9BA7866D4E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"942BF218-1898-4135-9CA9-FAE4F091C883"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1:*:*:*:*:*:*:*","matchCriteriaId":"574E610A-4799-45C9-B005-C1593B033AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3B9680-3A66-4508-A318-B9B348FDC222"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9BDADD27-8249-4DE3-A2B5-EE1A3AD73F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"87178F45-424A-47D8-BEA5-B8371B722CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"49DE10A7-9BC6-4B33-97FC-5FEB44AEAFBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A2FA0450-91E6-4250-A1D1-F2CFBB74A5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"98D93656-A4D2-44C4-82EC-55C8BE1A7304"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BAEAE47F-5A26-474E-8F7F-72976A8FEBA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E188A80A-980F-4AD8-B3B8-21D303121F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E730A3A8-8A60-4CC5-B167-26984DE0DA3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FA19F5B2-7C5C-43DD-85ED-E2CD4EF6E748"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3:*:*:*:*:*:*:*","matchCriteriaId":"778E5678-B763-415E-AA35-EF644E7A2CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"91C39415-8F99-45FB-BE00-1888901BB4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.4:*:*:*:*:*:*:*","matchCriteriaId":"8F8649F4-1A33-41AE-888F-2D6BB19BCB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2DC37F28-C58A-4492-A107-4348ECE9AAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5:*:*:*:*:*:*:*","matchCriteriaId":"206B72EC-895E-4DA0-B41B-AAE41E53C108"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CC131029-CE9C-437E-B3D3-7924062E14D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"AF34A817-09AC-4C7E-916B-1B158C5EE599"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"20E8FFE1-9431-4146-AFD3-5491F5FE3C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C1016173-D980-4909-86C0-81C94711FE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6:*:*:*:*:*:*:*","matchCriteriaId":"068BF668-9626-4CA4-A401-1946DCF916AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DA029BD9-1025-4802-BAE2-BEE218715FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"9928102A-27E2-4604-93F4-318BA7CDCAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F1EECFB4-7001-411F-BBAE-BABD5248E4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"40C6F2FA-0518-4B2A-9F05-51897A16AF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"A35145EB-E7A7-48EC-91A9-9D423F316712"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"589C199E-12F9-41CF-BFE0-4B952B773460"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"7BB9992D-2EF4-4DBF-898A-6284A074403E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B18A2D88-5B3E-4CCF-B979-F7D7A9F7EA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"36B86387-A26E-4017-B3FA-45E1BF90D9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"9295BA82-379C-43FE-B2D1-B7929E108F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.7:*:*:*:*:*:*:*","matchCriteriaId":"2F14D3BD-5835-4206-BE44-72F31F46D067"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"61F2E017-EEBD-473F-A15A-FD7B52A74E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.8:*:*:*:*:*:*:*","matchCriteriaId":"EE7E3436-2FF9-4DC6-A552-A46330220AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"8C5A4D84-4C6D-453D-B1D3-2445DD7213C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"4EC3F038-4441-4409-9384-26565F6385EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.9:*:*:*:*:*:*:*","matchCriteriaId":"CF32C8E8-0937-453E-9487-395331A50611"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"9523997A-4302-411D-8BF2-711A28969704"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"95ED7D98-40D4-41C3-8029-EDC5A41EEBAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"D3F744F6-DCAE-486A-BED8-F560186628C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A152CC40-72E0-4200-8670-CD99C69141EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F9B346F2-919D-4D5E-AFFF-25531AC3676E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F7C0B4EB-BA28-4BBE-8A73-926DC0B38F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"2DA09626-9C30-4FAB-82A6-A7D5903127BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.10:*:*:*:*:*:*:*","matchCriteriaId":"4263AF5A-FE04-4EAC-87C2-03B042C0A71E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"ECB069E1-970B-456E-B477-DCD68F4CCCBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"0D205015-13AE-45D2-9309-3D9C90B0C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"18C19AF4-A88F-4835-8A36-394637C6BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11:*:*:*:*:*:*:*","matchCriteriaId":"578303F3-6729-45A9-8DBE-A2C393E7BB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"93A32CE1-85A4-417F-90D4-1378B61A45E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"D63AC3D8-0297-423B-9D50-59F7B1582348"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"272A22FB-4553-47FD-88D6-B2D0C096F6EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"C57412ED-477E-463D-91AB-CC02149A6E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.4:*:*:*:*:*:*:*","matchCriteriaId":"B2AB67E7-4528-4AE0-9B60-DD5B1B71D17E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5CD8DAF5-2EE2-40D2-9DFA-1D2BA749757D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.6:*:*:*:*:*:*:*","matchCriteriaId":"F883A9BD-A10A-4EA5-AE2C-22994D650E0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.7:*:*:*:*:*:*:*","matchCriteriaId":"B35E25E4-A524-43FF-923F-446DB297CE26"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.8:*:*:*:*:*:*:*","matchCriteriaId":"2E8C4A8F-1A37-4A7B-A702-E889FF17FAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.9:*:*:*:*:*:*:*","matchCriteriaId":"4A1B4A9B-EE73-4BDC-A4DA-966EAF49CC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.10:*:*:*:*:*:*:*","matchCriteriaId":"11DBE7DB-344E-4085-ABA4-E8058948B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.11:*:*:*:*:*:*:*","matchCriteriaId":"9F683B79-8979-416C-9879-1B243F8499D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.12:*:*:*:*:*:*:*","matchCriteriaId":"F5FF3EF4-A8A8-48AE-BA5E-ACEBCD66730C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.11.13:*:*:*:*:*:*:*","matchCriteriaId":"3C3CB267-CB92-43A8-8F54-5E5E6BACD06C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.12:*:*:*:*:*:*:*","matchCriteriaId":"908EF5A9-559B-4867-84EB-4E7879F35FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65586-DB2A-4546-8066-1E768277CA08"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0:*:*:*:*:*:*:*","matchCriteriaId":"389CB2B3-4933-4F8D-90F4-E5EE9CDA4201"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"35C6F173-C048-423A-9D02-32C76B984863"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"87EAFA66-0CC0-46C4-A661-54F59D2E31AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6DBC33E0-708B-497A-B3F7-33A525144256"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"488531A2-5E42-4A89-BB62-1EBFD3F5BC4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"ADDCAA0F-E9B6-4050-A211-D1CF9991F525"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/136897/CMS-Made-Simple-Cache-Poisoning.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/May/15","source":"cve@mitre.org"},{"url":"http://www.cmsmadesimple.org/2016/03/Announcing-CMSMS-1-12-2-kolonia/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cmsmadesimple.org/2016/04/Announcing-CMSMS-2-1-3-Black-Point/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/538272/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/39760/","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/136897/CMS-Made-Simple-Cache-Poisoning.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/May/15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cmsmadesimple.org/2016/03/Announcing-CMSMS-1-12-2-kolonia/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cmsmadesimple.org/2016/04/Announcing-CMSMS-2-1-3-Black-Point/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538272/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39760/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4788","sourceIdentifier":"cve@mitre.org","published":"2016-05-26T14:59:04.527","lastModified":"2026-06-17T00:48:13.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via unknown vectors."},{"lang":"es","value":"Pulse Connect Secure (PCS) 8.2 en versiones anteriores a 8.2r1, 8.1 en versiones anteriores a 8.1r2, 8.0 en versiones anteriores a 8.0r10 y 7.4 en versiones anteriores a 7.4r13.4 permite a atacantes remotos leer un archivo de sistema no especificado a través de vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.2:*:*:*:*:*:*:*","matchCriteriaId":"A2BCE3E8-ED64-4CCD-9A3F-3D99476B81E1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.1:*:*:*:*:*:*:*","matchCriteriaId":"202E4839-7CE4-49CE-BEE1-CB33A96770E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.0:*:*:*:*:*:*:*","matchCriteriaId":"E2037BE1-408C-47E8-8A70-8440BF3A1ED6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4:*:*:*:*:*:*:*","matchCriteriaId":"8A1A7B1C-EF34-4F63-AE11-75DB8DCBF9F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.0:*:*:*:*:*:*:*","matchCriteriaId":"52840E34-91BB-4E44-BE85-B50CDE4D2EDD"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035932","source":"cve@mitre.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40208","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4789","sourceIdentifier":"cve@mitre.org","published":"2016-05-26T14:59:05.447","lastModified":"2026-06-17T00:48:13.420","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la sección de configuración del sistema en la interaz de usuario administrativo en Pulse Connect Secure (PCS) 8.2 en versiones anteriores a 8.2r1, 8.1 en versiones anteriores a 8.1r2, 8.0 en versiones anteriores a 8.0r9 y 7.4 en versiones anteriores a 7.4r13.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-28T18:08:32.865170Z","id":"CVE-2016-4789","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.1:*:*:*:*:*:*:*","matchCriteriaId":"202E4839-7CE4-49CE-BEE1-CB33A96770E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.0:*:*:*:*:*:*:*","matchCriteriaId":"E2037BE1-408C-47E8-8A70-8440BF3A1ED6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.0:*:*:*:*:*:*:*","matchCriteriaId":"52840E34-91BB-4E44-BE85-B50CDE4D2EDD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4:*:*:*:*:*:*:*","matchCriteriaId":"8A1A7B1C-EF34-4F63-AE11-75DB8DCBF9F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.2:*:*:*:*:*:*:*","matchCriteriaId":"A2BCE3E8-ED64-4CCD-9A3F-3D99476B81E1"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035932","source":"cve@mitre.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4790","sourceIdentifier":"cve@mitre.org","published":"2016-05-26T14:59:06.573","lastModified":"2026-06-17T00:48:13.553","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de usuario administrativo en Pulse Connect Secure (PCS) 8.2 en versiones anteriores a 8.2r1, 8.1 en versiones anteriores a 8.1r2, 8.0 en versiones anteriores a 8.0r9 y 7.4 en versiones anteriores a 7.4r13.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.1:*:*:*:*:*:*:*","matchCriteriaId":"202E4839-7CE4-49CE-BEE1-CB33A96770E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.0:*:*:*:*:*:*:*","matchCriteriaId":"E2037BE1-408C-47E8-8A70-8440BF3A1ED6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.0:*:*:*:*:*:*:*","matchCriteriaId":"52840E34-91BB-4E44-BE85-B50CDE4D2EDD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4:*:*:*:*:*:*:*","matchCriteriaId":"8A1A7B1C-EF34-4F63-AE11-75DB8DCBF9F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.2:*:*:*:*:*:*:*","matchCriteriaId":"A2BCE3E8-ED64-4CCD-9A3F-3D99476B81E1"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035932","source":"cve@mitre.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4792","sourceIdentifier":"cve@mitre.org","published":"2016-05-26T14:59:08.853","lastModified":"2026-06-17T00:48:13.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Pulse Connect Secure (PCS) 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors."},{"lang":"es","value":"Pulse Connect Secure (PCS) 8.2 en versiones anteriores a 8.2r1 permite a atacantes remotos revelar señales en páginas a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanti:connect_secure:8.2:*:*:*:*:*:*:*","matchCriteriaId":"A2BCE3E8-ED64-4CCD-9A3F-3D99476B81E1"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1035932","source":"cve@mitre.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7360","sourceIdentifier":"cve@mitre.org","published":"2016-05-26T15:59:00.133","lastModified":"2026-06-17T00:32:18.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) serial parameter to alerts/summary/profile/; the (2) urlForCreatingReport parameter to csearch/report/export/; the (3) id parameter to analysis/detail/download/screenshot; or vectors related to (4) \"Fortiview threats by users search filtered by vdom\" or (5) \"PCAP file download generated by the VM scan feature.\""},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en la Web User Interface (WebUI) en Fortinet FortiSandbox en versiones anteriores a 2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTLM arbitrarios a través del (1) parámetro serial para alerts/summary/profile/; (2) parámetro urlForCreatingReport para csearch/report/export/; (3) parámetro id para analysis/detail/download/screenshot; o vectores relacionados con (4) \"amenazas Fortiview por el filtrado de búsqueda de usuarios por vdom\" o (5) \"descarga de archivo PCAP generada por la funcionalidad scan VM\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortisandbox:-:*:*:*:*:*:*:*","matchCriteriaId":"A5894BBF-EF0D-426D-AC3A-11D8E7CA790D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortisandbox_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"9F72A59E-2013-47A8-829A-1798717B26A0"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/multiple-xss-vulnerabilities-in-fortisandbox-webui","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://hyp3rlinx.altervista.org/advisories/AS-FORTISANDBOX-0801.txt","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/132930/FortiSandbox-3000D-2.02-build0042-Cross-Site-Scripting.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/536124/100/0/threaded","source":"cve@mitre.org"},{"url":"http://fortiguard.com/advisory/multiple-xss-vulnerabilities-in-fortisandbox-webui","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://hyp3rlinx.altervista.org/advisories/AS-FORTISANDBOX-0801.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/132930/FortiSandbox-3000D-2.02-build0042-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/536124/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1385","sourceIdentifier":"psirt@cisco.com","published":"2016-05-26T15:59:01.463","lastModified":"2026-06-17T00:41:50.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (instability, memory consumption, or device reload) by leveraging (1) administrative access or (2) Clientless SSL VPN access to provide a crafted XML document, aka Bug ID CSCut14209."},{"lang":"es","value":"Vulnerabilidad en el intérprete XML en Cisco Adaptive Security Appliance (ASA) Software hasta la versión 9.5.2 permite a usuarios remotos autenticados provocar una denegación de servicio (inestabilidad, consumo de memoria o recarga de dispositivo) mediante el aprovechamiento de (1) acceso administrativo o (2) acceso VPN Clientless SSL para proporcionar un documento XML manipulado, también conocida como Bug ID CSCut14209."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FA1C5485-EAF4-4F4D-AFA1-E105F433665E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"989F9AC4-C2D1-49A0-95C3-79A4EB827E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BFE2E079-D7AC-4FE9-8938-A75C12AF5CA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"B442C852-2465-4EA8-A977-1F10A4CE23AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C6DB6ED4-3095-46C1-9CB6-2975A7B05303"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EE68CD8E-B9CF-4519-8B0E-4C4488B34887"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D762C9A7-005C-44FD-9BB2-7A1DD4EBE90B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3:*:*:*:*:*:*:*","matchCriteriaId":"EE0B1212-87F3-46E5-B14A-C0C6BBAAAC98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"518D4826-06B0-4DDC-B082-A536418FD292"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"E343DE08-58FA-4C39-99F9-8CB5F57D0CD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4:*:*:*:*:*:*:*","matchCriteriaId":"76363698-DB62-4D92-8EE4-069891A9F92C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6159BEE3-D097-4E07-9962-06DB740E2AE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD606591-F69A-47AD-9256-20B98CA16135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A4EF3895-F372-45D3-9C7D-15F5C4712D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"4DC5960D-B917-4ABA-850F-A710676ACB40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5:*:*:*:*:*:*:*","matchCriteriaId":"B746A138-6650-49A3-87C8-3728FE5CF215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E50C2A13-5A8B-4FA5-ABB8-1157E560503B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.6:*:*:*:*:*:*:*","matchCriteriaId":"909F9D55-9276-4CF1-BC63-7CEEF8F25C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7:*:*:*:*:*:*:*","matchCriteriaId":"F383D276-D5EC-4335-AC09-9D30F6443AF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"39C2A7FF-6AC3-42B5-954A-9AA5950C523A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.15:*:*:*:*:*:*:*","matchCriteriaId":"9D7F36A8-C291-423D-AF28-56AAD8D0F712"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.22:*:*:*:*:*:*:*","matchCriteriaId":"3C2009F4-F832-49D6-8346-54A7328BD93B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.23:*:*:*:*:*:*:*","matchCriteriaId":"C9221DD4-498A-4867-B647-47E42299CE45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.26:*:*:*:*:*:*:*","matchCriteriaId":"B839A425-E08C-41B1-9270-E177E40B1E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.28:*:*:*:*:*:*:*","matchCriteriaId":"8F4DDF53-0995-4971-A980-30FD15A40C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.29:*:*:*:*:*:*:*","matchCriteriaId":"2F3BD921-A58A-47EB-B90D-21C3A5D02D40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"800FE449-350D-4C4C-A8C2-D4C5A3B59F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C49BF8F7-5ACE-4D90-8F17-1AA9D3A2FD7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"8CE6D050-F186-492C-9813-895433B2612A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6157AA5C-8297-4A32-B0A8-1E7E801E9CD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F5A13091-02C6-4D98-90C9-ED4C43BDAFAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"F2C3E0E1-C3F3-4D53-8116-7D1AF3CD53CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"59F3DB48-E1EE-44E9-85DE-9FD7D5C59B4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"27E064BD-CBC0-4556-9BCF-87D808809237"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"63D5DC14-187B-4808-8377-5FF44A11AA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5.1.24:*:*:*:*:*:*:*","matchCriteriaId":"64079FC4-53D8-4DBF-A2D5-2CED256F4939"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3FF969BE-46BB-4AD7-85AB-8384426E9551"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F8EEA7A5-67FD-4CA4-8FF8-4B17A9C47B61"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"94E618B3-DD03-4ECD-AB9B-97F1EDF95E79"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"0D0DFE19-1C68-40E6-B8CD-9CC03F8B4281"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.10:*:*:*:*:*:*:*","matchCriteriaId":"20424324-881A-496B-BC55-62AA75994249"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.12:*:*:*:*:*:*:*","matchCriteriaId":"D67012F3-5153-400E-BD6F-EB0949875F2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.13:*:*:*:*:*:*:*","matchCriteriaId":"E40E9AB5-26E0-4BA2-9AFA-496BAA0EAC77"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.14:*:*:*:*:*:*:*","matchCriteriaId":"A6BA4B2D-187A-47EC-8BE1-7EA178549476"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6.1.17:*:*:*:*:*:*:*","matchCriteriaId":"3CF52FB9-4EA9-41A7-AD29-E963C09FC98C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"04C8C6E9-D5C3-42DC-B431-9097B2FCCB52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"75B5CF41-7F01-4AE9-B54B-8DB6909504B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F3BDD9D1-0DE3-4FA7-BDC1-2A724162CEEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7C80EAFF-E577-414A-9DDE-D27A41CB3DC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.7:*:*:*:*:*:*:*","matchCriteriaId":"26CC07CC-0C79-48ED-BEB6-4B576A0DBD68"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.8:*:*:*:*:*:*:*","matchCriteriaId":"83FA6817-C5B7-410F-9CF7-801CC958C12E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.11:*:*:*:*:*:*:*","matchCriteriaId":"1576FC7F-B7DD-41DD-A95E-23B1F86E4B02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.13:*:*:*:*:*:*:*","matchCriteriaId":"3768E4B0-E457-47AB-99B0-7C1A0E0CBE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.16:*:*:*:*:*:*:*","matchCriteriaId":"5D142088-0265-4987-8F5C-029F3DD06A18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7.1.17:*:*:*:*:*:*:*","matchCriteriaId":"76EDEE39-865D-4DA3-B1C9-033F2FF1A56F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"500ED3CC-4FE8-4A24-ACFE-8D7E35E50D22"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BD2AE76B-D04E-4D0C-85E4-8AD07F7BDEDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A6E1C03C-0737-4E2B-B3F9-10770281F4AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5C7052D2-0789-4A4D-917D-FCD894B7280F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"0956F0A8-7424-437C-AAD8-203183BEBFCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.8:*:*:*:*:*:*:*","matchCriteriaId":"49FB57F9-5B37-4509-B2EB-6A16DFE11F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"952F6504-9CD0-453E-8C25-02BB9EE818F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E842AF74-D1E3-4F71-80F9-197B38942405"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A0B97FB1-CC3A-40B5-853D-476E6C5D9D6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"3F6293A8-C21E-46F6-ACC1-6BBAD419B41F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.17:*:*:*:*:*:*:*","matchCriteriaId":"CC1A48B1-112A-41C2-BC01-BCCF5794553D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.20:*:*:*:*:*:*:*","matchCriteriaId":"D2AE7036-C8EE-441F-94A4-DE8A9E89CA8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.24:*:*:*:*:*:*:*","matchCriteriaId":"6448B4B4-022D-4D4A-A6DE-0090CEA12595"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.26:*:*:*:*:*:*:*","matchCriteriaId":"42813600-3186-4D19-8AF2-F4F98D3C6740"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.29:*:*:*:*:*:*:*","matchCriteriaId":"BC0969E6-151D-4298-8EC8-68D7880E994B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.33:*:*:*:*:*:*:*","matchCriteriaId":"4A0091CE-3386-4CCC-A2A8-900842EA6F51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.35:*:*:*:*:*:*:*","matchCriteriaId":"B5A450E0-09E4-44C5-B55C-78A4BDAADA45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.37:*:*:*:*:*:*:*","matchCriteriaId":"8285C95A-316D-4965-A34D-3BCB9AB83FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4714F698-BBAE-47BB-99E8-F90D22415EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"EB55BC7E-0B3F-4202-8768-08F27B763926"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CFB01683-C482-4A5B-90FA-B5266BEA452E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DA16481A-4A47-4A8E-8C78-87B3A171280A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"8C0258ED-6ED0-49C7-A13A-368711649FFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1B7A71AA-E1A6-47B7-B2B2-A3115CAA4058"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D448BB56-5B2E-4B3E-B7E8-1F4991F23D81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E0346EAC-BDD1-4DC5-B8CA-20579C44AFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2049D602-54F1-4072-936E-0D7E337162B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"0710D6C8-AD34-43E2-B72B-315FFF3DC34F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.12:*:*:*:*:*:*:*","matchCriteriaId":"70F8F1D2-2196-44C4-B420-824F49BB4ACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.15:*:*:*:*:*:*:*","matchCriteriaId":"5E14B8D3-6D53-4E84-9B5D-24667B192C4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.21:*:*:*:*:*:*:*","matchCriteriaId":"A05B2DFD-A0EF-42BE-B00B-334E78CA8C10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6:*:*:*:*:*:*:*","matchCriteriaId":"F4CC96C9-492F-49CB-BEFE-356581E96B3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F1F7D4-EC51-47D1-A71A-9EF98C51D388"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"0D5E93DE-06C0-401C-8062-1B2EB6EFDED6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"3E5EBFAB-25E2-4245-B748-92CAA943D4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B8BFB446-5747-42BB-98BC-B8DF250F1842"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"1EF48794-2E5D-4BE0-9BB5-49ADE34F4A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*","matchCriteriaId":"A3A13A9C-5387-4670-8E20-FE878946D091"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*","matchCriteriaId":"9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*","matchCriteriaId":"AFC39DA3-8171-4344-A946-7965873C56F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9C31567-8AEB-49C6-AA60-4150411D62AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CA140CB2-C17C-4164-A59A-8585906057BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"468D98A7-92D5-4C01-9EDD-CB44B85EA6BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7BAAC9FE-CCF0-4385-B5E9-FC424CD3EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"5C9DEB1C-F9B9-4291-92B5-8EEEADC57E51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"39330218-32FA-42FF-B5CA-288B7D140304"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A92D7CED-D036-414B-B9EB-DCAF7F425A7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"C4AAAB02-140D-46F2-A315-5791BF5A853F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2EB02DBE-6D60-4D0E-8E9D-7611C3C32748"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"31B4370A-84E5-4766-9D9D-EA1C53D73B79"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"9A2F3C77-89CD-4990-98FA-E896079B6C87"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*","matchCriteriaId":"1E044883-9952-477A-B2AA-3E0BB90C96A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*","matchCriteriaId":"2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*","matchCriteriaId":"6F4A28B7-87A2-464A-92A8-644E3F7D13D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.243\\):*:*:*:*:*:*:*","matchCriteriaId":"8D83ED80-972A-4548-9AB0-10F9A23DF749"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"26D99395-D18D-458E-9880-19B7767F69D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E4CE047-3FEF-4A72-AD06-EC77D71EBCD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"ED33F68A-9EB0-416A-A0A5-0DF2C349FFEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7F7DD812-DC72-4816-8B0F-361C32B2CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*","matchCriteriaId":"EC41D4CD-D5EA-4678-B3AA-962C7C937118"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"996C9552-5743-4639-A077-5B057605DF21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A5779CE0-7691-47DA-902C-4D32D6650C9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"0C69BE69-7C19-4ED3-98D3-04B1D41E56FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E7D12EFD-71D6-480E-97D5-278CCE4A7118"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"AFE9F46B-DD74-4295-BB6A-9239E29F4416"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.0.115:*:*:*:*:*:*:*","matchCriteriaId":"F8F53875-D589-4C34-B863-67AC9945BED8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8B313B0E-4200-427F-A156-1EDA681F439D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B8C49821-3BA5-4B44-84F5-113024FD030F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2011F264-53A5-4507-843B-46F66D285ADB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"73FB7BAF-7B3E-4091-A90B-FB19B38FFE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6D2DA09B-CFBA-4FDE-A6D0-7C2CF202D72B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E29F95F5-6957-46F0-A0A2-CCACBBA14F90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4D9EFD6D-A657-4102-982D-7634AC25E75E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"7D80DB80-F243-469B-993F-E368B092B3C5"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-xml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035976","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1379","sourceIdentifier":"psirt@cisco.com","published":"2016-05-28T01:59:00.117","lastModified":"2026-06-17T00:41:49.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted (1) LAN-to-LAN or (2) Remote Access VPN tunnel packets, aka Bug ID CSCuv70576."},{"lang":"es","value":"Cisco Adaptive Security Appliance (ASA) Software 9.0 hasta la versión 9.5.1 no maneja correctamente error de procesamiento IPsec, lo que permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de memoria) a través de paquetes túnel VPN manipulados (1) LAN-to-LAN o (2) Remote Access, también conocida como Bug ID CSCuv70576."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"500ED3CC-4FE8-4A24-ACFE-8D7E35E50D22"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BD2AE76B-D04E-4D0C-85E4-8AD07F7BDEDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A6E1C03C-0737-4E2B-B3F9-10770281F4AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5C7052D2-0789-4A4D-917D-FCD894B7280F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"0956F0A8-7424-437C-AAD8-203183BEBFCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.3.8:*:*:*:*:*:*:*","matchCriteriaId":"49FB57F9-5B37-4509-B2EB-6A16DFE11F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"952F6504-9CD0-453E-8C25-02BB9EE818F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E842AF74-D1E3-4F71-80F9-197B38942405"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A0B97FB1-CC3A-40B5-853D-476E6C5D9D6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"3F6293A8-C21E-46F6-ACC1-6BBAD419B41F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.17:*:*:*:*:*:*:*","matchCriteriaId":"CC1A48B1-112A-41C2-BC01-BCCF5794553D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.20:*:*:*:*:*:*:*","matchCriteriaId":"D2AE7036-C8EE-441F-94A4-DE8A9E89CA8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.24:*:*:*:*:*:*:*","matchCriteriaId":"6448B4B4-022D-4D4A-A6DE-0090CEA12595"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.26:*:*:*:*:*:*:*","matchCriteriaId":"42813600-3186-4D19-8AF2-F4F98D3C6740"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.29:*:*:*:*:*:*:*","matchCriteriaId":"BC0969E6-151D-4298-8EC8-68D7880E994B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.33:*:*:*:*:*:*:*","matchCriteriaId":"4A0091CE-3386-4CCC-A2A8-900842EA6F51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.35:*:*:*:*:*:*:*","matchCriteriaId":"B5A450E0-09E4-44C5-B55C-78A4BDAADA45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0.4.37:*:*:*:*:*:*:*","matchCriteriaId":"8285C95A-316D-4965-A34D-3BCB9AB83FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4714F698-BBAE-47BB-99E8-F90D22415EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"EB55BC7E-0B3F-4202-8768-08F27B763926"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CFB01683-C482-4A5B-90FA-B5266BEA452E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DA16481A-4A47-4A8E-8C78-87B3A171280A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"8C0258ED-6ED0-49C7-A13A-368711649FFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1B7A71AA-E1A6-47B7-B2B2-A3115CAA4058"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D448BB56-5B2E-4B3E-B7E8-1F4991F23D81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E0346EAC-BDD1-4DC5-B8CA-20579C44AFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2049D602-54F1-4072-936E-0D7E337162B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"0710D6C8-AD34-43E2-B72B-315FFF3DC34F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.12:*:*:*:*:*:*:*","matchCriteriaId":"70F8F1D2-2196-44C4-B420-824F49BB4ACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.15:*:*:*:*:*:*:*","matchCriteriaId":"5E14B8D3-6D53-4E84-9B5D-24667B192C4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.5.21:*:*:*:*:*:*:*","matchCriteriaId":"A05B2DFD-A0EF-42BE-B00B-334E78CA8C10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6:*:*:*:*:*:*:*","matchCriteriaId":"F4CC96C9-492F-49CB-BEFE-356581E96B3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F1F7D4-EC51-47D1-A71A-9EF98C51D388"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"0D5E93DE-06C0-401C-8062-1B2EB6EFDED6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"3E5EBFAB-25E2-4245-B748-92CAA943D4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B8BFB446-5747-42BB-98BC-B8DF250F1842"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*","matchCriteriaId":"A3A13A9C-5387-4670-8E20-FE878946D091"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*","matchCriteriaId":"9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*","matchCriteriaId":"AFC39DA3-8171-4344-A946-7965873C56F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9C31567-8AEB-49C6-AA60-4150411D62AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CA140CB2-C17C-4164-A59A-8585906057BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"468D98A7-92D5-4C01-9EDD-CB44B85EA6BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7BAAC9FE-CCF0-4385-B5E9-FC424CD3EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"5C9DEB1C-F9B9-4291-92B5-8EEEADC57E51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"39330218-32FA-42FF-B5CA-288B7D140304"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A92D7CED-D036-414B-B9EB-DCAF7F425A7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"C4AAAB02-140D-46F2-A315-5791BF5A853F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2EB02DBE-6D60-4D0E-8E9D-7611C3C32748"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.50\\):*:*:*:*:*:*:*","matchCriteriaId":"1E044883-9952-477A-B2AA-3E0BB90C96A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*","matchCriteriaId":"2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*","matchCriteriaId":"6F4A28B7-87A2-464A-92A8-644E3F7D13D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.243\\):*:*:*:*:*:*:*","matchCriteriaId":"8D83ED80-972A-4548-9AB0-10F9A23DF749"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"26D99395-D18D-458E-9880-19B7767F69D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E4CE047-3FEF-4A72-AD06-EC77D71EBCD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"ED33F68A-9EB0-416A-A0A5-0DF2C349FFEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7F7DD812-DC72-4816-8B0F-361C32B2CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3:*:*:*:*:*:*:*","matchCriteriaId":"EC41D4CD-D5EA-4678-B3AA-962C7C937118"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"996C9552-5743-4639-A077-5B057605DF21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A5779CE0-7691-47DA-902C-4D32D6650C9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"0C69BE69-7C19-4ED3-98D3-04B1D41E56FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E7D12EFD-71D6-480E-97D5-278CCE4A7118"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.0.115:*:*:*:*:*:*:*","matchCriteriaId":"F8F53875-D589-4C34-B863-67AC9945BED8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8870EB6E-DAE9-45F9-BBA5-2D20E5E00F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8B313B0E-4200-427F-A156-1EDA681F439D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B8C49821-3BA5-4B44-84F5-113024FD030F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2011F264-53A5-4507-843B-46F66D285ADB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"290AA0BD-EDB0-4BA4-BF85-9CF29A1B7908"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E29F95F5-6957-46F0-A0A2-CCACBBA14F90"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-vpn","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-vpn","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1413","sourceIdentifier":"psirt@cisco.com","published":"2016-05-28T01:59:02.290","lastModified":"2026-06-17T00:41:55.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka Bug ID CSCuy76517."},{"lang":"es","value":"La interfaz web en Cisco Firepower Management Center 5.4.0 hasta la versión 6.0.0.1 permite a usuarios remotos autenticados modificar páginas colocando código manipulado en un valor de parámetro, también conocida como Bug ID CSCuy76517."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"27EA38C1-A34F-430A-92F7-1D299F78B449"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DE5CF68A-AAF1-4103-AD83-E2192785B31B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"38ACE806-3514-4D95-85DA-BAD7245011A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1898CADB-3B2B-4A3E-86DD-23A9E1A3E40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8D6B5ED0-0E42-45A2-BBBB-148C2BE5DD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0091657B-E242-4664-8F2F-85B8FCDF3EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"95D7DA95-E977-4D06-92C8-E4E8B464E1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"15B5C864-D82A-43BB-B193-CB9756A3B8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"AA8E3657-BC3D-4A7D-8523-0D64F69CFE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6FD6283-CC58-4864-AA24-F6C6DDE630FC"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160527-fmc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160527-fmc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0907","sourceIdentifier":"security_alert@emc.com","published":"2016-05-30T01:59:00.237","lastModified":"2026-06-17T00:38:27.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115."},{"lang":"es","value":"EMC Isilon OneFS 7.1.x y 7.2.x en versiones anteriores a 7.2.1.3 y 8.0.x en versiones anteriores a 8.0.0.1 e IsilonSD Edge OneFS 8.0.x en versiones anteriores a 8.0.0.1, no requiere la firma SMB dentro de una sesión DCERPC sobre ncacn_np, lo que permite a atacantes man-in-the-middle suplantar clientes SMB mediante la modificación del flujo de datos cliente-servidor, un problema similar a CVE-2016-2115."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2CD6F32C-BC12-455D-9C78-F6485C72582E"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521D899-186D-4200-96A2-C8137D6D8975"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"542839DF-EF0F-4B14-B56D-FBC0FE4D2787"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B78EA29B-CD7A-4C9D-9B0C-E6888BEC82C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A7A42792-B156-45D3-9A22-C45FFCF652DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E706E435-8E45-4ACB-8BBC-5AC458378D4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3FE2D48E-39E8-42E6-8E82-AB9FA0547BAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DEDB97FE-6470-4AFE-A3B0-B664F132A190"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A669BE6B-726F-4F34-A009-798E32FF6895"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4AE74624-A44D-4837-AD36-DBF3E93D5ED9"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"47CBA2E5-6E46-4922-B56B-3F8C578074B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"90C22C93-9069-406E-9A14-03F20AD34D11"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"CDD30754-489E-42BA-8B51-1FEB5DC30912"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D92501AC-0588-4051-9568-52074E8A2D33"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F7407DAA-7740-45B0-BA99-03794C8B1215"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"F7E804DB-40F0-4FBF-8A85-A49767DC4022"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"D645B5EF-4333-48BF-960A-03AA2D624376"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"10B1B998-AEEE-4123-82F3-72D84EF681DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0828B061-28B4-4AEE-BBB9-AF287B90713C"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"064C487D-517E-4F7B-A182-5DF287477652"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AB53E775-7A57-41D2-A93D-5F96D72622D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilonsd_edge_onefs:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"65394CAB-1CF8-4500-9013-A0B932ED703C"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/May/117","source":"security_alert@emc.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2016/May/117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2023","sourceIdentifier":"cve@mitre.org","published":"2016-05-30T01:59:02.597","lastModified":"2026-06-17T00:43:16.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE RESTful Interface Tool 1.40 allows local users to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"HPE RESTful Interface Tool 1.40 permite a usuarios locales obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:restful_interface_tool:1.40:*:*:*:*:*:*:*","matchCriteriaId":"A3396EFB-0D8E-40A5-B873-B0B38D2028E9"}]}]}],"references":[{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141083","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2311","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-05-30T01:59:06.003","lastModified":"2026-06-17T00:43:48.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and AlertWerks ServSensor Contact with firmware before SP473 allow remote authenticated users to discover administrator and user passwords via unspecified vectors."},{"lang":"es","value":"Black Box AlertWerks ServSensor con firmware en versiones anteriores a SP473, AlertWerks ServSensor Junior con firmware en versiones anteriores a SP473, AlertWerks ServSensor Junior con PoE con firmware en versiones anteriores a SP473 y AlertWerks ServSensor Contact con firmware en versiones anteriores a SP473 permite a usuarios remotos autenticados descubrir contraseñas de administradores y usuarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_junior_eme102a-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"F5442D3D-3A7A-4E4D-8F1A-89799F692336"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_junior_eme103a-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"7155A60A-BFD8-4A3B-99EC-1436D414062C"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_junior_eme104a-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"56A2F50F-0881-4303-B3EC-C8CC3218B49B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:blackbox:alertwerks_servsensor_junior_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8FDAF0E2-AEE2-4BC8-B109-50FAA1D432AC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_contact_eme111a-20-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"8E4B819B-3D80-45C7-8D86-E56A67F096F2"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_contact_eme111a-60-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"8B6FE837-3A62-4CFD-B509-6E9D90377391"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_contact_eme112a-20-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"CB3F5137-9EBA-477F-AE8A-B5BA98BB1B33"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_contact_eme112a-60-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"FA9A12E1-283D-43DE-AADD-EF46BD555826"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_contact_eme113a-20-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"1735CF06-3DBA-4DB5-90CB-62F482B71313"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_contact_eme113a-60-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"6E7A6D5B-57E0-4AB7-8F0D-E95E766F8589"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:blackbox:alertwerks_servsensor_contact_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1C6E40C7-5BD9-4FC8-B384-376606556318"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:_alertwerks_servsensor_eme106a:-:*:*:*:*:*:*:*","matchCriteriaId":"407C97F8-7E50-4866-9750-779DB29426DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:_alertwerks_servsensor_eme108a-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"DA0EB3D6-0676-4863-A118-BA6813B05DB0"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:_alertwerks_servsensor_eme109a-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"11DDA55C-62C7-4119-9D0B-5C63E164CEA2"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:_alertwerks_servsensor_eme110a-r2:-:*:*:*:*:*:*:*","matchCriteriaId":"8386970B-907D-49B2-A195-26C151D82BB8"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_eme105a:-:*:*:*:*:*:*:*","matchCriteriaId":"6708EBD9-2A87-4BD3-A32A-AF6E71D22AD9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:blackbox:alertwerks_servsensor_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"C7921B9C-C62F-4A7E-9834-3D10A62B4002"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_junior_eme152a:-:*:*:*:poe:*:*:*","matchCriteriaId":"79AA004C-8F9F-4B72-8CB5-143CC15B254E"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_junior_eme153a:-:*:*:*:poe:*:*:*","matchCriteriaId":"E6033DA2-0013-4306-BE2B-CF1ECE67E72F"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_junior_eme154a:-:*:*:*:poe:*:*:*","matchCriteriaId":"CF2BE5E9-40AE-4E0D-ACDD-509ED15FE487"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_junior_eme155a:-:*:*:*:poe:*:*:*","matchCriteriaId":"D7296F14-0552-4D2D-A390-AD852FAC2A15"},{"vulnerable":false,"criteria":"cpe:2.3:h:blackbox:alertwerks_servsensor_junior_eme158a:-:*:*:*:poe:*:*:*","matchCriteriaId":"4C1C7C99-246C-4544-8559-21E608ED34C9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:blackbox:alertwerks_servsensor_junior_firmware:-:*:*:*:poe:*:*:*","matchCriteriaId":"F3B50A05-C0FA-4A18-A4FF-7FB7165852E1"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-147-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-147-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4784","sourceIdentifier":"cve@mitre.org","published":"2016-05-31T01:59:12.993","lastModified":"2026-06-17T00:48:12.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.83; SIPROTEC 7UT686 : All versions < V 4.01; SIPROTEC 7SD686 : All versions < V 4.03; SIPROTEC 7SJ66 : All versions < V 4.20. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain sensitive device information if network access was obtained."},{"lang":"es","value":"Se ha identificado una vulnerabilidad en la variante de Firmware PROFINET IO para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.04.01; la variante de Firmware Modbus TCP para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.11.00; la variante de Firmware v TCP para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.03; la variante de Firmware IEC 104 para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.21 y el módulo EN100 Ethernet incluido en SIPROTEC Merging Unit 6MU80: todas las versiones anteriores a la 1.02.02; SIPROTEC 7SJ686: todas las versiones anteriores a la V 4.83; SIPROTEC 7UT686: todas las versiones anteriores a la V 4.01; SIPROTEC 7SD686: todas las versiones anteriores a la V 4.03 y SIPROTEC 7SJ66: todas las versiones anteriores a la V 4.20. El servidor web integrado (puerto 80/tcp) de los dispositivos afectados podría permitir que los atacantes remotos obtengan información sensible del dispositivo si obtienen acceso de red."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:siprotec_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D6A83974-66CD-409D-A309-568578F44A69"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7rw80:-:*:*:*:*:*:*:*","matchCriteriaId":"2883847C-7500-4431-8EB9-0B7B4DABC4FD"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sd80:-:*:*:*:*:*:*:*","matchCriteriaId":"72C34F7E-F579-4830-A5E9-F61F71142153"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sj80:-:*:*:*:*:*:*:*","matchCriteriaId":"BF126B3F-B400-43B1-AC08-9458055B7449"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sj81:-:*:*:*:*:*:*:*","matchCriteriaId":"73E3AAB3-A15B-4159-B7A2-EA70D216B620"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sk80:-:*:*:*:*:*:*:*","matchCriteriaId":"EA7F273D-9E60-45AB-9BBD-434D45FA0608"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sk81:-:*:*:*:*:*:*:*","matchCriteriaId":"411C805A-16C5-4430-8F23-2D5E4D5A423E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_4_en100:-:*:*:*:*:*:*:*","matchCriteriaId":"9D3FF8F1-73E6-4F1E-8222-E9191D6A764E"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_en100:-:*:*:*:*:*:*:*","matchCriteriaId":"D7CE743D-D5A1-4E58-A8C8-1DC755286B54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:siprotec_firmware:4.26:*:*:*:*:*:*:*","matchCriteriaId":"1DB48800-BDF6-4BF9-8383-39693568CF67"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90773","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/99471","source":"cve@mitre.org"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-547990.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-140-02","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03","source":"cve@mitre.org"},{"url":"https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/90773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/99471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-547990.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-140-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4785","sourceIdentifier":"cve@mitre.org","published":"2016-05-31T01:59:14.227","lastModified":"2026-06-17T00:48:12.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain a limited amount of device memory content if network access was obtained. This vulnerability only affects EN100 Ethernet module included in SIPROTEC4 and SIPROTEC Compact devices."},{"lang":"es","value":"Se ha identificado una vulnerabilidad en la variante de Firmware PROFINET IO para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.04.01; la variante de Firmware Modbus TCP para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.11.00; la variante de Firmware v TCP para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.03; la variante de Firmware IEC 104 para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.21 y el módulo EN100 Ethernet incluido en SIPROTEC Merging Unit 6MU80: todas las versiones anteriores a la 1.02.02. El servidor web integrado (puerto 80/tcp) de los dispositivos afectados podría permitir que los atacantes remotos obtengan una cantidad limitada de contenido de la memoria si obtienen acceso de red. Esta vulnerabilidad solo afecta al módulo EN100 Ethernet incluido en los dispositivos SIPROTEC4 y SIPROTEC Compact."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_4_en100:-:*:*:*:*:*:*:*","matchCriteriaId":"9D3FF8F1-73E6-4F1E-8222-E9191D6A764E"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model:-:*:*:*:*:*:*:*","matchCriteriaId":"A6D469D9-63E9-4744-8536-23B57DB69FA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:siprotec_firmware:4.26:*:*:*:*:*:*:*","matchCriteriaId":"1DB48800-BDF6-4BF9-8383-39693568CF67"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7rw80:-:*:*:*:*:*:*:*","matchCriteriaId":"2883847C-7500-4431-8EB9-0B7B4DABC4FD"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sd80:-:*:*:*:*:*:*:*","matchCriteriaId":"72C34F7E-F579-4830-A5E9-F61F71142153"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sj80:-:*:*:*:*:*:*:*","matchCriteriaId":"BF126B3F-B400-43B1-AC08-9458055B7449"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sj81:-:*:*:*:*:*:*:*","matchCriteriaId":"73E3AAB3-A15B-4159-B7A2-EA70D216B620"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sk80:-:*:*:*:*:*:*:*","matchCriteriaId":"EA7F273D-9E60-45AB-9BBD-434D45FA0608"},{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:siprotec_compact_model_7sk81:-:*:*:*:*:*:*:*","matchCriteriaId":"411C805A-16C5-4430-8F23-2D5E4D5A423E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:siprotec_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D6A83974-66CD-409D-A309-568578F44A69"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/90773","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/99471","source":"cve@mitre.org"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-547990.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-140-02","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03","source":"cve@mitre.org"},{"url":"https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/90773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/99471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-547990.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-140-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0288","sourceIdentifier":"psirt@us.ibm.com","published":"2016-06-01T15:59:00.233","lastModified":"2026-06-17T00:37:15.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan Enterprise allow remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue."},{"lang":"es","value":"IBM Security AppScan Standard 8.7.x, 8.8.x y 9.x en versiones anteriores a 9.0.3.2 y Security AppScan Enterprise permiten a usuarios remotos autenticados leer archivos arbitrarios a través de un documento XML que contiene una declaración de entidad externa en conjunción con una referencia de entidad, relacionado con un problema XML External Entity (XXE)."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:8.7.0.0:*:*:*:standard:*:*:*","matchCriteriaId":"A37494E7-92CC-46D2-96E4-5A44C47A8280"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:8.7.0.1:*:*:*:standard:*:*:*","matchCriteriaId":"A8EB6F2E-1A29-417C-A28E-865324FFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:8.8.0.0:*:*:*:standard:*:*:*","matchCriteriaId":"869C4237-8FB5-4433-AA51-9FDE2AF9B1CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:9.0.0.0:*:*:*:standard:*:*:*","matchCriteriaId":"E2C2DF51-B9ED-4F03-9FFB-FAE8E6308FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:9.0.0.1:*:*:*:standard:*:*:*","matchCriteriaId":"EA28F9E1-CEB9-4BBC-BAFC-1E9530C6BF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:9.0.1.0:*:*:*:standard:*:*:*","matchCriteriaId":"E4819FF1-6E25-459B-B85B-4525856C5747"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:9.0.1.1:*:*:*:standard:*:*:*","matchCriteriaId":"92EB3451-C14D-438C-AA9C-07DAB4845DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:9.0.2.0:*:*:*:standard:*:*:*","matchCriteriaId":"08E28D89-A868-4CFE-AD6C-B81E19C06BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:9.0.2.1:*:*:*:standard:*:*:*","matchCriteriaId":"8427A038-2159-4AB8-8403-B65510BC0A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:9.0.3.0:*:*:*:standard:*:*:*","matchCriteriaId":"30DBA14E-B6E9-4EB2-8DFA-5176F2CC186F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_appscan:9.0.3.1:*:*:*:standard:*:*:*","matchCriteriaId":"57AB9289-5671-472E-8C5B-183760169148"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21980055","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035927","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21980055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035927","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/611.html\">CWE-611: Improper Restriction of XML External Entity Reference ('XXE')</a>"}},{"cve":{"id":"CVE-2016-4500","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-06-01T15:59:01.610","lastModified":"2026-06-17T00:47:40.607","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access."},{"lang":"es","value":"Dispositivos Moxa UC-7408 LX-Plus permiten a usuarios remotos autenticados escribir en el firmware y consecuentemente hacer un dispositivo inutilizable aprovechando el acceso root."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:N/A:C","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:moxa:uc-7408_lx-plus:-:*:*:*:*:*:*:*","matchCriteriaId":"2175CB08-41BF-41C8-890C-1621968516C4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:moxa:uc-7408_lx-plus_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"87AABA1F-A110-45A5-A65E-52792A28D9D7"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-152-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-152-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-3094","sourceIdentifier":"secalert@redhat.com","published":"2016-06-01T20:59:05.060","lastModified":"2026-06-17T00:44:57.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception."},{"lang":"es","value":"PlainSaslServer.java en Apache Qpid Java en versiones anteriores a 6.0.3, cuando el broker está configurado para permitir contraseñas en texto plano, permite a atacantes remotos provocar una denegación de servicio (terminación del broker) a través de un intento de autenticación manipulado, lo que desencadena una excepción no capturada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:qpid_broker-j:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2","matchCriteriaId":"1998165C-0883-4A6B-82A2-FDB8B24C6DD2"}]}]}],"references":[{"url":"http://mail-archives.apache.org/mod_mbox/qpid-users/201605.mbox/%3C5748641A.2050701%40gmail.com%3E","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/137215/Apache-Qpid-Java-Broker-6.0.2-Denial-Of-Service.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://qpid.apache.org/releases/qpid-java-6.0.3/release-notes.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/archive/1/538507/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035982","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/jira/browse/QPID-7271","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://svn.apache.org/viewvc?view=revision&revision=1744403","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://mail-archives.apache.org/mod_mbox/qpid-users/201605.mbox/%3C5748641A.2050701%40gmail.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/137215/Apache-Qpid-Java-Broker-6.0.2-Denial-Of-Service.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://qpid.apache.org/releases/qpid-java-6.0.3/release-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/archive/1/538507/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/jira/browse/QPID-7271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://svn.apache.org/viewvc?view=revision&revision=1744403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2016-4453","sourceIdentifier":"secalert@redhat.com","published":"2016-06-01T22:59:03.877","lastModified":"2026-06-17T00:47:35.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command."},{"lang":"es","value":"La función vmsvga_fifo_run en hw/display/vmware_vga.c en QEMU permite a administradores locales del SO invitado provocar una denegación de servicio (bucle infinito y caída de proceso QEMU) a través de un comando VGA."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.0","matchCriteriaId":"EFCB21B5-E285-452B-B30E-6C9D21EF8072"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/30/2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90928","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336650","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05270.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/30/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05270.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-4454","sourceIdentifier":"secalert@redhat.com","published":"2016-06-01T22:59:04.830","lastModified":"2026-06-17T00:47:35.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read."},{"lang":"es","value":"La función vmsvga_fifo_read_raw en hw/display/vmware_vga.c en QEMU permite a administradores locales del SO invitado obtener información sensible de la memoria del anfitrión o provocar una denegación de servicio (caída del proceso QEMU) cambiando registros FIFO y emitiendo un comando VGA, lo que desencadena una lectura fuera de rango."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:P","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.0","matchCriteriaId":"EFCB21B5-E285-452B-B30E-6C9D21EF8072"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/30/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90927","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336429","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05271.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/30/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-4945","sourceIdentifier":"cve@mitre.org","published":"2016-06-01T22:59:06.940","lastModified":"2026-06-17T00:48:28.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in vpn/js/gateway_login_form_view.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via the NSC_TMAC cookie."},{"lang":"es","value":"Vulnerabilidad de XSS en vpn/js/gateway_login_form_view.js en Citrix NetScaler Gateway 11.0 en versiones anteriores a Build 66.11 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de la cookie NSC_TMAC."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:netscaler_gateway_11.0:-:*:*:*:*:*:*:*","matchCriteriaId":"54B6EC53-55DE-44A0-8F85-1E94276FA61C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_gateway_11.0_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"65.35","matchCriteriaId":"4AFAED56-21AD-47F3-9E31-CCE06BB55E48"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137221/Citrix-Netscaler-11.0-Build-64.35-Cross-Site-Scripting.html","source":"cve@mitre.org"},{"url":"http://persicon.com/tl_files/advisories/PERSICON-advisory-2016-No-1-citrix.txt","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX213313","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538515/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036020","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137221/Citrix-Netscaler-11.0-Build-64.35-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://persicon.com/tl_files/advisories/PERSICON-advisory-2016-No-1-citrix.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX213313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538515/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1370","sourceIdentifier":"psirt@cisco.com","published":"2016-06-03T02:01:06.567","lastModified":"2026-06-17T00:41:48.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service (mond process crash and monitoring outage) via crafted IPv6 packets, aka Bug ID CSCuy37324."},{"lang":"es","value":"Cisco Prime Network Analysis Module (NAM) en versiones anteriores a 6.2(1-b) calcula mal las longitudes de payload IPv6, lo que permite a atacantes remotos provocar una denegación de servicio (caída de proceso mond e interrupción de monitorización) a través de paquetes IPv6 manipulados, también conocido como Bug ID CSCuy37324."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:network_analysis_module_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FEF8F3C8-8563-4899-86C8-52F279A1C909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:network_analysis_module_software:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2F954986-4EC1-4A6E-A26E-7BC1D0A9B42C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:network_analysis_module:*:*:*:*:*:*:*:*","matchCriteriaId":"AD82BCCE-F68A-48A5-B484-98D9C3024E3A"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime3","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036016","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2015-8872","sourceIdentifier":"cve@mitre.org","published":"2016-06-03T14:59:00.123","lastModified":"2026-06-17T00:35:24.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an \"off-by-two error.\""},{"lang":"es","value":"La función set_fat en fat.c en dosfstools en versiones anteriores a 4.0 podría permitir a atacantes corromper un sistema de archivos FAT12 o provocar una denegación de servicio (lectura de memoria no válida y caída) escribiendo un número impar de clusters desde la tercera a la última entrada en un sistema de archivos FAT12, lo que desencadena un \"off-by-two error\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dosfstools_project:dosfstools:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.28","matchCriteriaId":"6A02C944-1F02-4007-B4C2-E4751D47AE17"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/90311","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2986-1","source":"cve@mitre.org"},{"url":"https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/dosfstools/dosfstools/commit/07908124838afcc99c577d1d3e84cef2dbd39cb7","source":"cve@mitre.org"},{"url":"https://github.com/dosfstools/dosfstools/issues/12","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/dosfstools/dosfstools/releases/tag/v4.0","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00028.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2986-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/dosfstools/dosfstools/commit/07908124838afcc99c577d1d3e84cef2dbd39cb7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/dosfstools/dosfstools/issues/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/dosfstools/dosfstools/releases/tag/v4.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4804","sourceIdentifier":"cve@mitre.org","published":"2016-06-03T14:59:06.263","lastModified":"2026-06-17T00:48:14.797","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function."},{"lang":"es","value":"La función read_boot en boot.c en dosfstools en versiones anteriores a 4.0 permite a atacantes provocar una denegación de servicio (caída) a través de un archivo de sistema manipulado, lo que desencadena un desbordamiento de buffer basado en memoria dinámica en la función (1) read_fat o una lectura de memoria fuera de los límites en la función (2) get_fat."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dosfstools_project:dosfstools:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.28","matchCriteriaId":"6A02C944-1F02-4007-B4C2-E4751D47AE17"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/90311","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2986-1","source":"cve@mitre.org"},{"url":"https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/dosfstools/dosfstools/commit/e8eff147e9da1185f9afd5b25948153a3b97cf52","source":"cve@mitre.org"},{"url":"https://github.com/dosfstools/dosfstools/issues/25","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/dosfstools/dosfstools/issues/26","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00028.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2986-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/dosfstools/dosfstools/commit/e8eff147e9da1185f9afd5b25948153a3b97cf52","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/dosfstools/dosfstools/issues/25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/dosfstools/dosfstools/issues/26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0908","sourceIdentifier":"security_alert@emc.com","published":"2016-06-04T01:59:01.597","lastModified":"2026-06-17T00:38:27.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges."},{"lang":"es","value":"EMC Isilon OneFS 7.1.x en versiones anteriores a 7.1.1.9 y 7.2.x en versiones anteriores a 7.2.1.2 permite a usuarios locales obtener acceso root al shell aprovechando privilegios administrativos."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2CD6F32C-BC12-455D-9C78-F6485C72582E"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521D899-186D-4200-96A2-C8137D6D8975"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"542839DF-EF0F-4B14-B56D-FBC0FE4D2787"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B78EA29B-CD7A-4C9D-9B0C-E6888BEC82C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A7A42792-B156-45D3-9A22-C45FFCF652DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E706E435-8E45-4ACB-8BBC-5AC458378D4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3FE2D48E-39E8-42E6-8E82-AB9FA0547BAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DEDB97FE-6470-4AFE-A3B0-B664F132A190"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A669BE6B-726F-4F34-A009-798E32FF6895"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4AE74624-A44D-4837-AD36-DBF3E93D5ED9"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"47CBA2E5-6E46-4922-B56B-3F8C578074B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"90C22C93-9069-406E-9A14-03F20AD34D11"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"CDD30754-489E-42BA-8B51-1FEB5DC30912"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D92501AC-0588-4051-9568-52074E8A2D33"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F7407DAA-7740-45B0-BA99-03794C8B1215"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"F7E804DB-40F0-4FBF-8A85-A49767DC4022"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7F551F88-3176-4E92-AE7A-FCAB3A220A45"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"26144325-6722-48C1-A0C2-BB78EF9BDE60"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B87E8EEE-42AA-48B3-ABBE-9CE7FD2C275B"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F09B14D-2C84-47F2-8F7F-6F8DAEFFF106"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5F6E200D-49D6-492C-8B38-CBED90CA8118"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"10B1B998-AEEE-4123-82F3-72D84EF681DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0828B061-28B4-4AEE-BBB9-AF287B90713C"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Jun/13","source":"security_alert@emc.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2016/Jun/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1211","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-04T14:59:00.127","lastModified":"2026-06-17T00:41:28.933","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XXS en Epoch Web Mailing List 0.31 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epoch:web_mailing_list:*:*:*:*:*:*:*:*","versionEndIncluding":"0.31","matchCriteriaId":"7A9439A0-D6B5-4BBE-9107-B7D2ED06AD25"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN43076390/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000066","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.psl.ne.jp/perl/ml/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN43076390/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.psl.ne.jp/perl/ml/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4812","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-04T16:59:03.890","lastModified":"2026-06-17T00:48:15.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el Markdown en el plugin Save Improved en versiones anteriores a 2.5.1 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:markdown_on_saved_improved_project:markdown_on_saved_improved:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"2.5","matchCriteriaId":"947CE15E-D719-483C-8CCC-EB1046EA47F8"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN26026353/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000071","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://srd.wordpress.org/plugins/markdown-on-save-improved/changelog/","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN26026353/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://srd.wordpress.org/plugins/markdown-on-save-improved/changelog/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1222","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-05T01:59:01.967","lastModified":"2026-06-17T00:41:30.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI."},{"lang":"es","value":"Vulnerabilidad de XSS en Kobe Beauty php-contact-form en versiones anteriores a 2016-05-18 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un URI manipulado."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kobe-beauty:php-contact-form:*:*:*:*:*:*:*:*","versionEndExcluding":"2016-05-18","matchCriteriaId":"78B6F544-0283-4B79-BD6A-1C6E0BFEE2F4"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN85112513/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000070","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.kobe-beauty.co.jp/php-contact-form/","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://github.com/kobebeauty/php-contact-form/commit/e7d094ca8ab15215c32d6fa04d17e8519c8d21cf","source":"vultures@jpcert.or.jp","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN85112513/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.kobe-beauty.co.jp/php-contact-form/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/kobebeauty/php-contact-form/commit/e7d094ca8ab15215c32d6fa04d17e8519c8d21cf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-1229","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-05T01:59:03.297","lastModified":"2026-06-17T00:41:30.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HumHub 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta before 1.0.0-beta.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en HumHub 0.20.0-beta.1 hasta la versión 0.20.1 y 1.0.0-beta en versiones anteriores a 1.0.0-beta.3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:humhub:humhub:0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"4CDF357E-A251-474F-AA09-78B5E7FD6800"},{"vulnerable":true,"criteria":"cpe:2.3:a:humhub:humhub:0.20.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9E0DE64F-7CC6-4906-9F40-2DE0E90CE89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:humhub:humhub:0.20.0:beta2:*:*:*:*:*:*","matchCriteriaId":"4304B529-55A2-409A-A6D9-92990CEF0CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:humhub:humhub:0.20.1:*:*:*:*:*:*:*","matchCriteriaId":"55D34949-04CE-46EF-8D60-21998DC34DC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:humhub:humhub:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D2362411-F584-4A1C-9D5C-345DF51E0A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:humhub:humhub:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"21AF7C19-FF1A-4511-9EFD-F3BF4973A08D"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN56167268/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000068","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://github.com/humhub/humhub/releases/tag/v1.0.0-beta.3","source":"vultures@jpcert.or.jp","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN56167268/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/humhub/humhub/releases/tag/v1.0.0-beta.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-1230","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-05T01:59:04.577","lastModified":"2026-06-17T00:41:30.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en NTT PC Communications WebARENA Service formmail en versiones anteriores a 2.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntt:webarena_service_formmail:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.0","matchCriteriaId":"60335616-F2DD-4F39-A086-D79FC14C6561"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN24143619/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000072","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://web.arena.ne.jp/support/news/2016/0208.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://web.arena.ne.jp/support/news/2016/0208_2.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://web.arena.ne.jp/support/suite1/manual/cgi_ssi/form.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN24143619/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://web.arena.ne.jp/support/news/2016/0208.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://web.arena.ne.jp/support/news/2016/0208_2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://web.arena.ne.jp/support/suite1/manual/cgi_ssi/form.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1677","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:05.927","lastModified":"2026-06-17T00:42:24.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging \"type confusion.\""},{"lang":"es","value":"uri.js en Google V8 en versiones anteriores a 5.1.281.26, como es usado en Google Chrome en versiones anteriores a 51.0.2704.63, usa un tipo de matriz incorrecto, lo que permite a atacantes remotos obtener información sensible llamando a la función decodeURI y aprovechando \"confusión de tipo\"."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:v8:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.281","matchCriteriaId":"BBC5CA67-5637-4AD0-923D-678947667D6E"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1936083002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/602970","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1936083002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/602970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1682","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:11.227","lastModified":"2026-06-17T00:42:24.780","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration."},{"lang":"es","value":"La función ServiceWorkerContainer::registerServiceWorkerImpl en WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp en Blink, como es usada en Google Chrome en versiones anteriores a 51.0.2704.63, permite a atacantes remotos eludir el mecanismo de protección Content Security Policy (CSP) a través de un registro ServiceWorker."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"},{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1861253004","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/579801","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1861253004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/579801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1685","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:14.100","lastModified":"2026-06-17T00:42:25.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document."},{"lang":"es","value":"core/fxge/ge/fx_ge_text.cpp en PDFium, como es usado en Google Chrome en versiones anteriores a 51.0.2704.63, no calcula correctamente ciertos valores del índice, lo que permite a atacantes remotos provocar una denegación del servicio (lectura fuera de límites) a través de un documento PDF manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1875673004","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/601362","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1875673004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/601362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1686","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:15.100","lastModified":"2026-06-17T00:42:25.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document."},{"lang":"es","value":"La función CPDF_DIBSource::CreateDecoder en core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp en PDFium, como es usada en Google Chrome en versiones anteriores a 51.0.2704.63, no maneja correctamente el fallo de inicialización del decodificador, lo que permite a atacantes remotos provocar una denegación del servicio (lectura fuera de límites) a través de un documento PDF manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1892143003","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/603518","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1892143003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/603518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1687","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:16.553","lastModified":"2026-06-17T00:42:25.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors related to extensions."},{"lang":"es","value":"La implementación del renderizador en Google Chrome en versiones anteriores a 51.0.2704.63 no restringe correctamente la exposición pública de clases, lo que permite a atacantes remotos obtener información sensible a través de vectores relacionados con las extensiones."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1938123002","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1939833003","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/603748","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1938123002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1939833003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/603748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1688","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:17.540","lastModified":"2026-06-17T00:42:25.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code."},{"lang":"es","value":"La implementación de regexp (también conocida como regular expression) en Google V8 en versiones anteriores a 5.0.71.40, como es usada en Google Chrome en versiones anteriores a 51.0.2704.63, no maneja correctamente los tamaños de cadena externos, lo que permite a atacantes remotos provocar una denegación del servicio (lectura fuera de límites) a través de un código JavaScript manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:v8:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.71","matchCriteriaId":"CA6F8A68-B4C0-4DB4-945F-4041F731FDE1"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1927003003","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/604897","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1927003003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/604897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1689","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:18.710","lastModified":"2026-06-17T00:42:25.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site."},{"lang":"es","value":"Desbordamiento de buffer basado en memoria dinámica en content/renderer/media/canvas_capture_handler.cc en Google Chrome en versiones anteriores a 51.0.2704.63 permite a atacantes remotos provocar una denegación del servicio o posiblemente tener otro impacto no especificado a través de una página web manipulada."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1918073003","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/606185","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1918073003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/606185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1692","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:21.710","lastModified":"2026-06-17T00:42:26.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site."},{"lang":"es","value":"WebKit/Source/core/css/StyleSheetContents.cpp en Blink, como es usado en Google Chrome en versiones anteriores a 51.0.2704.63, permite la carga de origen cruzado de hojas de estilos de CSS con ServiceWorker incluso cuando la descarga de hoja de estilo tiene un tipo MIME incorrecto, lo que permite a atacantes remotos eludir la Same Origin Policy a través de un sitio web manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1861243002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/598077","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1861243002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/598077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1693","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:23.070","lastModified":"2026-06-17T00:42:26.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an HTTP session."},{"lang":"es","value":"browser/safe_browsing/srt_field_trial_win.cc en Google Chrome en versiones anteriores a 51.0.2704.63 no usa el servicio HTTPS en dl.google.com para obtener el Software Removal Tool, lo que permite a atacantes suplantar el archivo chrome_cleanup_tool.exe (también conocido como CCT) a través de un ataquie man-in-the-middle en una sesión HTTP."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1919043002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/598752","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1919043002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/598752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1694","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:24.103","lastModified":"2026-06-17T00:42:26.483","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority."},{"lang":"es","value":"browser/browsing_data/browsing_data_remover.cc en Google Chrome en versiones anteriores a 51.0.2704.63 borra los pins HPKP durante la limpieza de la caché, lo que hace más fácil para atacantes remotos suplantar páginas web a través de un certificado válido de una Certification Authority arbitraria reconocida."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"50.0.2661.102","matchCriteriaId":"D80D4D1E-C218-4105-8DB1-1D6BCC693F23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1941073002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/603682","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1941073002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/603682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1698","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:28.227","lastModified":"2026-06-17T00:42:27.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition."},{"lang":"es","value":"La función createCustomType en extensions/renderer/resources/binding.js en las extensiones vinculantes en Google Chrome en versiones anteriores a 51.0.2704.79 no valida los tipos de módulos, lo que podría permitir a atacantes cargar módulos arbitrarios u obtener información sensible aprovechando una definición trampa."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"51.0.2704.63","matchCriteriaId":"5632B7FF-1930-4ADF-BBA1-C11FD636C7E7"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3594","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036026","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1201","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1912783002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/603725","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1912783002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/603725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1699","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:29.430","lastModified":"2026-06-17T00:42:27.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL."},{"lang":"es","value":"WebKit/Source/devtools/front_end/devtools.js en el subsistema Developer Tools (también conocido como DevTools) en Blink, tal como se utiliza en Google Chrome en versiones anteriores a 51.0.2704.79, no asegura que el parámetro remoteFrontendUrl esté asociado con una URL chrome-devtools-frontend.appspot.com, lo que permite a atacantes remotos eludir las restricciones destinadas al acceso a través de una URL manipulada."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"51.0.2704.63","matchCriteriaId":"5632B7FF-1930-4ADF-BBA1-C11FD636C7E7"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3594","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036026","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1201","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2010783002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/607939","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2010783002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/607939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1702","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-06-05T23:59:32.290","lastModified":"2026-06-17T00:42:27.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data."},{"lang":"es","value":"La función SkRegion::readFromMemory en core/SkRegion.cpp in Skia, tal como se utiliza en Google Chrome en versiones anteriores a 51.0.2704.79, no valida la cuenta de intervalo, lo que permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) a través de datos serializados manipulados."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"51.0.2704.63","matchCriteriaId":"5632B7FF-1930-4ADF-BBA1-C11FD636C7E7"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3594","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036026","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1201","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1961463003","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/609260","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1961463003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/609260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-8177","sourceIdentifier":"secalert@redhat.com","published":"2016-06-07T14:06:00.133","lastModified":"2026-06-17T00:16:26.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted requests which exceed the limit when combined."},{"lang":"es","value":"El paquete gluster-swift de Red Hat, tal como se utiliza en Red Hat Gluster Storage (anteriormente Red Hat Storage Server), permite a usuarios remotos autenticados eludir la restricción max_meta_count a través de múltiples peticiones manipuladas que exceden el límite cuando se combinan."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gluster_storage_management_console:3.1:*:*:*:*:*:*:*","matchCriteriaId":"5E167B79-6F17-4E79-94F0-AC4ABDCF596D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gluster_storage_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2D3475F-0080-456F-B17D-D94659504C64"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage_native_client:-:*:*:*:*:*:*:*","matchCriteriaId":"203E31B3-18D0-40E4-A072-4C52A0ECAEBE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gluster_storage_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2D3475F-0080-456F-B17D-D94659504C64"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-1845.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1846.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/08/27/5","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257525","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1845.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1846.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/08/27/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5231","sourceIdentifier":"secalert@redhat.com","published":"2016-06-07T14:06:05.510","lastModified":"2026-06-17T00:28:43.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access."},{"lang":"es","value":"El demonio de servicio en CRIU no restringe adecuadamente el acceso a procesos sin opción de volcado, lo que permite a usuarios locales obtener información sensible a través de (1) volcados de proceso o (2) acceso a ptrace."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:criu:checkpoint\\/restore_in_userspace:-:*:*:*:*:*:*:*","matchCriteriaId":"D74CE805-16DF-4612-9E7B-F0650485DF36"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2015-09/msg00030.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/08/25/5","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1256728","source":"secalert@redhat.com"},{"url":"https://lists.openvz.org/pipermail/criu/2015-August/021847.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-09/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/08/25/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1256728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.openvz.org/pipermail/criu/2015-August/021847.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4962","sourceIdentifier":"cve@mitre.org","published":"2016-06-07T14:06:15.217","lastModified":"2026-06-17T00:48:30.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore."},{"lang":"es","value":"libxl device-handling en Xen 4.6.x y versiones anteriores permite a administradores locales invitados de SO provocar una denegación de servicio (consumo de recurso o confusión de facilidad de gestión) u obtener privilegios de anfitrión de SO manipulando información en áreas controladas por invitado de xenstore."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C2D62B2C-40E5-41B7-9DAA-029BCD079054"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"4BA58099-26F7-4B01-B9FC-275F012FE9C6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF948E6A-07BE-4C7D-8A98-002E89D35F4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C0E23B94-1726-4F63-84BB-8D83FAB156D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C76124AB-4E3D-4BE0-AAEA-7FC05868E2FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F30B5EF5-0AE8-420B-A103-B1B25A372F09"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F784EF07-DBEC-492A-A0F4-F9F7B2551A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1044792C-D544-457C-9391-4F3B5BAB978D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CF23B21B-594A-42E2-AF90-D5C4246B39A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBD9AD01-50B7-4951-8A73-A6CF4801A487"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"89AA8FD5-E997-4F0D-AFB6-FFBE0073BA5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"75615D84-9CA1-456C-816D-768E37B074A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB87384-A1F8-4136-A242-441C655D9364"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"90CCECD0-C0F9-45A8-8699-64428637EBCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F0ED340C-6746-471E-9F2D-19D62D224B7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"99BD7C4F-DE4C-4508-B20D-46A94B616C5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3374F1FB-70F9-4EBC-837B-0D42282E3E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B6F7CE9-C409-4D88-9A99-B21420633F45"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B814C381-4991-495A-B530-7543F977B346"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3633","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91006","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036023","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-175.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-175.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4963","sourceIdentifier":"cve@mitre.org","published":"2016-06-07T14:06:16.183","lastModified":"2026-06-17T00:48:30.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management tool confusion) by manipulating information in the backend directories in xenstore."},{"lang":"es","value":"El libxl device-handling en Xen hasta la versión 4.6.x permite a usuarios locales del SO invitado con acceso al dominio del controlador provocar una denegación de servicio (confusión de la herramienta de gestión) manipulando información en los directorios del backend en xenstore."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"550223A9-B9F1-440A-8C25-9F0F76AF7301"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FC734D58-96E5-4DD2-8781-F8E0ADB96462"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"62CEC1BF-1922-410D-BCBA-C58199F574C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"923F2C2B-4A65-4823-B511-D0FEB7C7FAB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C1A24DED-B2EC-4D9C-9FA4-DD37EF3E3BFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D532B60-C8DD-4A2F-9D05-E574D23EB754"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5D83CA8B-8E49-45FA-8FAB-C15052474542"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"27537DF5-7E0F-463F-BA87-46E329EE07AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3EA4F978-9145-4FE6-B4F9-15207E52C40A"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"22A995FD-9B7F-4DF0-BECF-4B086E470F1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"219597E2-E2D7-4647-8A7C-688B96300158"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A0C59417-493C-493A-9AB2-317F240BF387"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"65E55950-EACA-4209-B2A1-E09026FC6006"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8F0AF8EF-6FF6-4E22-B16E-82C9F90C6B00"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"47640819-FC43-49ED-8A77-728C3D7255B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2448537F-87AD-45C1-9FB0-7A49CA31BD76"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E36B2265-70E1-413B-A7CF-79D39E9ADCFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"37148A72-BE20-45C5-8589-2309ED84D08C"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FB736B4C-325A-4B27-8C8A-15E60B8A8C82"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF948E6A-07BE-4C7D-8A98-002E89D35F4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C0E23B94-1726-4F63-84BB-8D83FAB156D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C76124AB-4E3D-4BE0-AAEA-7FC05868E2FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F30B5EF5-0AE8-420B-A103-B1B25A372F09"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F784EF07-DBEC-492A-A0F4-F9F7B2551A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1044792C-D544-457C-9391-4F3B5BAB978D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CF23B21B-594A-42E2-AF90-D5C4246B39A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBD9AD01-50B7-4951-8A73-A6CF4801A487"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"89AA8FD5-E997-4F0D-AFB6-FFBE0073BA5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"75615D84-9CA1-456C-816D-768E37B074A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB87384-A1F8-4136-A242-441C655D9364"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"90CCECD0-C0F9-45A8-8699-64428637EBCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F0ED340C-6746-471E-9F2D-19D62D224B7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"99BD7C4F-DE4C-4508-B20D-46A94B616C5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3374F1FB-70F9-4EBC-837B-0D42282E3E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B6F7CE9-C409-4D88-9A99-B21420633F45"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B814C381-4991-495A-B530-7543F977B346"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036024","source":"cve@mitre.org"},{"url":"http://xenbits.xen.org/xsa/advisory-178.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00006.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xen.org/xsa/advisory-178.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5242","sourceIdentifier":"cve@mitre.org","published":"2016-06-07T14:06:17.183","lastModified":"2026-06-17T00:49:02.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer dereference and host OS crash) by creating concurrent domains and holding references to them, related to VMID exhaustion."},{"lang":"es","value":"La función p2m_teardown en arch/arm/p2m.c en Xen 4.4.x hasta la versión 4.6.x permite a usuarios locales invitados del SO con acceso al dominio del controlador provocar una denegación de servicio (referencia a puntero NULL y caída del SO anfitrión) creando dominios concurrentes y manejando referencias a ellos, relacionado con el agotamiento de VMID."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.1,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1044792C-D544-457C-9391-4F3B5BAB978D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CF23B21B-594A-42E2-AF90-D5C4246B39A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBD9AD01-50B7-4951-8A73-A6CF4801A487"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"89AA8FD5-E997-4F0D-AFB6-FFBE0073BA5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"75615D84-9CA1-456C-816D-768E37B074A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB87384-A1F8-4136-A242-441C655D9364"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"90CCECD0-C0F9-45A8-8699-64428637EBCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F0ED340C-6746-471E-9F2D-19D62D224B7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"99BD7C4F-DE4C-4508-B20D-46A94B616C5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3374F1FB-70F9-4EBC-837B-0D42282E3E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B6F7CE9-C409-4D88-9A99-B21420633F45"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B814C381-4991-495A-B530-7543F977B346"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3633","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91015","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036035","source":"cve@mitre.org"},{"url":"http://xenbits.xen.org/xsa/advisory-181.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xen.org/xsa/advisory-181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2013-7440","sourceIdentifier":"secalert@redhat.com","published":"2016-06-07T18:59:00.120","lastModified":"2026-06-17T00:01:57.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate."},{"lang":"es","value":"La función ssl.match_hostname en CPython (también concida como Python) en versiones anteriores a 2.7.9 y 3.x en versiones anteriores a 3.3.3 no maneja correctamente comodines en los nombres de host, lo que podría permitir a atacantes man-in-the-middle suplantar servidores a través de un certificado manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.8","matchCriteriaId":"D9D10FF2-EEA1-4CEF-B1C5-158E40E59463"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.0:*:*:*:*:*:*:*","matchCriteriaId":"FC0C702F-59E0-40AB-BA95-8F0803AB0550"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3190C547-7230-476C-A43F-641FE7B891EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1:*:*:*:*:*:*:*","matchCriteriaId":"74AC7EE5-F01D-4F28-80D1-4076B7B24BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2B547525-E0DB-4D64-8ED1-AF3F1B6FF65F"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19064C18-1CD7-4F10-8065-4B900BB31F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B1997CB6-FD72-4B13-915A-7500AA06F4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"06A1811C-4E97-4226-8335-ADF0827A03B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BF2C50D1-187B-4E98-BA02-008D0ED4C220"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.2150:*:*:*:*:*:x64:*","matchCriteriaId":"9EB9683A-EE1C-4EB6-BF27-39A274B37D3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2:*:*:*:*:*:*:*","matchCriteriaId":"87845E79-F4A3-4390-9ACF-A14E86BCDB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2:alpha:*:*:*:*:*:*","matchCriteriaId":"E2C8F3C4-91AB-4AE3-A2FB-A093F97742FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B511BDFA-D1DC-4E50-9A08-66DA05947A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0708E98D-5C84-47DC-89E5-8BB7CFFB12A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6595C4F3-5683-4889-AD30-83840F6A58D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"027FD902-9B08-4EDF-9F83-314FBF0583ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"89FB9D30-8559-4F57-9D20-DC603765B346"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"957FCB4A-32D0-4449-8995-80144CC713B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C17A0E8D-7611-42F7-896E-F2B3BC25643D"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.2150:*:*:*:*:*:*:*","matchCriteriaId":"F236E583-D23D-4769-8A25-EBFC930E4798"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3:*:*:*:*:*:*:*","matchCriteriaId":"6DF7665B-3A10-46D1-B486-AFC9ED6C0B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3:beta2:*:*:*:*:*:*","matchCriteriaId":"0E2DAB9D-5D7D-40ED-8110-E3FDF7AE0729"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"875ABC97-2783-41DA-AB9F-9E6F0870B74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5262D28D-204C-41E8-BC4D-27372E366295"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"0D553F40-92C2-4537-AF74-5F9307E20AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"121225D0-C5DA-4F26-93B8-3D56BC1D38B1"}]}]}],"references":[{"url":"http://seclists.org/oss-sec/2015/q2/483","source":"secalert@redhat.com"},{"url":"http://seclists.org/oss-sec/2015/q2/523","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/74707","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1166","source":"secalert@redhat.com"},{"url":"https://bugs.python.org/issue17997","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1224999","source":"secalert@redhat.com"},{"url":"https://hg.python.org/cpython/rev/10d0edadbcdd","source":"secalert@redhat.com"},{"url":"http://seclists.org/oss-sec/2015/q2/483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/oss-sec/2015/q2/523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/74707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.python.org/issue17997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1224999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hg.python.org/cpython/rev/10d0edadbcdd","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3093","sourceIdentifier":"secalert@redhat.com","published":"2016-06-07T18:59:03.683","lastModified":"2026-06-17T00:44:57.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors."},{"lang":"es","value":"Apache Struts 2.0.0 hasta la versión 2.3.24.1 no cachea correctamente referencias al método cuando se utiliza con OGNL en versiones anteriores a 3.0.12, lo que permite a atacantes remotos provocar una denegación de servicio (bloqueo de acceso a sitio web) a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ognl_project:ognl:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"84F96D15-E287-4454-91C4-2B87350518D6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5CF11DCF-6F6E-4E18-988E-E43918FBB8A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE3A90B7-C632-4D3E-9A4F-21E46D273B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"386538BE-F258-4870-8E11-750ADA228026"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B4CF15B9-3714-4206-9971-1F7D59E20483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFA32D87-65C7-4589-86B7-500BE3203CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"98C3FB11-4E24-4067-A3A9-021F849DAAE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4DCF2D72-90F1-4D1B-94A2-5BB3D8C086C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"661F1610-9FCD-4FC1-BCA1-69C58E0A1389"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D9C89E22-B106-4EAB-90A1-0EA86C165737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E1BABB2-780E-47E0-87A9-A164906C8421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AC32348E-7EF4-411C-9A44-CD041ABFA0E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"94BD452B-AE41-4F7A-9DB9-4B1039582537"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"ACFDC53B-7B8E-4333-BC87-E01024EC9C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9F0818E7-B617-4C30-BFAC-9FE2F375F8BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"50F4A58E-F3D4-4711-A37E-EA538B112371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"EFFCC96F-FD87-4495-B8A5-19D7898D5662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"DEA0424E-84B4-41BD-8E6C-93E2A77DD6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CEC53AE5-3640-4FE1-B0B1-EA26C5B9EB9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"662A2E4B-A76A-4498-98A6-F90DF65C62B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E720B3A-4CFB-47FE-B80C-67C59D4C7FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CA687B56-A09B-4741-84F1-2BD9569A3F76"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"0BC0E358-8B4D-480B-BFAE-966CB697310A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2B7E8E1C-C667-4AED-86A5-2BD0C62AAD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"88B3348C-1086-4A16-97E3-52DB65FF860A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3C65711D-9C5B-4644-A12D-82243CB6FB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"FC1FA9A7-2C8E-4651-9400-190198528642"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA9093C0-AE6A-4285-B159-8FDBF37E33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"267A1C33-1C95-41DA-8A01-6F20C7BE1772"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7E4590B9-6A44-4DC6-B7DF-5E6CAAA9D25A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30860683-D403-4D24-B356-FD306AEFCA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4E3316DA-9E34-4955-91CA-E35B141A7007"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0D152B29-FAD5-4DEA-B187-278EBD37FEB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2AC68463-F500-471C-8600-8F8FD9743B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B487975D-6394-4136-B45C-C1F209465B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BDC41957-8CCA-46A6-BD31-4039EEF3C457"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"443B4E64-2A36-49C6-B09D-77B3BDF69709"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"2481505C-4FD1-4195-9E10-9DD741498FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"28ED63DB-2AAF-4BC9-A844-074EDF63C89A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*","matchCriteriaId":"38A6CEED-6C43-4325-B36C-9F254CCDFDC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*","matchCriteriaId":"41F43088-26AA-4890-A9D6-1B9B48D5F02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*","matchCriteriaId":"BE6820E3-8FDF-4BDF-8B62-E604A91F1280"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D25ED06A-F12C-443E-9B3F-FDDF52FE9D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*","matchCriteriaId":"44527919-8403-42A8-9CE1-3B4F58630F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB91D8A-14B8-4263-B90D-F776535F9B8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*","matchCriteriaId":"FB525941-7175-43C1-9F17-814F5F7C72CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*","matchCriteriaId":"F10D559E-04A0-4002-947C-D3902138795B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*","matchCriteriaId":"89203DD8-2C95-4546-9504-83654FFA5DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*","matchCriteriaId":"EB3D5644-CFAC-4FB5-A1FB-387F97876098"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*","matchCriteriaId":"1225A0B0-C3F2-4579-BFE9-F8DB2CF596F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*","matchCriteriaId":"8DC883A7-0766-4857-ABC8-9DB4BA713650"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*","matchCriteriaId":"22FF6282-0BCA-46EB-9648-6EE3EDA189F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*","matchCriteriaId":"6D1467BC-9BC8-402D-A420-615CF9698648"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.20.3:*:*:*:*:*:*:*","matchCriteriaId":"880AEA69-3705-447D-80FF-60753248158F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*","matchCriteriaId":"524C5119-416D-413B-BF1D-29291E23FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*","matchCriteriaId":"45446B16-F531-4C6D-B889-A8A6622C70A2"}]}]}],"references":[{"url":"http://struts.apache.org/docs/s2-034.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987854","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/90961","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036018","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef%40%3Cdev.struts.apache.org%3E","source":"secalert@redhat.com"},{"url":"http://struts.apache.org/docs/s2-034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef%40%3Cdev.struts.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2078","sourceIdentifier":"cve@mitre.org","published":"2016-06-08T14:59:33.563","lastModified":"2026-06-17T00:43:23.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter."},{"lang":"es","value":"Vulnerabilidad de XSS en el Web Client de VMware vCenter Server 5.1 en versiones anteriores a la actualización 3d, 5.5 en versiones anteriores a la actualización 3d y 6.0 en versiones anteriores a la actualización 2 en Windows permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un parámetro flashvars."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E0492A2B-EBE2-4303-B8BD-8511D191D1AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:5.5:*:*:*:*:*:*:*","matchCriteriaId":"8B12523A-5C1E-408F-BB4B-98EF32C7D676"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7499E57A-1F9C-45F0-93F8-F3FB7B0F990F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"46C704E0-E165-4A44-A104-6C5B83A83237"}]}]}],"references":[{"url":"http://hyp3rlinx.altervista.org/advisories/VMWARE-VSPHERE-FLASH-XSS.txt","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137189/VMWare-vSphere-Web-Client-6.0-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/538484/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035961","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0006.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://hyp3rlinx.altervista.org/advisories/VMWARE-VSPHERE-FLASH-XSS.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/137189/VMWare-vSphere-Web-Client-6.0-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/538484/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4363","sourceIdentifier":"cve@mitre.org","published":"2016-06-08T14:59:49.487","lastModified":"2026-06-17T00:47:25.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors."},{"lang":"es","value":"El despliegue del servidor HPE Insight Control permite a atacantes remotos modificar datos a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:insight_control_server_deployment:-:*:*:*:*:*:*:*","matchCriteriaId":"4D9D0416-A5B4-4DFF-B4D6-D1A6DDF8AE61"}]}]}],"references":[{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05150800","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05150800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2142","sourceIdentifier":"secalert@redhat.com","published":"2016-06-08T17:59:00.127","lastModified":"2026-06-17T00:43:31.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file."},{"lang":"es","value":"Red Hat OpenShift Enterprise 3.1 utiliza permisos de lectura para todos en el archivo de configuración /etc/origin/master/master-config.yaml, lo que permite a usuarios locales obtener credenciales del Active Directory leyendo el archivo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"}]}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2016:1038","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2149","sourceIdentifier":"secalert@redhat.com","published":"2016-06-08T17:59:01.767","lastModified":"2026-06-17T00:43:32.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace."},{"lang":"es","value":"Red Hat OpenShift Enterprise 3.2 permite a usuarios remotos autenticados leer archivos de registro de otro espacio de nombre utilizando el mismo nombre que un espacio de nombre que haya sido eliminado cuando se crea un nuevo espacio de nombre."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"F33CEF04-05FA-444C-BB14-F3E3434AF61F"}]}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2016:1064","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3703","sourceIdentifier":"secalert@redhat.com","published":"2016-06-08T17:59:04.703","lastModified":"2026-06-17T00:46:13.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter."},{"lang":"es","value":"Red Hat OpenShift Enterprise 3.2 y 3.1 no valida correctamente el origen de una petición cuando el acceso anónimo está concedido para una API service/proxy o pod/proxy para un pod específico, lo que permite a atacantes remotos acceder a credenciales de la API en el explorador web localStorage a través de un token de acceso en el parámetro query."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*","matchCriteriaId":"F8E35FAB-695F-44DA-945D-60B47C1F200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"F33CEF04-05FA-444C-BB14-F3E3434AF61F"}]}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2016:1094","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1095","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1581","sourceIdentifier":"security@ubuntu.com","published":"2016-06-09T16:59:01.860","lastModified":"2026-06-17T00:42:12.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors."},{"lang":"es","value":"LXD en versiones anteriores a 2.0.2 usa permisos world-readable para /var/lib/lxd/zfs.img al configurar una agrupación ZFS en bucle, lo que permite a usuarios locales copiar y leer información de contenedores arbitrarios a través de vectores no especificados."}],"affected":[{"source":"security@ubuntu.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"3CCA444F-9BF0-42A1-9175-4173A169C01B"}]}]}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2988-1","source":"security@ubuntu.com"},{"url":"https://linuxcontainers.org/lxd/news/","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2988-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://linuxcontainers.org/lxd/news/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1582","sourceIdentifier":"security@ubuntu.com","published":"2016-06-09T16:59:03.063","lastModified":"2026-06-17T00:42:12.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors."},{"lang":"es","value":"LXD en versiones anteriores a 2.0.2 no establece adecuadamente los permisos cuando se cambia un recipiente sin privelegios a modo privilegiado, lo que permite a usuarios locales acceder a la lectura de todas las rutas arbitrarios en el directorio del contenedor a través de vectores no especificados."}],"affected":[{"source":"security@ubuntu.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:lxd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ABBB3193-F7A8-44EE-8416-0B7165DE6635"}]}]}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2988-1","source":"security@ubuntu.com"},{"url":"https://linuxcontainers.org/lxd/news/","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2988-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://linuxcontainers.org/lxd/news/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4495","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-06-10T01:59:10.113","lastModified":"2026-06-17T00:47:40.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a configuration file via unspecified vectors."},{"lang":"es","value":"Dispositivos KMC Controls BAC-5051E con firmware en versiones anteriores a E0.2.0.2 permite a atacantes remotos eludir las restricciones destinadas al acceso y leer un archivo de configuración a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:kmc_controls:bac-5051e:-:*:*:*:*:*:*:*","matchCriteriaId":"4C04DBB4-B496-4ADC-A7A1-37FD9089042C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kmc_controls:bac-5051e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CD4B4484-3273-42A3-BFFB-C040F0B7BC88"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-126-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-126-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4524","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-06-10T01:59:13.037","lastModified":"2026-06-17T00:47:42.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors."},{"lang":"es","value":"ABB PCM600 en versiones anteriores a 2.7 no almacena correctamente contraseñas OPC Server IEC61850 en circunstancias temporales no especificadas, lo que permite a usuarios locales obtener información sensible a través de vectores desconocidos."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.0,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abb:pcm600:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"AD654F91-738B-4781-9F23-F082498DD75A"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-3085","sourceIdentifier":"secalert@redhat.com","published":"2016-06-10T15:59:02.360","lastModified":"2026-06-17T00:44:56.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and used, allow remote attackers to bypass authentication and access the user interface via vectors related to the SAML plugin."},{"lang":"es","value":"Apache CloudStack 4.5.x en versiones anteriores a 4.5.2.1, 4.6.x en versiones anteriores a 4.6.2.1, 4.7.x en versiones anteriores a 4.7.1.1 y 4.8.x en versiones anteriores a 4.8.0.1, cuando la autenticación SAML-based está activa y en uso, permiten a atacantes remotos eludir la autenticación y acceder a la interfaz de usuario a través de vectores relacionados con el plugin SAML."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"},{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cloudstack:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3A7AE63F-5964-41B0-A8BA-6C1B37D568FA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cloudstack:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F03D7F22-2906-44E2-8BFA-9F47FC1860F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cloudstack:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0C46FF6A-EF32-4A62-8F92-3B91DD09A6A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cloudstack:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F9267358-B059-4F79-9263-52E4AC7DA15F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cloudstack:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C607535D-3F5C-4DBE-8781-DA9CEF86F147"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cloudstack:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8CC8DF1C-0C43-4216-8C09-5D1484A9F5A4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:cloudstack:4.8:*:*:*:*:*:*:*","matchCriteriaId":"E1A01CFD-73DB-4E4F-9A79-4D4F6145F4E7"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137390/Apache-CloudStack-4.5.0-Authentication-Bypass.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/538636/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/137390/Apache-CloudStack-4.5.0-Authentication-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538636/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4429","sourceIdentifier":"secalert@redhat.com","published":"2016-06-10T15:59:05.687","lastModified":"2026-06-17T00:47:32.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets."},{"lang":"es","value":"Desbordamiento del buffer basado en pila en la función clntudp_call en sunrpc/clnt_udp.c en GNU C Library (también conocida como glibc o libc6) permite a atacantes remotos provocar una denegación del servicio (caída) o posiblemente tener otro impacto no especificado a través de una inundación de paquetes ICMP y UDP manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*","versionEndExcluding":"2.24","matchCriteriaId":"0AD43ADC-AA8F-4284-AD88-98A9A9CC8AAC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/102073","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00027.html","source":"secalert@redhat.com"},{"url":"https://source.android.com/security/bulletin/2017-12-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=20112","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=bc779a1a5b3035133024b21e2f339fe4219fb11c","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/3759-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3759-2/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/102073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2017-12-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=20112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=bc779a1a5b3035133024b21e2f339fe4219fb11c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3759-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3759-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2495","sourceIdentifier":"security@android.com","published":"2016-06-13T01:59:34.657","lastModified":"2026-06-17T00:44:10.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SampleTable.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 28076789."},{"lang":"es","value":"SampleTable.cpp en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-06-01 permite a atacantes remotos provocar una denegación de servicio (colgado del dispositivo o reinicio) a través de un archivo manipulado, también conocido como error interno 28076789."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-06-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/av/+/45737cb776625f17384540523674761e6313e6d4","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/b57b3967b1a42dd505dbe4fcf1e1d810e3ae3777","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-06-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/av/+/45737cb776625f17384540523674761e6313e6d4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/b57b3967b1a42dd505dbe4fcf1e1d810e3ae3777","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2498","sourceIdentifier":"security@android.com","published":"2016-06-13T01:59:36.517","lastModified":"2026-06-17T00:44:10.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to bypass intended data-access restrictions via a crafted application, aka internal bug 27777162."},{"lang":"es","value":"El controlador Wi-Fi Qualcomm en Android en versiones anteriores a 2016-06-01 en dispositivos Nexus 7 (2013) permite a atacantes eludir las restricciones destinadas al acceso de datos a través de una aplicación manipulada, también conocida como error interno 27777162."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_7:-:*:*:*:*:*:*:*","matchCriteriaId":"12357E84-6FAE-4C6B-8FD3-BD5457DBBBCE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-06-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-06-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2499","sourceIdentifier":"security@android.com","published":"2016-06-13T01:59:37.563","lastModified":"2026-06-17T00:44:10.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not initialize certain data, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 27855172."},{"lang":"es","value":"AudioSource.cpp en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-06-01 no inicializa ciertos datos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno 27855172."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-06-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/av/+/dd3546765710ce8dd49eb23901d90345dec8282f","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-06-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/av/+/dd3546765710ce8dd49eb23901d90345dec8282f","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2500","sourceIdentifier":"security@android.com","published":"2016-06-13T01:59:38.957","lastModified":"2026-06-17T00:44:10.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Activity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not properly terminate process groups, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 19285814."},{"lang":"es","value":"Activity Manager en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-06-01 no finaliza adecuadamente los grupos de procesos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno 1985814."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-06-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/base/+/9878bb99b77c3681f0fda116e2964bac26f349c3","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-06-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/base/+/9878bb99b77c3681f0fda116e2964bac26f349c3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2822","sourceIdentifier":"security@mozilla.org","published":"2016-06-13T10:59:05.587","lastModified":"2026-06-17T00:44:31.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 47.0 y Firefox ESR 45.x en versiones anteriores a 45.2 permite a atacantes remotos suplantar la barra de dirección a través de un elemento SELECT con un menú persistente."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4123CC23-4443-4B13-A064-04B0B04354FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E084D09-97BE-43E1-94D1-05206E513B99"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"46.0.1","matchCriteriaId":"CD4FEA4B-E29B-485B-BD1C-F1400DF6D1E3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3600","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-52.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"security@mozilla.org"},{"url":"http://www.securityfocus.com/bid/91075","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036057","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"security@mozilla.org"},{"url":"https://access.redhat.com/errata/RHSA-2016:1217","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1273129","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-52.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1273129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2825","sourceIdentifier":"security@mozilla.org","published":"2016-06-13T10:59:08.167","lastModified":"2026-06-17T00:44:32.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 47.0 permite a atacantes remotos eludir la Same Origin Policy y modificar la propiedad location.host a través de un dato no válido: URL."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"46.0.1","matchCriteriaId":"CD4FEA4B-E29B-485B-BD1C-F1400DF6D1E3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-54.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036057","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1193093","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-54.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1193093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2829","sourceIdentifier":"security@mozilla.org","published":"2016-06-13T10:59:11.260","lastModified":"2026-06-17T00:44:32.607","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a crafted web site that rapidly triggers permission requests, as demonstrated by the microphone permission or the geolocation permission."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 47.0 permite a atacantes remotos suplantar notificaciones de permisos a través de un sitio web manipulado que rápidamente desencadena peticiones de permisos, según lo demostrado mediante el permiso de micrófono o el permiso de geolocalización."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"46.0.1","matchCriteriaId":"CD4FEA4B-E29B-485B-BD1C-F1400DF6D1E3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-57.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036057","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1248329","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-57.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1248329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2832","sourceIdentifier":"security@mozilla.org","published":"2016-06-13T10:59:13.197","lastModified":"2026-06-17T00:44:32.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets (CSS) pseudo-classes."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 47.0 permite a atacantes remotos descubrir la lista de plugins deshabilitadas a través de un ataque de huellas dactilares involucrando pseudo clases Cascading Style Sheets (CSS)."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"46.0.1","matchCriteriaId":"CD4FEA4B-E29B-485B-BD1C-F1400DF6D1E3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-59.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036057","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1025267","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-59.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1025267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2833","sourceIdentifier":"security@mozilla.org","published":"2016-06-13T10:59:14.167","lastModified":"2026-06-17T00:44:33.093","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted applet."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 47.0 ignora directivas Content Security Policy (CSP) para subprogramas de dominios cruzados Java, lo que facilita a atacantes remotos llevar a cabo ataques XSS a través de un subprograma manipulado."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"},{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"46.0.1","matchCriteriaId":"CD4FEA4B-E29B-485B-BD1C-F1400DF6D1E3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-60.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036057","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=908933","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-60.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2993-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=908933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3670","sourceIdentifier":"cve@mitre.org","published":"2016-06-13T14:59:03.963","lastModified":"2026-06-17T00:46:09.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field."},{"lang":"es","value":"Vulnerabilidad de XSS en users.jsp en la funcionalidad Profile Search functionality en Liferay en versiones anteriores a 7.0.0 CE RC1 permite a atacantes remotos inyectar comandos web o HTML arbitrarios a través del campo FirstName."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_portal:*:ga6:*:*:community_edition:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"ABC83FA6-F7FB-440D-B660-2536A8183E93"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137279/Liferay-CE-Stored-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jun/5","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id/1036083","source":"cve@mitre.org"},{"url":"https://issues.liferay.com/browse/LPS-62387","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://labs.integrity.pt/advisories/cve-2016-3670/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/39880/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/137279/Liferay-CE-Stored-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2016/Jun/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id/1036083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.liferay.com/browse/LPS-62387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://labs.integrity.pt/advisories/cve-2016-3670/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/39880/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2016-3677","sourceIdentifier":"cve@mitre.org","published":"2016-06-13T14:59:05.353","lastModified":"2026-06-17T00:46:10.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008."},{"lang":"es","value":"La aplicación Huawei Wear App en versiones anteriores a 15.0.0.307 para Android no valida certificados SSL, lo que permite a usuarios locales tener un impacto no especificado a través de vectores desconocidos, también conocido como HWPSIRT-2016-03008."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"},{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:hilink_app:-:*:*:*:*:*:*:*","matchCriteriaId":"A7828764-F5C5-40BB-B2CA-7F165D6C6FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:wear_app:-:*:*:*:*:*:*:*","matchCriteriaId":"494B19A0-49A8-4249-A287-10C0E3B1AC51"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-wear-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86536","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-wear-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4005","sourceIdentifier":"cve@mitre.org","published":"2016-06-13T14:59:06.353","lastModified":"2026-06-17T00:46:43.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008."},{"lang":"es","value":"La aplicación Huawei Hilink App en versiones anteriores a 3.19.2 para Android no valida certificados SSL, lo que permite a usuarios locales tener un impacto no especificado a través de vectores desconocidos, también conocido como HWPSIRT-2016-03008."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:hilink_app:*:*:*:*:*:*:*:*","versionEndIncluding":"3.19.1","matchCriteriaId":"D447E80F-0850-4004-A917-F1DEF0A8FD24"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-wear-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86536","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-wear-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4911","sourceIdentifier":"cve@mitre.org","published":"2016-06-13T14:59:07.323","lastModified":"2026-06-17T00:48:26.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and bypass intended access restrictions by rescoping a token."},{"lang":"es","value":"El Fernet Token Provider en OpenStack Identity (Keystone) 9.0.x en versiones anteriores a 9.0.1 (mitaka) permite a usuarios remotos autenticados prevenir la revocación de una cadena de tokens y eludir las restricciones destinadas al acceso mediante un token con alcance ampliado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:keystone:openstack_identity:9.0.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B88FDEF2-E782-485E-80D4-1ADACE60FC66"},{"vulnerable":true,"criteria":"cpe:2.3:a:keystone:openstack_identity:9.0.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6913A9FE-14FC-4B11-A364-63476ED92D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:keystone:openstack_identity:9.0.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"570EAE79-D60E-4254-92F9-1CDA91AFDB43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/17/10","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/17/11","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/90728","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.launchpad.net/keystone/+bug/1577558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://review.openstack.org/#/c/311886/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-008.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/17/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/17/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/90728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.launchpad.net/keystone/+bug/1577558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://review.openstack.org/#/c/311886/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5104","sourceIdentifier":"cve@mitre.org","published":"2016-06-13T14:59:08.290","lastModified":"2026-06-17T00:48:46.097","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket."},{"lang":"es","value":"La función socket_create en common/socket.c en libimobiledevice y libusbmuxd permite a atacantes remotos eludir las restricciones destinadas al acceso y comunicarse con servicios en dispositivos de iOS conectándose a un socket IPv4 TCP."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libimobiledevice:libimobiledevice:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"4BB71F46-3E96-42AA-9B7A-0756DE115215"},{"vulnerable":true,"criteria":"cpe:2.3:a:libimobiledevice:libusbmuxd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.10","matchCriteriaId":"499E4DE7-7045-4009-AF8C-16EB02946297"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00029.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/6","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3026-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3026-2","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339988","source":"cve@mitre.org"},{"url":"https://github.com/libimobiledevice/libimobiledevice/commit/df1f5c4d70d0c19ad40072f5246ca457e7f9849e","source":"cve@mitre.org"},{"url":"https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed61ce6482614196","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00027.html","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00028.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3026-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3026-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/libimobiledevice/libimobiledevice/commit/df1f5c4d70d0c19ad40072f5246ca457e7f9849e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed61ce6482614196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5238","sourceIdentifier":"secalert@redhat.com","published":"2016-06-14T14:59:00.117","lastModified":"2026-06-17T00:49:01.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode."},{"lang":"es","value":"La función get_cmd en hw/scsi/esp.c en QEMU podría permitir a administradores locales del SO invitado provocar una denegación de servicio (escritura fuera de límites y caída del proceso QEMU) a través de vectores relacionados con la lectura del buffer de transferencia de información en modo no DMA."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"3CF78B06-34D3-4BF8-883B-7B9643BBA7CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/06/02/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/02/9","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90995","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341931","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05691.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg00150.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/02/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/02/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05691.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg00150.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5337","sourceIdentifier":"secalert@redhat.com","published":"2016-06-14T14:59:01.260","lastModified":"2026-06-17T00:49:14.293","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information."},{"lang":"es","value":"La función megasas_ctrl_get_info en hw/scsi/megasas.c en QEMU permite a administradores locales del SO invitado obtener información sensible de la memoria del anfitrión a través de vectores relacionados con la lectura de información de control del dispositivo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"3CF78B06-34D3-4BF8-883B-7B9643BBA7CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=844864fbae66935951529408831c2f22367a57b6","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/13","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91097","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01969.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=844864fbae66935951529408831c2f22367a57b6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01969.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0028","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:03.167","lastModified":"2026-06-17T00:36:48.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, aka \"Microsoft Exchange Information Disclosure Vulnerability.\""},{"lang":"es","value":"Outlook Web Access (OWA) en Microsoft Exchange Server 2013 SP1, Cumulative Update 11 y Cumulative Update 12 y 2016 Gold y Cumulative Update 1 no restringe correctamente la carga de elementos IMG, lo que facilita a atacantes remotos rastrear usuarios a través de un mensaje de e-mail HTML manipulado, también conocida como \"Microsoft Exchange Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_11:*:*:*:*:*:*","matchCriteriaId":"5F21DAA0-7075-41E1-96BD-F3D77D237248"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_12:*:*:*:*:*:*","matchCriteriaId":"D0CE2398-7B53-4F42-BF77-660A52CDD5E6"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:*:*:*:*:*:*:*","matchCriteriaId":"BD7B17EA-856C-492A-861F-6932A1BDF9BE"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_1:*:*:*:*:*:*","matchCriteriaId":"56728785-188C-470A-9692-E6C7235109CA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","matchCriteriaId":"3AACB4F5-B05A-4A5F-9062-DEAE75C0CBAD"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036106","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-079","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3198","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:06.057","lastModified":"2026-06-17T00:45:17.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Edge allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted document, aka \"Microsoft Edge Security Feature Bypass.\""},{"lang":"es","value":"Microsoft Edge permite a atacantes remotos eludir el mecanismo de protección Content Security Policy (CSP) a través de un documento manipulado, también conocida como \"Microsoft Edge Security Feature Bypass\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036099","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-068","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3201","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:08.213","lastModified":"2026-06-17T00:45:17.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka \"Windows PDF Information Disclosure Vulnerability,\" a different vulnerability than CVE-2016-3215."},{"lang":"es","value":"Microsoft Windows 8.1, Windows Server 2012 Gold y R2, Windows 10 Gold y 1511 y Microsoft Edge permiten a atacantes remotos obtener información sensible de la memoria del proceso a través de un documento PDF manipulado, también conocida como \"Windows PDF Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2016-3215."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*","matchCriteriaId":"80EB5690-B20F-457A-A202-FBADAA17E05C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*","matchCriteriaId":"AB506484-7F0C-46BF-8EA6-4FB5AF454CED"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036099","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-068","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-080","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3212","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:16.260","lastModified":"2026-06-17T00:45:18.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The XSS Filter in Microsoft Internet Explorer 9 through 11 does not properly identify JavaScript, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site, aka \"Internet Explorer XSS Filter Vulnerability.\""},{"lang":"es","value":"El XSS Filter en Microsoft Internet Explorer 9 hasta la versión 11 no identifica adecuadamente JavaScript, lo que facilita a atacantes remotos llevar a cabo ataques de secuencias de comandos de sitios cruzados (XSS) a través de un sitio web manipulado, también conocida como \"Internet Explorer XSS Filter Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91105","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036096","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-063","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3215","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:19.683","lastModified":"2026-06-17T00:45:18.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka \"Windows PDF Information Disclosure Vulnerability,\" a different vulnerability than CVE-2016-3201."},{"lang":"es","value":"Microsoft Windows 8.1, Windows Server 2012 Gold y R2, Windows 10 1511 y Microsoft Edge permite a atacantes remotos obtener información sensible del proceso de memoria a través de un documento PDF manipulado, también conocida como \"Windows PDF Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2016-3201."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*","matchCriteriaId":"FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036099","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-370","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-068","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-080","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3216","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:20.683","lastModified":"2026-06-17T00:45:18.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka \"Windows Graphics Component Information Disclosure Vulnerability.\""},{"lang":"es","value":"GDI32.dll en el componente Graphics en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold y 1511 permite a atacantes remotos eludir el mecanismo de protección ASLR a través de vectores no especificados, también conocida como \"Windows Graphics Component Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*","matchCriteriaId":"D56B932B-9593-44E2-B610-E4EB2143EB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036101","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-074","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/39990/","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39990/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3226","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:28.873","lastModified":"2026-06-17T00:45:19.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Active Directory in Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (service hang) by creating many machine accounts, aka \"Active Directory Denial of Service Vulnerability.\""},{"lang":"es","value":"Active Directory en Microsoft Windows Server 2008 R2 SP1 y Server 2012 Gold y R2 permite a usuarios remotos autenticados provocar una denegación de servicio (cuelgue de servicio) creando muchas cuentas de equipos, también conocida como \"Active Directory Denial of Service Vulnerability.\""}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*","matchCriteriaId":"AB506484-7F0C-46BF-8EA6-4FB5AF454CED"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:datacenter:*:*:*","matchCriteriaId":"32BCD530-F6E2-4F9B-AD4C-7DF2BED00296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:essentials:*:*:*","matchCriteriaId":"A1318333-EF3A-4DBA-8DD7-367BF843F70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:standard:*:*:*","matchCriteriaId":"74B5E7C1-6C1D-4605-91CF-AF105EFA678D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036108","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-081","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3230","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:31.793","lastModified":"2026-06-17T00:45:20.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Search component in Microsoft Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to cause a denial of service (performance degradation) via a crafted application, aka \"Windows Search Component Denial of Service Vulnerability.\""},{"lang":"es","value":"El componente Search en Microsoft Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold y 1511 permite a usuarios locales provocar una denegación de servicio (degradación del rendimiento) a través de una aplicación manipulada, también conocida como \"Windows Search Component Denial of Service Vulnerability.\""}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*","matchCriteriaId":"D56B932B-9593-44E2-B610-E4EB2143EB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036102","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-082","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3232","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:34.170","lastModified":"2026-06-17T00:45:20.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted application, aka \"Windows Virtual PCI Information Disclosure Vulnerability.\""},{"lang":"es","value":"El proveedor de servicio virtual Virtual PCI (VPCI) en Microsoft Windows Server 2012 Gold y R2 permite a usuarios locales obtener información sensible de las posiciones de memoria no inicializadas a través e una aplicación manipulada, también conocida como \"Windows Virtual PCI Information Disclosure Vulnerability.\""}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*","matchCriteriaId":"AB506484-7F0C-46BF-8EA6-4FB5AF454CED"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:datacenter:*:*:*","matchCriteriaId":"32BCD530-F6E2-4F9B-AD4C-7DF2BED00296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:essentials:*:*:*","matchCriteriaId":"A1318333-EF3A-4DBA-8DD7-367BF843F70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:standard:*:*:*","matchCriteriaId":"74B5E7C1-6C1D-4605-91CF-AF105EFA678D"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036109","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-073","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3234","sourceIdentifier":"secure@microsoft.com","published":"2016-06-16T01:59:36.107","lastModified":"2026-06-17T00:45:20.560","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka \"Microsoft Office Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2 y Office Web Apps Server 2013 SP1 permiten a atacantes remotos obtener información sensible de la memoria del proceso a través de un documento de Office manipulado, también conocida como \"Microsoft Office Information Disclosure Vulnerability.\""}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:*","matchCriteriaId":"69998A67-CB15-4217-8AD6-43F9BA3C6454"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:*","matchCriteriaId":"349E9084-8116-43E9-8B19-CA521C96660D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*","matchCriteriaId":"44BC7B7B-7191-431C-8CAE-83B3F0EFF03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"A8235774-4B57-4793-BE26-2CDE67532EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"B3C3FC9A-D8E5-493A-A575-C831A9A28815"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"16F33176-442C-4EFF-8EA0-C640D203B939"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"7D006508-BFB0-4F21-A361-3DA644F51D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"24EEDAD9-9656-4B21-82E4-D60B83777492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"D79B6572-E7DF-4CC2-B70B-9B31BE1B6A81"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036093","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4159","sourceIdentifier":"psirt@adobe.com","published":"2016-06-16T14:59:41.827","lastModified":"2026-06-17T00:47:00.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Adobe ColdFusion 10 en versiones anteriores a Update 20, 11 en versiones anteriores a Update 9 y 2016 en versiones anteriores a Update 2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:-:*:*:*:*:*:*","matchCriteriaId":"BB4E08F7-C133-4083-906A-335B9880BA04"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update1:*:*:*:*:*:*","matchCriteriaId":"1C4D259E-56B1-4D53-80A9-52D0687779C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update10:*:*:*:*:*:*","matchCriteriaId":"191E8CC6-8AD5-40DE-8B5D-1A8BCAEE855D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update11:*:*:*:*:*:*","matchCriteriaId":"FDAC841B-3FE8-46F6-84B4-650D939225F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update12:*:*:*:*:*:*","matchCriteriaId":"AC034BEB-0ADB-4340-8AFB-30EF67E72815"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update13:*:*:*:*:*:*","matchCriteriaId":"C8F1ABAB-C4FF-45FD-8C64-23E79F40C043"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update14:*:*:*:*:*:*","matchCriteriaId":"F56CFA71-3D5E-4A0B-BA4C-9756D0727F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update15:*:*:*:*:*:*","matchCriteriaId":"4DB7821D-F4A7-4772-A25B-D925C90478CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update16:*:*:*:*:*:*","matchCriteriaId":"0BB6DF8F-4CA1-448E-8E48-7C2165EC3AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update17:*:*:*:*:*:*","matchCriteriaId":"304F3518-82F3-4566-A44D-3FA8D1FEEBCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update18:*:*:*:*:*:*","matchCriteriaId":"B6F8C00C-60CA-4A53-92DF-FB2BF09CF9E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update19:*:*:*:*:*:*","matchCriteriaId":"9B048A36-1E2F-4D0C-AF07-B3D255F170CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update2:*:*:*:*:*:*","matchCriteriaId":"09F8F645-DD28-4159-877E-40B4C8CDA4CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update3:*:*:*:*:*:*","matchCriteriaId":"1B83D6CF-4C45-4B7A-9AFC-9961E1FE0686"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update4:*:*:*:*:*:*","matchCriteriaId":"F54FF25A-EF5B-4DE0-802C-C9B00A963C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update5:*:*:*:*:*:*","matchCriteriaId":"705E7F38-9407-4148-835E-5AB994C05F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update6:*:*:*:*:*:*","matchCriteriaId":"DD7A193C-6CE4-4B80-9897-934BC915627F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update7:*:*:*:*:*:*","matchCriteriaId":"71302041-9BB6-406E-9E77-99AD1594C5C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update8:*:*:*:*:*:*","matchCriteriaId":"34472770-FFCE-4088-8658-FA0A552BEAA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:10.0:update9:*:*:*:*:*:*","matchCriteriaId":"61BC9D5B-1208-4613-BD23-FEA9C404A503"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*","matchCriteriaId":"E217CE63-07DC-4A88-8877-181F33A21C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*","matchCriteriaId":"7D4BD25E-6856-40EC-98A8-ACB540992487"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*","matchCriteriaId":"82F81CF8-1482-4731-AD34-677B8D6B930B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*","matchCriteriaId":"57BBBE71-BBE0-4129-B997-3F9AF54BFBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*","matchCriteriaId":"8E514D95-9287-4A43-9A44-BD6F8EDC5DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*","matchCriteriaId":"96C50CD1-CE75-4D70-AD65-2DB6027D806A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*","matchCriteriaId":"AE1B1190-4699-4FB0-AD46-DF0233B5BA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*","matchCriteriaId":"827CB550-5078-4FD5-8B1F-616C06912AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*","matchCriteriaId":"31F22450-F26C-4797-9292-66CA444C0D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*","matchCriteriaId":"B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*","matchCriteriaId":"9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036098","source":"psirt@adobe.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/coldfusion/apsb16-22.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/coldfusion/apsb16-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4164","sourceIdentifier":"psirt@adobe.com","published":"2016-06-16T14:59:47.157","lastModified":"2026-06-17T00:47:01.580","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Adobe Brackets en versiones anteriores a 1.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:brackets:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"29E4E813-0E05-4BDD-A52E-59F15D6DDD91"}]}]}],"references":[{"url":"https://helpx.adobe.com/security/products/brackets/apsb16-20.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"https://helpx.adobe.com/security/products/brackets/apsb16-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2012-6702","sourceIdentifier":"security@opentext.com","published":"2016-06-16T18:59:00.327","lastModified":"2026-06-16T23:48:38.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function."},{"lang":"es","value":"Expat, cuando se utiliza en un intérprete que no ha realizado una llamada XML_SetHashSalt o pasado una semilla de 0, facilita a atacantes dependientes del contexto romper mecanismos de protección criptográfica a través de vectores que involucran el uso de la función srand."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.0","matchCriteriaId":"BE4EECEA-61AE-4AD0-87C2-89DC1890DDDD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E3CEEA22-63B4-4702-A400-01349DF0EC1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9915371-C730-41F7-B86E-7E4DE0DF5385"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3597","source":"security@opentext.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/03/8","source":"security@opentext.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/04/1","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/91483","source":"security@opentext.com"},{"url":"http://www.ubuntu.com/usn/USN-3010-1","source":"security@opentext.com"},{"url":"https://security.gentoo.org/glsa/201701-21","source":"security@opentext.com"},{"url":"https://source.android.com/security/bulletin/2016-11-01.html","source":"security@opentext.com"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"security@opentext.com"},{"url":"http://www.debian.org/security/2016/dsa-3597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/03/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3010-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2016-11-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2391","sourceIdentifier":"secalert@redhat.com","published":"2016-06-16T18:59:03.187","lastModified":"2026-06-17T00:43:57.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers."},{"lang":"es","value":"La función ohci_bus_start en el suporte de emulación USB OHCI (hw/usb/hcd-ohci.c) en QEMU permite a administradores locales del SO invitado provocar una denegación de servicio (referencia a puntero NULL y caída del proceso QEMU) a través de vectores relacionados con temporizadores eof múltiples."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1.1","matchCriteriaId":"1E0091D0-CCD9-4017-A266-32576814AE63"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa1298c2d623522eda7b4f1f721fcb935abb7360","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/16/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/83263","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1304794","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg03374.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa1298c2d623522eda7b4f1f721fcb935abb7360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/16/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/83263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1304794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg03374.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2392","sourceIdentifier":"secalert@redhat.com","published":"2016-06-16T18:59:04.640","lastModified":"2026-06-17T00:43:57.767","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet."},{"lang":"es","value":"La función is_rndis en el dispositivo de emulación USB Net (hw/usb/dev-network.c) en QEMU en versiones anteriores a 2.5.1 no valida correctamente objetos descriptores de configuración USB, lo que permite a administradores locales del SO invitado provocar una denegación de servicio (referencia a puntero NULL y caída del proceso QEMU) a través de vectores que involucran un paquete de mensajes de control remoto de NDIS."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"25A6B764-D4E8-4A14-A825-C7B8569AE847"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=80eecda8e5d09c442c24307f340840a5b70ea3b9","source":"secalert@redhat.com"},{"url":"http://lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/16/7","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83274","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302299","source":"secalert@redhat.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com"},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg02553.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-01","source":"secalert@redhat.com"},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=80eecda8e5d09c442c24307f340840a5b70ea3b9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/16/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg02553.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201604-01","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-2841","sourceIdentifier":"secalert@redhat.com","published":"2016-06-16T18:59:07.203","lastModified":"2026-06-17T00:44:34.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control."},{"lang":"es","value":"La función ne2000_receive en el soporte de emulación NE2000 NIC (hw/net/ne2000.c) en QEMU en versiones anteriores a 2.5.1 permite a administradores locales del SO invitado provocar una denegación de servicio (bucle infinito y caída del proceso QEMU) a través de valores manipulados para los registros PSTART y PSTOP, involucrando control de anillo de buffer."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0","matchCriteriaId":"585C8283-F180-4305-BFA0-B125754DFCC6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=415ab35a441eca767d033a2702223e785b9d5190","source":"secalert@redhat.com"},{"url":"http://lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/02/8","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/84028","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303106","source":"secalert@redhat.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com"},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg06126.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com"},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=415ab35a441eca767d033a2702223e785b9d5190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/02/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2974-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg06126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3687","sourceIdentifier":"cve@mitre.org","published":"2016-06-16T18:59:09.313","lastModified":"2026-06-17T00:46:11.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on (SSO), allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the SSO_ORIG_URI parameter."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x y 11.6.x en versiones anteriores a 11.6.0 HF6 y Edge Gateway 11.2.1, cuando utiliza multidominio de sesión único (SSO), permite a atacantes remotos redirigir usuarios a sitios web arbitrarios y llevar a cabo ataques de phishing a través de URL base64-encoded en el parámetro SSO_ORIG_URI."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FB630A86-FB84-4199-9E4D-38EB620806CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FB5F9107-549C-40EF-B355-C7E93A979CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B1A1C200-30B2-4B38-BC74-D11E54530A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1C0312FC-8178-46DE-B4EE-00F2895073BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C9E574F6-34B6-45A6-911D-E5347DA22F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCF94129-8779-4D68-8DD4-B828CA633746"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"BA2E88AA-0523-48D0-8664-6AFDBCB6C940"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3136A8D1-3D0D-46B3-9A3A-737074864F1B"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036111","source":"cve@mitre.org"},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/26/sol26738102.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/26/sol26738102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/601.html\">CWE-601: URL Redirection to Untrusted Site ('Open Redirect')</a>"}},{"cve":{"id":"CVE-2016-5433","sourceIdentifier":"cve@mitre.org","published":"2016-06-17T15:59:05.320","lastModified":"2026-06-17T00:49:24.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors."},{"lang":"es","value":"Citrix iOS Receiver en versiones anterioes a 7.0 permite a atacantes provocar certificados TLS para ser validados incorrectamente a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:ios_receiver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.5","matchCriteriaId":"8FE3BDAA-B4BA-4EAD-888E-3CD0B89248EE"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX213998","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX213998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1431","sourceIdentifier":"psirt@cisco.com","published":"2016-06-18T01:59:01.107","lastModified":"2026-06-17T00:41:57.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1 y 5.4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocida como Bug ID CSCur25516."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"8AA27341-2B4C-4FBE-B9BC-7005CDBA3FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"456DC3D1-4FEE-4C05-8AFD-E28E6E12F4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"30E233C0-7547-479D-BC2B-A9F75106ADF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9FC04411-7DDF-4E11-A22C-1013396AC47B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"27EA38C1-A34F-430A-92F7-1D299F78B449"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160617-fmc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160617-fmc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1432","sourceIdentifier":"psirt@cisco.com","published":"2016-06-18T01:59:02.107","lastModified":"2026-06-17T00:41:58.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service (NULL pointer dereference and card restart) via a crafted SNMP request, aka Bug ID CSCuu68862."},{"lang":"es","value":"Cisco IOS XE 3.15S y 3.16S en dispositivos cBR-8 Converged Broadband Router permite a usuarios remotos autenticados provocar una caída de servicio (referencia a puntero NULL y reinicio de tarjeta) a través de una petición SNMP, también conocido como Bug ID CSCuu68862."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*","matchCriteriaId":"FAD93CD1-4188-40B7-A20E-9C3FE8344A27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*","matchCriteriaId":"2972E680-5A19-4858-9B35-0B959ED319A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*","matchCriteriaId":"A0E5BB91-B5E7-4961-87DC-26596E5EDED7"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160617-cbr","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160617-cbr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1223","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T01:59:01.153","lastModified":"2026-06-17T00:41:30.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x y Worry-Free Business Security 9.0 permite a atacantes remotos leer archivos arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*","matchCriteriaId":"BCB164BF-12B5-450F-9DDB-9A3FBD544F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:worry-free_business_security:9.0:*:*:*:*:*:*:*","matchCriteriaId":"0EA66718-E63C-4678-816E-1FCDE73C4631"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:worry-free_business_security_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"320B8B46-3FFD-4FC0-9962-A14941F0BFC3"}]}]}],"references":[{"url":"http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48847535/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000074","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48847535/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1224","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T01:59:02.013","lastModified":"2026-06-17T00:41:30.267","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Trend Micro Worry-Free Business Security Service 5.x y Worry-Free Business Security 9.0 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques XSS a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:worry-free_business_security:9.0:*:*:*:*:*:*:*","matchCriteriaId":"0EA66718-E63C-4678-816E-1FCDE73C4631"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:worry-free_business_security_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"320B8B46-3FFD-4FC0-9962-A14941F0BFC3"}]}]}],"references":[{"url":"http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48847535/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000089","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48847535/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1396","sourceIdentifier":"psirt@cisco.com","published":"2016-06-19T01:59:04.043","lastModified":"2026-06-17T00:41:51.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux82583."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de gestión basada en web en dispositivos Cisco RV110W con firmware before 1.2.1.7, dispositivos RV130W con firmware en versiones anteriores a 1.0.3.16 y dispositivos RV215W con firmware en versiones anteriores a 1.3.0.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un parámetro manipulado, también conocido como Bug ID CSCux82583."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:rv130w_wireless-n_multifunction_vpn_router:-:*:*:*:*:*:*:*","matchCriteriaId":"BD30B0C7-E04A-4B05-82D1-9DA487F8639D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv130w_wireless-n_multifunction_vpn_router_firmware:1.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"0081BB31-AA51-4E6F-BDC0-62F4E4388F5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv130w_wireless-n_multifunction_vpn_router_firmware:1.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A9638155-20F1-469E-B13C-2334713B8CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv130w_wireless-n_multifunction_vpn_router_firmware:1.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1BAB434B-FADE-40F4-9478-1DC063FE0F2C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:rv110w_wireless-n_vpn_firewall:-:*:*:*:*:*:*:*","matchCriteriaId":"CA92B2A4-A9D9-4BF5-A687-848917283E8C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:1.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"482ABE1F-7DEF-4E24-9696-8030DAD98598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:1.2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E4C8D001-6827-4DB4-AC6D-83365FD622A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:1.2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"BF38D8F0-2400-431A-8BFA-48E5D9CB7E33"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:1.2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5D0624E0-993B-43AE-9D61-4DCA3E39ADAB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*","matchCriteriaId":"BE146ECF-BE5C-4CA1-A325-C3402F540FBB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"25E45E45-4533-4E9E-B542-606B9EAB3D69"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"58A90A10-CC3F-4743-8FAA-0C8CDCFC1BBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"89375F30-1ACD-46AF-898F-176546BFF078"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"0A9FB3B1-1669-4B07-849C-7DAF013234F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"939B5242-6224-4BA7-88CA-467D5350987A"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036114","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1397","sourceIdentifier":"psirt@cisco.com","published":"2016-06-19T01:59:05.107","lastModified":"2026-06-17T00:41:51.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service (device reload) via crafted configuration commands in an HTTP request, aka Bug ID CSCux82523."},{"lang":"es","value":"Desbordamiento de buffer en la interfaz de gestión basada en web en dispositivos Cisco RV110W con firmware en versiones anteriores a 1.2.1.7, dispositivos RV130W con firmware en versiones anteriores a 1.0.3.16 y dispositivos RV215W con firmware en versiones anteriores a 1.3.0.8 permite a usuarios remotos autenticados provocar una denegación de servicio (recarga del dispositivo) a través de comandos de configuración manipulados en una petición HTTP, también conocido como Bug ID CSCux82523."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*","matchCriteriaId":"BE146ECF-BE5C-4CA1-A325-C3402F540FBB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"25E45E45-4533-4E9E-B542-606B9EAB3D69"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"58A90A10-CC3F-4743-8FAA-0C8CDCFC1BBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"89375F30-1ACD-46AF-898F-176546BFF078"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"0A9FB3B1-1669-4B07-849C-7DAF013234F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"939B5242-6224-4BA7-88CA-467D5350987A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:rv110w_wireless-n_vpn_firewall:-:*:*:*:*:*:*:*","matchCriteriaId":"CA92B2A4-A9D9-4BF5-A687-848917283E8C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:1.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"482ABE1F-7DEF-4E24-9696-8030DAD98598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:1.2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E4C8D001-6827-4DB4-AC6D-83365FD622A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:1.2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"BF38D8F0-2400-431A-8BFA-48E5D9CB7E33"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:1.2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5D0624E0-993B-43AE-9D61-4DCA3E39ADAB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:rv130w_wireless-n_multifunction_vpn_router:-:*:*:*:*:*:*:*","matchCriteriaId":"BD30B0C7-E04A-4B05-82D1-9DA487F8639D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv130w_wireless-n_multifunction_vpn_router_firmware:1.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"0081BB31-AA51-4E6F-BDC0-62F4E4388F5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv130w_wireless-n_multifunction_vpn_router_firmware:1.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A9638155-20F1-469E-B13C-2334713B8CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv130w_wireless-n_multifunction_vpn_router_firmware:1.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1BAB434B-FADE-40F4-9478-1DC063FE0F2C"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv2","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036115","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1424","sourceIdentifier":"psirt@cisco.com","published":"2016-06-19T01:59:06.153","lastModified":"2026-06-17T00:41:57.207","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 15.2(1)T1.11 and 15.2(2)TST allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug ID CSCun63132."},{"lang":"es","value":"Cisco IOS 15.2(1)T1.11 y 15.2(2)TST permite a atacantes remotos provocar una denegación de servicio (caída del dispositivo) a través de un paquete LLDP manipulado, también conocido como Bug ID CSCun63132."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.2\\(1\\)t1.11:*:*:*:*:*:*:*","matchCriteriaId":"7E6C336A-7834-4F73-BDF9-3E2FC608717A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.2\\(2\\)tst:*:*:*:*:*:*:*","matchCriteriaId":"3948AC43-ED25-45A4-ADFB-72D7C4E3ED97"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-ios","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-ios","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4816","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T01:59:11.043","lastModified":"2026-06-17T00:48:16.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors."},{"lang":"es","value":"Dispositivos BUFFALO WZR-600DHP3 con firmware 2.16 y versiones anteriores y dispositivos WZR-S600DHP permiten a atacantes remotos descubrir credenciales y otra información sensible a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-600dhp3:-:*:*:*:*:*:*:*","matchCriteriaId":"303225E6-81C0-4A2F-81A3-51E508DDA0EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-600dhp3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.16","matchCriteriaId":"D7A7ED42-5F7F-4597-BE1F-4CA63EDC5069"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:hw-450hp-zwe:-:*:*:*:*:*:*:*","matchCriteriaId":"54BE2F24-8A3F-426F-B935-62F82F83E457"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:hw-450hp-zwe_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.91","matchCriteriaId":"4F4A6233-DA68-44E6-8EA4-947ADEEF9ED6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-hp-g450h:-:*:*:*:*:*:*:*","matchCriteriaId":"72BEF724-6B38-4862-A74D-9FB7F5EB4233"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-hp-g450h_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.87","matchCriteriaId":"5FAB2A24-0FC9-466D-839B-ABEC730F2CBB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-450hp:-:*:*:*:*:*:*:*","matchCriteriaId":"6014747F-30BA-4C65-8340-CA16C886A45B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-450hp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.97","matchCriteriaId":"5848CECD-F71A-43D4-AA7B-FA50215EB51F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-900dhp2:-:*:*:*:*:*:*:*","matchCriteriaId":"247B99DF-EE96-40C3-89FC-706DE878ABFE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-900dhp2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.16","matchCriteriaId":"69F8C9DD-2F18-4A53-83B6-28203376C5F1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wcr-300:-:*:*:*:*:*:*:*","matchCriteriaId":"00FE286D-145C-4B81-AFEF-ADC6194458D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wcr-300_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.86","matchCriteriaId":"53F7743A-FB27-47C3-9E75-B65CA719930B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-450hp-cwt:-:*:*:*:*:*:*:*","matchCriteriaId":"348D05E5-E619-4AE9-8A62-DF214899DB17"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-450hp-cwt_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.92","matchCriteriaId":"D1B53FDC-F4D5-433A-A189-F38714C1C5F2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-hp-g301nh:-:*:*:*:*:*:*:*","matchCriteriaId":"A753B947-1562-4147-965B-6437C4328F44"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-hp-g301nh_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.81","matchCriteriaId":"3FFB8CC4-80EA-4542-8608-B7996A919874"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wxr-1750dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"22CD8F33-A455-4E4B-9351-CBBDA511E9D7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wxr-1750dhp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.42","matchCriteriaId":"B043BD21-4605-4A9D-B60E-969CD440D4E0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-600dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"06AF9040-7F63-4E80-82DD-7448320BC940"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-600dhp_firmware:1.97:*:*:*:*:*:*:*","matchCriteriaId":"F7672C0B-ACB3-4AED-9B66-DA1F16B423F8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-1750dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"55459AEE-CE6D-4A4B-9B59-572EDFD51984"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-1750dhp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.28","matchCriteriaId":"C43EFB78-AE26-4F3B-AEA8-846CAE1CC691"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-s1750dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"4A2F15AE-7A2C-46C0-8961-10180279FEB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-s1750dhp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.28","matchCriteriaId":"2B9E6F20-5560-4ECC-B728-87BB4EEDEE7B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:whr-300:-:*:*:*:*:*:*:*","matchCriteriaId":"342ABB1C-DEB2-4B34-B5FB-A3D072B4760F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:whr-300_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.96","matchCriteriaId":"38CE7BBB-1D8C-479B-802A-A1C07B3F513D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-s600dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"75434B7A-2633-4981-B99D-33448883BC61"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-s600dhp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.16","matchCriteriaId":"59915998-08D7-4FFC-B240-09F8EA216B1E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-hp-g302h:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE42D0C-2181-47E3-87AA-A50C0C3ED002"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-hp-g302h_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.83","matchCriteriaId":"3E26D83F-3905-4499-AD73-783F2F3E4FE6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wapm-ag300n:-:*:*:*:*:*:*:*","matchCriteriaId":"233EE67A-5432-46BA-9FAA-C21746B43233"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wapm-ag300n_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.62","matchCriteriaId":"3560F6BE-2C04-4DA4-85A3-89513E8847CE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-hp-ag300h:-:*:*:*:*:*:*:*","matchCriteriaId":"D1DBC06D-0003-4196-A360-59657454DAF6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-hp-ag300h_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.73","matchCriteriaId":"72525A05-EF18-488F-BD12-7C99E383E2C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-d1100h:-:*:*:*:*:*:*:*","matchCriteriaId":"79BB1A7E-19AD-4897-B20F-03BDA7DCFA8C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-d1100h_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.96","matchCriteriaId":"28AD57C0-031D-4BC5-9453-15CDEEC60EEB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wpl-05g300:-:*:*:*:*:*:*:*","matchCriteriaId":"C6C24CCE-813A-4F11-B4A5-2AF075018F2A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wpl-05g300_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.86","matchCriteriaId":"F979E851-583F-4235-AE0D-8218968A4723"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-s900dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"C7C186F6-8DE5-4C82-8403-D3BB76069FCE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-s900dhp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.16","matchCriteriaId":"05D10EE2-C4A9-42D0-9861-4E91FBF22327"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:dwr-hp-g300nh:-:*:*:*:*:*:*:*","matchCriteriaId":"FE96F509-FF8C-409B-BB40-E05A9F722554"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:dwr-hp-g300nh_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.81","matchCriteriaId":"8D496DE0-10A3-4DCE-932E-E4EDFA3973AC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:whr-300hp:-:*:*:*:*:*:*:*","matchCriteriaId":"697F6576-D774-4DC8-A2C9-A57F4E037F24"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:whr-300hp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.96","matchCriteriaId":"A74B3BC3-19CF-40A2-97D7-6800F692FDEB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-1750dhp2:-:*:*:*:*:*:*:*","matchCriteriaId":"BBFF4B91-1173-4346-A1ED-60B37F7B44DA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-1750dhp2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.28","matchCriteriaId":"E50E0E39-CCAF-4E48-916B-7DF3317D4FE4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-1166dhp2:-:*:*:*:*:*:*:*","matchCriteriaId":"740500B4-8CEC-4044-8FE7-194FD0894534"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-1166dhp2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.13","matchCriteriaId":"03C0AF66-B7EF-4245-99F2-5FE62470EFC2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-300hp:-:*:*:*:*:*:*:*","matchCriteriaId":"80FFBDA4-E1A4-46CC-8EE0-6C92CB5C0A03"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-300hp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.96","matchCriteriaId":"84FD1A44-9971-4D65-849D-C1A8B034E42D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wapm-apg300n:-:*:*:*:*:*:*:*","matchCriteriaId":"C4C61889-C999-43F4-8D1A-7383D1C21A92"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wapm-apg300n_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.62","matchCriteriaId":"2BE524BA-6D70-46C4-9002-32BA31951711"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-900dhp2:-:*:*:*:*:*:*:*","matchCriteriaId":"247B99DF-EE96-40C3-89FC-706DE878ABFE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-900dhp2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.13","matchCriteriaId":"C7D26FF7-7C08-4238-8F14-CD138BDA8834"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wxr-1900dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"9F2F4145-1A55-41CE-9358-0192B69CA8E8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wxr-1900dhp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.34","matchCriteriaId":"068996A2-F2FE-4AD8-9E9E-049902FA4F1D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-900dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"B8BD47F3-29D0-4B34-A346-C0042FBD75ED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-900dhp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.11","matchCriteriaId":"F0D917DA-1562-471B-97AF-81C4E58E4CD8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-1166dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"98CE6294-43B2-4043-98A5-BCCAF17214C3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-1166dhp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.13","matchCriteriaId":"EF260608-2B7C-4005-89F8-71310536AE79"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:whr-hp-g300n:-:*:*:*:*:*:*:*","matchCriteriaId":"D7E26183-35D3-4A44-8D9A-AB358957C75F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:whr-hp-g300n_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.96","matchCriteriaId":"A1231F93-4129-4092-8A67-C8546A98EA95"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:bhr-4grv:-:*:*:*:*:*:*:*","matchCriteriaId":"48780EC9-0E32-4DB5-91C2-3DD9048BCDA1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:bhr-4grv_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.96","matchCriteriaId":"D1266023-4C53-44D7-85EE-A9ED9A9B57C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-450hp-ub:-:*:*:*:*:*:*:*","matchCriteriaId":"C5923DA5-CF09-408D-BE0D-A878EFB8BB6B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-450hp-ub_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.96","matchCriteriaId":"B522C6AF-B042-4A51-93DE-01006DC89F9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:wzr-hp-g300nh:-:*:*:*:*:*:*:*","matchCriteriaId":"CA3BFED6-500A-49C0-BBE1-E9AB5525C143"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:wzr-hp-g300nh_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.81","matchCriteriaId":"85EAF404-0DEE-455D-B5F7-F24B802933A8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:buffalo:fs-600dhp:-:*:*:*:*:*:*:*","matchCriteriaId":"AB3511D6-1738-43DD-ACBB-76D5C998906E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:buffalo:fs-600dhp_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.34","matchCriteriaId":"62943135-66C6-4B76-9E0E-6D13C8AE0D41"}]}]}],"references":[{"url":"http://buffalo.jp/support_s/s20160527a.html","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN75813272/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000087","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://buffalo.jp/support_s/s20160527a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN75813272/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4821","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T01:59:14.810","lastModified":"2026-06-17T00:48:16.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server crash) via unspecified vectors."},{"lang":"es","value":"Dispositivos I-O DATA DEVICE ETX-R permiten a atacantes remotos provocar una denegación de servicio (caída del servidor web) a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:iodata:etx-r_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5741EA95-8623-42C4-80B3-26947A2B6D93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:iodata:etx-r:-:*:*:*:*:*:*:*","matchCriteriaId":"04B0CC23-187B-404C-A43E-3C80B7055FD5"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN96052093/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000101","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.iodata.jp/support/information/2016/etx-r/","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN96052093/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iodata.jp/support/information/2016/etx-r/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7775","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T15:59:00.117","lastModified":"2026-06-17T00:33:06.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197."},{"lang":"es","value":"Vulnerabilidad de XSS en Cybozu Garoon 4.0.3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-1197."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN49285177/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000084","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8893","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN49285177/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1197","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T15:59:02.210","lastModified":"2026-06-17T00:41:27.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775."},{"lang":"es","value":"Vulnerabilidad de XSS en Cybozu Garoon 4.x en versiones anteriores a 4.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML manipulados a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7775."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"71CC4428-0CB4-497F-8274-52E6CC273D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7A9EABAA-964A-4242-939A-378B03A1F150"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN37121456/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000083","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/9303","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN37121456/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/9303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1225","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T15:59:03.303","lastModified":"2026-06-17T00:41:30.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Trend Micro Internet Security 8 y 10 permite a atacantes remotos leer archivos arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:internet_security:8.0:*:*:*:*:*:*:*","matchCriteriaId":"658BC370-0A4B-47B0-8861-B966A50D374B"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:internet_security:10.0:*:*:*:*:*:*:*","matchCriteriaId":"AF7A04A6-80EE-4F82-AAFF-B2CFD1C07A5F"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN48789425/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000073","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036137","source":"vultures@jpcert.or.jp"},{"url":"https://esupport.trendmicro.com/support/vb/solution/ja-jp/1113880.aspx","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48789425/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://esupport.trendmicro.com/support/vb/solution/ja-jp/1113880.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1226","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T15:59:04.180","lastModified":"2026-06-17T00:41:30.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Trend Micro Internet Security 8 y 10 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:internet_security:8.0:*:*:*:*:*:*:*","matchCriteriaId":"658BC370-0A4B-47B0-8861-B966A50D374B"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:internet_security:10.0:*:*:*:*:*:*:*","matchCriteriaId":"AF7A04A6-80EE-4F82-AAFF-B2CFD1C07A5F"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN48789425/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000088","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036137","source":"vultures@jpcert.or.jp"},{"url":"https://esupport.trendmicro.com/support/vb/solution/ja-jp/1113880.aspx","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN48789425/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://esupport.trendmicro.com/support/vb/solution/ja-jp/1113880.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-7462","sourceIdentifier":"psirt@us.ibm.com","published":"2016-06-19T20:59:00.113","lastModified":"2026-06-17T00:32:35.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to execute the mqcertck program."},{"lang":"es","value":"IBM WebSphere MQ 8.0.0.4 en plataformas IBM i permite a usuarios locales descubrir contraseñas de certificado de almacén de claves en texto plano dentro de la salida de rastreo MQ aprovechando privilegios administrativos para el ejecutar el programa mqcertck."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DCBDF404-693B-4500-80FA-90AE022BD5C4"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21984557","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036053","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21984557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-7776","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T20:59:01.190","lastModified":"2026-06-17T00:33:07.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, a different vulnerability than CVE-2016-1196."},{"lang":"es","value":"Cybozu Garoon 3.x y 4.x en versiones anteriores a 4.2.0 no restringe adecuadamente la carga de elementos IMG, lo que facilita a atacantes remotos rastrear usuarios a través de un mensaje de e-mail HTML manipulado, una vulnerabilidad diferente a CVE-2016-1196."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"18C7B082-06A5-4AC8-91D4-C6E2835AB286"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"13F08BE5-2639-4581-A49C-854820B25763"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"56525E34-BC26-4833-938F-F157B77D82CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5195BBDF-2153-4600-8308-110BE2A73816"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"921FEEAD-1C44-4E65-8912-102A31B3D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A70AA82-947D-49AC-9019-A1F06DF8ABBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F462AD2C-EF50-489D-99E0-EAA9D78D7D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A69FAED9-AC11-4D20-885B-FFA04995F1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"4F181B9E-3613-42D4-92FA-3AA54BB10785"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D2014154-4685-4A48-AA69-02D0C1C78ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3B681C16-60F7-46B5-BD26-25F7DC9F5F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"19694FDB-184D-4C09-BD72-BB7B96F6391D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"CD33E00A-5082-42F4-81F5-4647BD602D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"3B130F88-71DE-4FBF-B5DF-DD8173F03151"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9B321F-6CDC-426B-AE62-090E067F3533"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"71CC4428-0CB4-497F-8274-52E6CC273D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN53542912/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000085","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8757","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8897","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8951","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8982","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN53542912/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1191","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T20:59:04.893","lastModified":"2026-06-17T00:41:26.883","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la función Files en Cybozu Garoon 3.x y 4.x en versiones anteriores a 4.2.1 permite a atacantes remotos modificar ajustes a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"18C7B082-06A5-4AC8-91D4-C6E2835AB286"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"13F08BE5-2639-4581-A49C-854820B25763"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"56525E34-BC26-4833-938F-F157B77D82CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5195BBDF-2153-4600-8308-110BE2A73816"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"921FEEAD-1C44-4E65-8912-102A31B3D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A70AA82-947D-49AC-9019-A1F06DF8ABBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F462AD2C-EF50-489D-99E0-EAA9D78D7D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A69FAED9-AC11-4D20-885B-FFA04995F1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"4F181B9E-3613-42D4-92FA-3AA54BB10785"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D2014154-4685-4A48-AA69-02D0C1C78ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3B681C16-60F7-46B5-BD26-25F7DC9F5F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"19694FDB-184D-4C09-BD72-BB7B96F6391D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"CD33E00A-5082-42F4-81F5-4647BD602D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"3B130F88-71DE-4FBF-B5DF-DD8173F03151"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9B321F-6CDC-426B-AE62-090E067F3533"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"71CC4428-0CB4-497F-8274-52E6CC273D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7A9EABAA-964A-4242-939A-378B03A1F150"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN14749391/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000078","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN14749391/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1192","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T20:59:05.863","lastModified":"2026-06-17T00:41:27.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la implementación de inicio de sesión en Cybozu Garoon 3.7 hasta la versión 4.2 permite a usuarios remotos autenticados leer un archivo de registro a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3B681C16-60F7-46B5-BD26-25F7DC9F5F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"19694FDB-184D-4C09-BD72-BB7B96F6391D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"CD33E00A-5082-42F4-81F5-4647BD602D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"3B130F88-71DE-4FBF-B5DF-DD8173F03151"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9B321F-6CDC-426B-AE62-090E067F3533"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"71CC4428-0CB4-497F-8274-52E6CC273D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7A9EABAA-964A-4242-939A-378B03A1F150"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN14749391/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000095","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN14749391/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1196","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T20:59:06.940","lastModified":"2026-06-17T00:41:27.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776."},{"lang":"es","value":"Cybozu Garoon 3.x y 4.x en versiones anteriores a 4.2.1 permite a usuarios remotos autenticados eludir restricciones destinadas al acceso y obtener información sensible de Address Book a través de una llamada API, una vulnerabilidad diferente a CVE-2015-7776."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D3BB615D-E485-4ADE-B77D-FA9FB676DA4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"18C7B082-06A5-4AC8-91D4-C6E2835AB286"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAF17D9A-4A2D-4F15-B377-AC6F6B2896AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"13F08BE5-2639-4581-A49C-854820B25763"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"56525E34-BC26-4833-938F-F157B77D82CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5195BBDF-2153-4600-8308-110BE2A73816"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"921FEEAD-1C44-4E65-8912-102A31B3D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A70AA82-947D-49AC-9019-A1F06DF8ABBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F462AD2C-EF50-489D-99E0-EAA9D78D7D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A69FAED9-AC11-4D20-885B-FFA04995F1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"4F181B9E-3613-42D4-92FA-3AA54BB10785"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D2014154-4685-4A48-AA69-02D0C1C78ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3B681C16-60F7-46B5-BD26-25F7DC9F5F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"19694FDB-184D-4C09-BD72-BB7B96F6391D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"CD33E00A-5082-42F4-81F5-4647BD602D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"3B130F88-71DE-4FBF-B5DF-DD8173F03151"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9B321F-6CDC-426B-AE62-090E067F3533"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"71CC4428-0CB4-497F-8274-52E6CC273D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7A9EABAA-964A-4242-939A-378B03A1F150"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN33879831/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000082","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8970","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN33879831/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.cybozu.com/ja-jp/article/8970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1864","sourceIdentifier":"product-security@apple.com","published":"2016-06-19T20:59:11.380","lastModified":"2026-06-17T00:42:46.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL."},{"lang":"es","value":"El auditor XSS en WebKit, tal como se utiliza en Apple iOS en versiones anteriores a 9.3 y Safari en versiones anteriores a 9.1, no maneja correctamente redirecciones en modo bloque, lo que permite a atacantes remotos obtener información sensible a través de una URL manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"F39FC2FB-375B-4129-A37F-BC749F8A9648"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.1","matchCriteriaId":"080450EA-85C1-454D-98F9-5286D69CF237"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91358","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036344","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206166","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4518","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-06-19T20:59:13.393","lastModified":"2026-06-17T00:47:42.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message."},{"lang":"es","value":"OSIsoft PI AF Server en versiones anteriores a 2016 2.8.0 permite a usuarios remotos autenticados provocar una denegación de servicio (corte del servicio) a través de un mensaje."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osisoft:pi_af_server_2016:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.0","matchCriteriaId":"29073F0B-F4E2-486D-8B0D-1674415AA76D"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-166-02","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00301","source":"ics-cert@hq.dhs.gov","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-166-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4530","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-06-19T20:59:14.253","lastModified":"2026-06-17T00:47:43.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and data loss) via a message."},{"lang":"es","value":"OSIsoft PI SQL Data Access Server (también concoido como OLE DB) 2016 1.5 permite a usuarios remotos autenticados provocar una denegación de servicio (corte del servicio y pérdida de datos) a través de un mensaje."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:osisoft:pi_sql_data_access_server_2016:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F85618F1-FCAB-4DD9-91A7-CE94BC3F2F5A"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-166-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00300","source":"ics-cert@hq.dhs.gov","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-166-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4811","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-19T20:59:15.097","lastModified":"2026-06-17T00:48:15.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors."},{"lang":"es","value":"La aplicación NTT Broadband Platform Japan Connected-free Wi-Fi 1.15.1 y versiones anteriores para Android y .13.0 y versiones anteriores para iOS permite a atacantes man-in-the-middle obtener acceso API a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntt-bp:japan_connected-free_wi-fi:1.13.0:*:*:*:*:iphone_os:*:*","matchCriteriaId":"38C3343B-D48D-429D-8554-EBC0B3D7F40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntt-bp:japan_connected-free_wi-fi:1.15.1:*:*:*:*:android:*:*","matchCriteriaId":"59BBBE88-BC51-43C7-970A-D180EC25BE2D"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN46888319/278948/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN46888319/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000076","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://itunes.apple.com/app/japan-connected-free-wi-fi/id810838196","source":"vultures@jpcert.or.jp"},{"url":"https://play.google.com/store/apps/details?id=com.nttbp.jfw","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN46888319/278948/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN46888319/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://itunes.apple.com/app/japan-connected-free-wi-fi/id810838196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://play.google.com/store/apps/details?id=com.nttbp.jfw","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8288","sourceIdentifier":"cret@cert.org","published":"2016-06-20T01:59:00.133","lastModified":"2026-06-17T00:34:16.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation."},{"lang":"es","value":"Dispositivos NETGEAR D3600 con firmware 1.0.0.49 y dispositivos D6000 con firmware 1.0.0.49 y versiones anteriores utilizan la misma clave privada embebida en instalaciones de clientes diferentes, lo que permite a a atacantes remotos vencer mecanismos de protección criptográficos aprovechando el conocimiento de esta clave de otra instalación."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:d3600_firmware:1.0.0.49:*:*:*:*:*:*:*","matchCriteriaId":"E1BCBD82-9387-43D6-9759-4F878B22039E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:d3600:-:*:*:*:*:*:*:*","matchCriteriaId":"31DE9D4E-3CDC-4552-A63F-DD5D95E23F63"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:d6000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.49","matchCriteriaId":"EADFF4E4-8404-4EEA-8624-0C676B277FB1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:d6000:-:*:*:*:*:*:*:*","matchCriteriaId":"6F6EA344-FF99-4F27-9860-3C5BE07345A7"}]}]}],"references":[{"url":"http://kb.netgear.com/app/answers/detail/a_id/30560","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/778696","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://kb.netgear.com/app/answers/detail/a_id/30560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/778696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/321.html\">CWE-321: Use of Hard-coded Cryptographic Key</a>"}},{"cve":{"id":"CVE-2016-2178","sourceIdentifier":"secalert@redhat.com","published":"2016-06-20T01:59:03.023","lastModified":"2026-06-17T00:43:35.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack."},{"lang":"es","value":"La función dsa_sign_setup en crypto/dsa/dsa_ossl.c en OpenSSL hasta la versión 1.0.2h no asegura correctamente la utilización de operaciones de tiempo constante, lo que facilita a usuarios locales descubrir una clave privada DSA a través de un ataque de sincronización de canal lateral."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5:*:*:*:*:*:*:*","matchCriteriaId":"CE882C74-313C-47A9-9FA0-05F2CBF09D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.47","matchCriteriaId":"080F38F5-0A51-43BC-BC66-98545B31A0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.12.0","versionEndExcluding":"0.12.16","matchCriteriaId":"F90AAE35-9B46-4FEA-AF3A-5F28761EAC4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.6.0","matchCriteriaId":"303F780C-C971-4216-86D6-5026AAD56279"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"6.7.0","matchCriteriaId":"4A24A5C5-6ECC-46A8-B3E1-94D748FAB987"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]}],"references":[{"url":"http://eprint.iacr.org/2016/594.pdf","source":"secalert@redhat.com","tags":["Technical Description","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/10","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/11","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/12","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/4","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/5","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/6","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/7","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/8","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/8","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91081","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036054","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0193","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0194","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343400","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=399944622df7bd81af62e67ea967c470534090e2","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/csp/article/K53084033","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://eprint.iacr.org/2016/594.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=399944622df7bd81af62e67ea967c470534090e2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/csp/article/K53084033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0914","sourceIdentifier":"security_alert@emc.com","published":"2016-06-23T00:59:01.223","lastModified":"2026-06-17T00:38:27.790","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface."},{"lang":"es","value":"EMC Documentum WebTop 6.8 en versiones anteriores a Patch 13 y 6.8.1 en versiones anteriores a Patch 02, Documentum Administrator 7.x en versiones anteriores a 7.2 Patch 13, Documentum Capital Projects 1.9 en versiones anteriores a Patch 23 y 1.10 en versiones anteriores a Patch 10 y Documentum TaskSpace 6.7 SP3 permite a usuarios remotos autenticados eludir las restricciones de acceso previstas y ejecutar comandos IAPI/IDQL arbitrarios a través de la interfaz IAPI/IDQL."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_administrator:7.0:*:*:*:*:*:*:*","matchCriteriaId":"34D56991-BEA6-4160-9E5C-4B7034DB1FD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_administrator:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E97C5C13-EBDB-4906-8875-1D8D70C68206"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_administrator:7.2:*:*:*:*:*:*:*","matchCriteriaId":"A5E065EF-D76B-40D3-BEC1-D846654C6590"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_capital_projects:1.9:*:*:*:*:*:*:*","matchCriteriaId":"3B0AED45-805C-4AE2-A12C-11F8710A7F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_capital_projects:1.10:*:*:*:*:*:*:*","matchCriteriaId":"2105B120-08F1-4493-8EDD-6DD8492A6D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_taskspace:6.7:sp3:*:*:*:*:*:*","matchCriteriaId":"15EF2D73-E10A-469A-A8F4-9F4A2AE07C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_webtop:6.8:*:*:*:*:*:*:*","matchCriteriaId":"261FA013-FE18-4B09-A52B-909E2BB06891"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_webtop:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3A7E70A-8E7F-44F7-B6D2-4AE4B61D6D1E"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Jun/92","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036153","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2016/Jun/92","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1428","sourceIdentifier":"psirt@cisco.com","published":"2016-06-23T00:59:02.237","lastModified":"2026-06-17T00:41:57.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service (device restart) via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174."},{"lang":"es","value":"Vulnerabilidad de liberación doble en Cisco IOS XE 3.15S, 3.16S y 3.17S permite a usuarios remotos autenticados causar una denegación de servicio (reinicio de dispositivo) a través de una secuencia de peticiones de lectura SNMP manipuladas, también conocido como Bug ID CSCux13174."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*","matchCriteriaId":"FAD93CD1-4188-40B7-A20E-9C3FE8344A27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*","matchCriteriaId":"A0E5BB91-B5E7-4961-87DC-26596E5EDED7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*","matchCriteriaId":"12793F39-13C4-4DBC-9B78-FE361BDDF89D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-iosxe","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036140","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-iosxe","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036140","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/415.html\">CWE-415: Double Free</a>"}},{"cve":{"id":"CVE-2016-1434","sourceIdentifier":"psirt@cisco.com","published":"2016-06-23T00:59:03.190","lastModified":"2026-06-17T00:41:58.263","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The license-certificate upload functionality on Cisco 8800 phones with software 11.0(1) allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010."},{"lang":"es","value":"La funcionalidad license-certificate upload en teléfonos Cisco 8800 con software 11.0(1) permite a usuarios remotos autenticados borrar archivos arbitrarios a través de un archivo inválido, también conocido como Bug ID CSCuz03010."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8800:-:*:*:*:*:*:*:*","matchCriteriaId":"C1BBEA07-3154-4270-B865-D4AD26EB3B42"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8800_series_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"49CF653C-B5F5-427B-9FE9-D34D7B92AA13"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-ip-phone","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036139","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-ip-phone","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1437","sourceIdentifier":"psirt@cisco.com","published":"2016-06-23T00:59:06.143","lastModified":"2026-06-17T00:41:58.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la base de datos SQL en Cisco Prime Collaboration Deployment en versiones anteriores a 11.5.1 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de a una URL manipulada, también conocido como Bug ID CSCuy92549."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration_deployment:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"92CD3C15-675D-44A3-B4D5-93C4CD5F1D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration_deployment:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"31D35C00-EB8C-4BCF-92B4-702A34FD025C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration_deployment:11.0_base:*:*:*:*:*:*:*","matchCriteriaId":"9537AEFA-98AA-4C46-BEAE-C29E891B2161"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration_deployment:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"47B97A9B-E322-4255-B395-942D16A214A0"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160621-pcd","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036151","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160621-pcd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1439","sourceIdentifier":"psirt@cisco.com","published":"2016-06-23T00:59:07.987","lastModified":"2026-06-17T00:41:58.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de mantenimiento de Cisco Unified Contact Center Enterprise hasta la versión 10.5(2) permite a atacantes remotos inyectar código web arbitrario o HTML a través de de una URL manipulada, también conocido como Bug ID CSCux59650."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:4.6\\(2\\):sr1:*:*:*:*:*:*","matchCriteriaId":"E7479E94-6941-47BF-B58C-48DA0ABA9C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:4.6\\(2\\):sr2:*:*:*:*:*:*","matchCriteriaId":"0069B7BF-7E8C-403E-A820-3F93A500DD51"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:4.6\\(2\\):sr3:*:*:*:*:*:*","matchCriteriaId":"99D22E90-551F-467C-B7DB-10807269AF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:4.6\\(2\\):sr4:*:*:*:*:*:*","matchCriteriaId":"B206376C-B7AD-4794-9EF9-DE20FF6BF7E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:4.6\\(2\\):sr5:*:*:*:*:*:*","matchCriteriaId":"AAAFDAF7-6951-41C1-8B09-7A949CEE2383"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:4.6\\(2\\):sr6:*:*:*:*:*:*","matchCriteriaId":"A6A9CC97-8F31-44AB-829F-D3BE49BDBF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"14528A7C-B832-475F-A4B7-A9868743DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"1E8D2BD9-9D9D-4ABD-AAEA-3D8E51354AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr10:*:*:*:*:*:*","matchCriteriaId":"313DBC88-A1ED-476B-872F-C26A95E0C25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr11:*:*:*:*:*:*","matchCriteriaId":"B17BB1B7-9A55-4B13-98C2-923B6C980C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr12:*:*:*:*:*:*","matchCriteriaId":"FE730E25-75B9-42E7-A0DA-95A5E6AFA04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr13:*:*:*:*:*:*","matchCriteriaId":"D5C108BF-7B1F-4A88-BCBA-26E4B09EA251"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr2:*:*:*:*:*:*","matchCriteriaId":"CDA5EAC9-AD6D-4F2C-BCB2-E8FA7AFC2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr3:*:*:*:*:*:*","matchCriteriaId":"6DCC19EC-E9AF-4BE0-B2F9-BBAC573B9161"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr4:*:*:*:*:*:*","matchCriteriaId":"6F50C2C2-7745-4364-A7EA-1AAEEE134304"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr5:*:*:*:*:*:*","matchCriteriaId":"3B6FA206-35E4-4A90-B78A-94478EB3A97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr7:*:*:*:*:*:*","matchCriteriaId":"DA7A42AF-500C-491D-98C7-D61F9020784F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr8:*:*:*:*:*:*","matchCriteriaId":"2C65714F-1FD1-45D1-980E-4E45CBE427A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:5.0\\(0\\):sr9:*:*:*:*:*:*","matchCriteriaId":"063534B0-ECB3-4ACF-9E0A-EE9ABF98C70C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr1:*:*:*:*:*:*","matchCriteriaId":"D3D58D63-B3E2-423E-B708-F909E3A7245B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr10:*:*:*:*:*:*","matchCriteriaId":"3BDE7ED5-2479-4571-8921-544794738C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr11:*:*:*:*:*:*","matchCriteriaId":"D20AEFBB-D4B6-40D4-9F5D-A5823F3ED53A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr12:*:*:*:*:*:*","matchCriteriaId":"E3BC0486-954B-4BCB-BC7A-F968F4B757C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr2:*:*:*:*:*:*","matchCriteriaId":"6352955F-BD2C-4999-91D2-B34CF3F44436"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr3:*:*:*:*:*:*","matchCriteriaId":"48C5ED18-DE61-4F24-AF6A-EA6C8B09A822"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr4:*:*:*:*:*:*","matchCriteriaId":"7F6E28F2-4FA6-4CC3-9C8D-298DAF894547"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr5:*:*:*:*:*:*","matchCriteriaId":"2206BB99-F76C-4D89-8B1B-A58E0B60DC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr6:*:*:*:*:*:*","matchCriteriaId":"0176D18E-7CD8-46A8-A5C5-C090855985AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr7:*:*:*:*:*:*","matchCriteriaId":"9DF4EC9A-9822-4484-BC9E-8D593BE8CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr8:*:*:*:*:*:*","matchCriteriaId":"3C5BDE6E-FF4A-480E-9A0D-5F020B81F765"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:6.0\\(0\\):sr9:*:*:*:*:*:*","matchCriteriaId":"A80FA546-3758-4094-BF13-2D7457A069BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.0\\(0\\):sr1:*:*:*:*:*:*","matchCriteriaId":"6825BA64-3C8E-4FD7-A926-21BC6ABAD208"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.0\\(0\\):sr2:*:*:*:*:*:*","matchCriteriaId":"9A091A29-F614-4D90-A4EC-549D49AF6671"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.0\\(0\\):sr3:*:*:*:*:*:*","matchCriteriaId":"51B28919-D8B9-4DC5-BBA5-EDF5F521B44D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.0\\(0\\):sr4:*:*:*:*:*:*","matchCriteriaId":"3FD133BC-F5C9-405D-BC0E-B63735EE8DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"CBE2F387-58FF-4D11-840E-32F78CA8D6A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"746C8DAB-A31B-4C34-9DD6-A7D7965C650B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"1C2C272E-3D96-4532-BC2C-CAF72C5257CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"B5AE16C9-6712-4964-B32E-3D5BE09B19ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDCD1C8-BE0C-4158-83CF-91B6E9F96C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F760C563-7F86-49E3-93BC-DA773E60FD5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"BED52C67-172E-4DF7-89D3-2A21B5F0F229"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"40A108B8-C9C9-468E-BA71-5C7BA3068B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.2\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"B981CBC7-9EAD-4165-8598-B475C97B76B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.2\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"208B4C22-B606-4186-81E1-8049B3324C13"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.2\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"59869B06-8BCC-4863-983A-855FD54746C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.2\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"AB45170E-0952-4453-B32D-CA8A57F0A5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8C53BD51-2F26-4672-B0E8-269FBA8DE958"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.5\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"26C8838B-DDF7-46A9-816D-13743C28D6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.5\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"1BC2A7C9-8968-4ACB-A079-0F553A24BCE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.5\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"88C5E4AE-C173-4A62-8FA7-91748D3BA038"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.5\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"01D23834-0F6C-47B9-9E17-BDBE184A3F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.5\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"2798ED94-013F-4ADC-B359-8EB76472B508"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.5\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"AF43F0A0-87E2-411C-9E69-8F5D50CBBF59"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.5\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"E3937C3A-5820-4D03-8F28-3139EB5A1433"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:7.5\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"49D8E519-946B-4522-A859-240292A5B5FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:8.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"28C9CC12-DF4C-43BA-827A-09AAB389915B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:8.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"2DD1A7B8-77A0-40CE-BB65-338DBB420BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:8.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B84C3C62-6F72-4781-A6C2-2C14FCAEA9E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:8.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"D7FB82A9-29CF-4215-A3D7-D9417C905102"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:8.5\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"CBCCB6E8-F04D-43B5-9450-B728C6CF3632"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:8.5\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"ACAD7EC3-74FE-405D-BDE9-3DB1DBAED814"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:9.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"BDD95F91-9154-453E-9FEB-D42569272C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:9.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"CBC62B80-7FD4-40E7-B564-5BAB86C9A3E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:9.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"3959BC80-3414-44ED-8BF9-D875A3A2D080"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:10.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2C069E2D-B050-4B40-A81F-80555FB7735D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:10.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"D4712491-E1C1-48E4-A7AC-75464BB2F985"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:10.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"31797740-DAA5-44F6-8E23-EB2164D31AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_enterprise:10.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"DA09853A-9F2A-4662-800E-F6EA6D2CDC27"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160622-ucce","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036155","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160622-ucce","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5021","sourceIdentifier":"cve@mitre.org","published":"2016-06-24T17:59:01.503","lastModified":"2026-06-17T00:48:37.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF3; BIG-IP DNS 12.x before 12.0.0 HF3; BIG-IP GTM 11.5.x before 11.5.4 and 11.6.x before 11.6.1; BIG-IQ Cloud and Security 4.0.0 through 4.5.0; BIG-IQ Device 4.2.0 through 4.5.0; BIG-IQ ADC 4.5.0; BIG-IQ Centralized Management 4.6.0; and BIG-IQ Cloud and Orchestration 1.0.0 allows remote authenticated administrators to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El servicio iControl REST en F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller y PEM 11.5.x en versiones anteriores a 11.5.4, 11.6.x en versiones anteriores a 11.6.1 y 12.x en versiones anteriores a 12.0.0 HF3; BIG-IP DNS 12.x en versiones anteriores a 12.0.0 HF3; BIG-IP GTM 11.5.x en versiones anteriores a 11.5.4 y 11.6.x en versiones anteriores a 11.6.1; BIG-IQ Cloud and Security 4.0.0 hasta la versión 4.5.0; BIG-IQ Device 4.2.0 hasta la versión 4.5.0; BIG-IQ ADC 4.5.0; BIG-IQ Centralized Management 4.6.0 y BIG-IQ Cloud and Orchestration 1.0.0 permite a administradores remotos autenticados obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"222B4DE7-1D3D-40DF-A9EB-EFABDA8FAEA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E21D6206-4716-47FE-A733-F18343656E94"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0E3D8A24-0B8D-432B-8F06-D0E1642E7C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A4489382-0668-4CFB-BA89-D54762937CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9850D0AA-B173-47B2-9B69-75E6D1FAF490"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B40837-EC2B-41FB-ACC3-806054EAF28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA2FA6B-3930-432F-8FB5-E73604CEFE42"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1C0312FC-8178-46DE-B4EE-00F2895073BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C9E574F6-34B6-45A6-911D-E5347DA22F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCF94129-8779-4D68-8DD4-B828CA633746"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E5D27D4A-BD5C-4FA9-AA72-F7956298DE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"12F86EB5-D581-4103-A802-44D968BA8D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"36F383ED-8CB5-400D-BFDB-BD5B8CD8C7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6203A11-82C3-4ABA-94E9-085BFF1A0E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0594DBC5-8470-416C-A5EA-E04F5AB2C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B50BF19F-71B4-47C0-A96E-6EB90FCC6AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BD3A3BA6-6F60-45CA-8F52-687B671B077A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"202B6870-718C-4F8D-9BAB-7ED6385BF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D7863D-B064-4D7A-A66B-C3D3523425FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0303BEA3-02EB-4F7C-96C5-29E231832CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27CAD4CD-9228-4DE5-A333-2862AC18F24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"283BF2C8-BED6-4FB5-91C0-E53F338F3AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D98BEE39-FD68-49FC-A2A2-8926FFA4BF51"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0003813A-C1A8-4ED1-A04C-7AE961E7FA22"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DEC1A702-0CCB-48F9-A42E-D8C756DD9D76"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D88F8F3B-DD8B-4BB3-BB68-C43583318400"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F677AF16-146D-41A5-ABF3-56DB9C0D6CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CE13DA9F-8460-430E-B939-BF17A7D37A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"70A04EB1-0C2C-4FC0-9E4D-05AFE65503D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"CF93E82F-D38C-4D4D-99EB-E334EE163C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A3471D34-A76C-498A-8C45-1553A579A88B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1AD2C1D2-103E-4B0F-84AA-999F01E695F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"855E91A4-0A0C-4E5C-8019-FB513A793803"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FCCC2092-E109-4FF6-9B85-6C9434269851"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"8923BB93-96C1-417B-9172-4A81E731EBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"475F0EF8-42CB-4099-9C4A-390F946C4924"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"62B0A70A-D101-443E-A543-5EC35E23D66F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"24AEF0B2-7C8C-432C-A840-C2441A70343F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"524B2D05-508C-47FF-94A0-6CC42060E638"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A7D226F1-6513-4233-BE20-58D7AB24978F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B33B2082-E040-4799-A260-BA687ED8614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A85766A4-2181-4719-ADCF-4FEA0031DB80"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2E93EE3-DB73-468E-87CA-4D277F283648"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B70D2BD5-8E3F-4B57-84EF-3AF40F6378F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D0EDB8E9-E6FB-406E-B1D3-C620F114804C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"13E6D2CA-CC4F-4317-A842-4DF0693B0CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AB017D7A-3290-4EF5-9647-B488771A5F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4F316C54-FAE4-48D8-9E40-ED358C30BF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AC0F5FD3-45E7-4D55-A3AC-6572FC0682D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5CDEC701-DAB3-4D92-AA67-B886E6693E46"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1B6EA0C0-9C26-4A87-98F1-5B317D606ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4D379372-A226-4230-B1F3-04C696518BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"22FAC35D-2803-49B0-9382-F14594B88FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3C72257B-FF99-4707-A0E3-316D538B1CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"23FF9627-E561-4CF7-A685-6E33D2F6C98C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EBA4FC82-F8FB-4F11-94DA-12D280A18E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB5D327F-4233-45CE-A557-F7BA717AF057"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"99E5F378-E93E-45F6-A445-F2DAB5C423F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A9538F63-3DC9-42CC-87D5-3CA048AE52A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3755740D-F1DC-4910-ADDD-9D491515201C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EA244A7D-F65D-4114-81C8-CE811959EA10"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5EA9F72C-8344-4370-B511-31BEC8BA63E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"96CF015E-C74B-4215-9103-8087BC1D12AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B276E4DF-69FC-4158-B93A-781A45605034"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"532AAF54-64EF-4852-B4F1-D5E660463704"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036172","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/99/sol99998454/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/99/sol99998454/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5435","sourceIdentifier":"cve@mitre.org","published":"2016-06-24T17:59:02.517","lastModified":"2026-06-17T00:49:24.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of service (memory consumption and reboot) via a crafted packet."},{"lang":"es","value":"Fuga de memoria en Huawei IPS Module, NGFW Module, NIP6300, NIP6600 y Secospace USG6300, USG6500, USG6600, USG9500 y AntiDDoS8000 V500R001C00 en versiones anteriores a V500R001C20SPC100, cuando en redes de espera activa donde dos dispositivos no están conectados directamente, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y reinicio) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:huawei_firmware:v5500r001c00:*:*:*:*:*:*:*","matchCriteriaId":"9844F49B-7B71-40C4-BFAA-8DC6E15476F7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*","matchCriteriaId":"2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*","matchCriteriaId":"547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*","matchCriteriaId":"5E054182-CE33-45E3-8595-159A75BA5162"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CE8CA649-7AE1-497C-869B-B4DD315F342C"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:secospace_antiddos8000:-:*:*:*:*:*:*:*","matchCriteriaId":"5EE75ACF-D29C-4846-932D-FB9C84E1D35F"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*","matchCriteriaId":"C281B511-7A27-4FC6-9427-AE5AD7C302F3"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*","matchCriteriaId":"0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*","matchCriteriaId":"BE469876-F873-4705-9760-097AE840A818"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*","matchCriteriaId":"4B6064BB-5E62-4D70-B933-05B5426EEE9C"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-standby-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-standby-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5709","sourceIdentifier":"cve@mitre.org","published":"2016-06-24T17:59:03.567","lastModified":"2026-06-17T00:49:54.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack."},{"lang":"es","value":"SolarWinds Virtualization Manager 6.3.1 y versiones anteriores, utiliza un cifrado débil para almacenar contraseñas en /etc/shadow, lo que permite a usuarios locales con privilegios de superusuario obtener contraseñas de usuarios a través de un ataque de fuerza bruta."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:virtualization_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.1","matchCriteriaId":"689DCAD5-A830-4522-B114-77381AA859A5"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137525/Solarwinds-Virtualization-Manager-6.3.1-Weak-Crypto.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Jun/38","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137525/Solarwinds-Virtualization-Manager-6.3.1-Weak-Crypto.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Jun/38","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4525","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-06-25T01:59:01.457","lastModified":"2026-06-17T00:47:43.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag."},{"lang":"es","value":"Controles ActiveX no especificados en Advantech WebAccess en versiones anteriores a 8.1_20160519 permiten a usuarios remotos autenticados obtener información sensible o modificar datos a través de vectores desconocidos, relacionado con el indicador INTERFACESAFE_FOR_UNTRUSTED_CALLER (también conocido como secuencias de comandos para guardar)."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.3,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:N","baseScore":3.3,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"715345BC-B19A-4605-AB4E-C26AB4F4D65C"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4528","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-06-25T01:59:02.563","lastModified":"2026-06-17T00:47:43.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file."},{"lang":"es","value":"Desbordamiento de buffer en Advantech WebAccess en versiones anteriores a 8.1_20160519 permite a usuarios locales provocar una denegación de servicio a través de un archivo DLL manipulado."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"715345BC-B19A-4605-AB4E-C26AB4F4D65C"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-1188","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-25T21:59:00.140","lastModified":"2026-06-17T00:41:26.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors."},{"lang":"es","value":"Cybozu Garoon 3.x y 4.x en versiones anteriores a 4.2.1 permite a usuarios remotos autenticados enviar mensajes de correo electrónico suplantados a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"56525E34-BC26-4833-938F-F157B77D82CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5195BBDF-2153-4600-8308-110BE2A73816"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"921FEEAD-1C44-4E65-8912-102A31B3D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A70AA82-947D-49AC-9019-A1F06DF8ABBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F462AD2C-EF50-489D-99E0-EAA9D78D7D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A69FAED9-AC11-4D20-885B-FFA04995F1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"4F181B9E-3613-42D4-92FA-3AA54BB10785"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D2014154-4685-4A48-AA69-02D0C1C78ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3B681C16-60F7-46B5-BD26-25F7DC9F5F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"19694FDB-184D-4C09-BD72-BB7B96F6391D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"CD33E00A-5082-42F4-81F5-4647BD602D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"3B130F88-71DE-4FBF-B5DF-DD8173F03151"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9B321F-6CDC-426B-AE62-090E067F3533"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"71CC4428-0CB4-497F-8274-52E6CC273D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7A9EABAA-964A-4242-939A-378B03A1F150"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN18975349/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000077","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03","source":"vultures@jpcert.or.jp"},{"url":"https://support.cybozu.com/ja-jp/article/8845","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN18975349/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.cybozu.com/ja-jp/article/8845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1190","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-25T21:59:02.593","lastModified":"2026-06-17T00:41:26.780","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors."},{"lang":"es","value":"Cybozu Garoon 3.1 hasta la versión 4.2 permite a usuarios remotos autenticados eludir las restricciones destinadas a la lectura de MultiReport a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"56525E34-BC26-4833-938F-F157B77D82CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5195BBDF-2153-4600-8308-110BE2A73816"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"921FEEAD-1C44-4E65-8912-102A31B3D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A70AA82-947D-49AC-9019-A1F06DF8ABBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F462AD2C-EF50-489D-99E0-EAA9D78D7D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A69FAED9-AC11-4D20-885B-FFA04995F1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C3D36285-4AEF-4EE8-8737-10E3B89D3F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AB7D6AFF-BA89-4CCB-8F29-75592E3BA8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"4F181B9E-3613-42D4-92FA-3AA54BB10785"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D2014154-4685-4A48-AA69-02D0C1C78ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3B681C16-60F7-46B5-BD26-25F7DC9F5F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"19694FDB-184D-4C09-BD72-BB7B96F6391D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"595FBCBB-BC3F-4E18-AFBE-C95108C4CB2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"CD33E00A-5082-42F4-81F5-4647BD602D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"3B130F88-71DE-4FBF-B5DF-DD8173F03151"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9B321F-6CDC-426B-AE62-090E067F3533"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"71CC4428-0CB4-497F-8274-52E6CC273D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42A63B4B-0248-46B0-B0FB-7DBDD48DAA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4C3A49A-0C9C-4E43-B99C-2C28A12A8A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A428CA3-8FAF-4DEB-8D95-5E76098E83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7A9EABAA-964A-4242-939A-378B03A1F150"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN18975349/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000094","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03","source":"vultures@jpcert.or.jp"},{"url":"https://support.cybozu.com/ja-jp/article/8877","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN18975349/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.cybozu.com/ja-jp/article/8877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4824","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-25T21:59:06.517","lastModified":"2026-06-17T00:48:17.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier for remote attackers to obtain network access via a brute-force attack."},{"lang":"es","value":"La implementación Wi-Fi Protected Setup (WPS) en dispositivos Corega CG-WLR300GNV y CG-WLR300GNV-W no restringe el número de intentos de autenticación de PIN, lo que facilita a atacantes remotos obtener acceso a la red a través de un ataque de fuerza bruta."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:corega:cg-wlr300gnv:-:*:*:*:*:*:*:*","matchCriteriaId":"41B47DEA-9EED-4773-A40C-38037EC7534F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:corega:cg-wlr300gnv_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"98A6762E-3729-47D3-B2BE-E4874D808105"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:corega:cg-wlr300gnv-w:-:*:*:*:*:*:*:*","matchCriteriaId":"9CEA9894-E8BB-49E3-AC60-3C6E79ED6D24"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:corega:cg-wlr300gnv-w_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"28A86D2D-421B-4439-8075-604E8B3BB1CA"}]}]}],"references":[{"url":"http://corega.jp/support/security/20160622_wlr300gnv.htm","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN75028871/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000109","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://corega.jp/support/security/20160622_wlr300gnv.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN75028871/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4825","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-25T21:59:07.767","lastModified":"2026-06-17T00:48:17.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted serialized data."},{"lang":"es","value":"El plugin Collne Welcart e-Commerce en versiones anteriores a 1.8.3 para WordPress permite a atacantes remotos llevar a cabo ataques de inyección de objetos PHP y ejecutar código PHP arbitrario a través de datos serializados manipulados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"1.8.3","matchCriteriaId":"8B09712A-BB54-4D7D-BDDF-04C947B48C25"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN47363774/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000115","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.welcart.com/community/archives/78977","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN47363774/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.welcart.com/community/archives/78977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4826","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-25T21:59:08.750","lastModified":"2026-06-17T00:48:17.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4827."},{"lang":"es","value":"Vulnerabilidad de XSS en el plugin Collne Welcart e-Commerce en versiones anteriores a 1.8.3 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-4827."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"1.8.3","matchCriteriaId":"8B09712A-BB54-4D7D-BDDF-04C947B48C25"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN95082904/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000116","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.welcart.com/community/archives/78977","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN95082904/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.welcart.com/community/archives/78977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4827","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-25T21:59:09.750","lastModified":"2026-06-17T00:48:17.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826."},{"lang":"es","value":"Vulnerabilidad de XSS en el plugin Collne Welcart e-Commerce en versiones anteriores a 1.8.3 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-4826."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"1.8.3","matchCriteriaId":"8B09712A-BB54-4D7D-BDDF-04C947B48C25"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN55826471/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000117","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.welcart.com/community/archives/78977","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN55826471/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.welcart.com/community/archives/78977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4828","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-06-25T21:59:10.813","lastModified":"2026-06-17T00:48:17.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account."},{"lang":"es","value":"El plugin Collne Welcart e-Commerce en versiones anteriores a 1.8.3 para WordPress no maneja correctamente las sesiones, lo que permite a atacantes remotos obtener acceso aprovechando el conocimiento de una dirección de correo electrónico asociada a una cuenta."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"1.8.3","matchCriteriaId":"8B09712A-BB54-4D7D-BDDF-04C947B48C25"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN61578437/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.welcart.com/community/archives/78977","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN61578437/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.welcart.com/community/archives/78977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4513","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-06-26T01:59:03.647","lastModified":"2026-06-17T00:47:41.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el módulo Schneider Electric PowerLogic PM8ECC en versiones anteriores a 2.651 para dispositivos PowerMeter 800 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:schneider-electric:powerlogic_pm8ecc_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.60","matchCriteriaId":"A8347885-F145-49DA-A4C8-3C62FCD69605"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:schneider-electric:powerlogic_pm8ecc:-:*:*:*:*:*:*:*","matchCriteriaId":"38BF2D7A-492B-4A0C-A841-A245C5657192"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-173-02","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-173-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-5087","sourceIdentifier":"cret@cert.org","published":"2016-06-26T01:59:04.597","lastModified":"2026-06-17T00:48:44.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency notifications or change content via standard filesystem operations."},{"lang":"es","value":"Alertus Desktop Notification en versiones anteriores a 2.9.31.1710 en OS X utiliza permisos débiles para los archivos de configuración y otros archivos no especificados, lo que permite a usuarios locales suprimir notificaciones de emergencia o cambiar contenido a través de las operaciones del sistema de archivos estándar."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alertus:alertus_desktop_notification_for_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9.30.1700","matchCriteriaId":"267C66FA-F8A3-4315-B0CA-A0E849685743"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/302544","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/BLUU-A9TJHR","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/302544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/BLUU-A9TJHR","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2014-9903","sourceIdentifier":"security@android.com","published":"2016-06-27T10:59:00.140","lastModified":"2026-06-17T00:19:11.360","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size, which allows local users to obtain sensitive information from kernel stack memory via a crafted sched_getattr system call."},{"lang":"es","value":"La función sched_read_attr en kernel/sched/core.c en el kernel Linux 3.14-rc en versiones anteriores a 3.14-rc4 usa un tamaño incorrecto, lo que permite a usuarios locales obtener información sensible del kernel de memoria de pila a través de una llamada de sistema sched_getattr manipulada."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:3.14:rc1:*:*:*:*:*:*","matchCriteriaId":"B1817B5C-356A-44FD-A645-AF224A59F6ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:3.14:rc2:*:*:*:*:*:*","matchCriteriaId":"3B528018-4A7E-4E59-A7CA-91D2A9536831"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:3.14:rc3:*:*:*:*:*:*","matchCriteriaId":"1795E18E-AE30-4230-809F-E40317FB96BD"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4efbc454ba68def5ef285b26ebfcfdb605b52755","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91511","source":"security@android.com"},{"url":"https://github.com/torvalds/linux/commit/4efbc454ba68def5ef285b26ebfcfdb605b52755","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4efbc454ba68def5ef285b26ebfcfdb605b52755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/4efbc454ba68def5ef285b26ebfcfdb605b52755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4470","sourceIdentifier":"secalert@redhat.com","published":"2016-06-27T10:59:08.720","lastModified":"2026-06-17T00:47:37.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command."},{"lang":"es","value":"La función key_reject_and_link en security/keys/key.c en el kernel de Linux hasta la versión 4.6.3 no asegura que cierta estructura de datos esté inicializada, lo que permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de vectores involucrando un comando keyctl request2 manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C2D62B2C-40E5-41B7-9DAA-029BCD079054"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"4BA58099-26F7-4B01-B9FC-275F012FE9C6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.3","matchCriteriaId":"FC099084-12C9-4396-ABC7-F389CFAD871E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2905A9C-3E00-4188-8341-E5C2F62EF405"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_real_time:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1BA3C94F-5FA1-4805-A3EC-6E27AE9AB10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.0:*:*:*:*:*:*:*","matchCriteriaId":"079318CC-8A10-401B-8BC9-8CD28C3F1797"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C60FA8B1-1802-4522-A088-22171DCF7A93"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=38327424b40bcebe2de92d07312c89360ac9229a","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00013.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1532.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1539.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1541.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1657.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2006.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2074.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2076.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2128.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2133.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/15/11","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036763","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3049-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3050-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3051-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3052-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3053-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3054-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3055-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3056-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3057-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341716","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/38327424b40bcebe2de92d07312c89360ac9229a","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=38327424b40bcebe2de92d07312c89360ac9229a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1532.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1539.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1541.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1657.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2074.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2076.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2128.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/15/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3049-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3050-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3051-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3052-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3053-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3054-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3055-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3056-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3057-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/torvalds/linux/commit/38327424b40bcebe2de92d07312c89360ac9229a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>"}},{"cve":{"id":"CVE-2016-5243","sourceIdentifier":"cve@mitre.org","published":"2016-06-27T10:59:10.127","lastModified":"2026-06-17T00:49:02.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message."},{"lang":"es","value":"La función tipc_nl_compat_link_dump en net/tipc/netlink_compat.c en el kernel de Linux hasta la versión 4.6.3 no copia adecuadamente una cierta cadena, lo que permite a usuarios locales obtener información sensible de la memoria de pila del kernel leyendo un mensaje Netlink."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.3","matchCriteriaId":"FC099084-12C9-4396-ABC7-F389CFAD871E"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5d2be1422e02ccd697ccfcd45c85b4a26e6178e2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/03/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91334","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3049-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3050-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3051-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3052-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3053-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3054-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3055-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3056-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3057-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343335","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/5d2be1422e02ccd697ccfcd45c85b4a26e6178e2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://patchwork.ozlabs.org/patch/629100/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5d2be1422e02ccd697ccfcd45c85b4a26e6178e2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/03/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3049-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3050-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3051-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3052-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3053-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3054-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3055-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3056-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3057-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/5d2be1422e02ccd697ccfcd45c85b4a26e6178e2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://patchwork.ozlabs.org/patch/629100/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-5728","sourceIdentifier":"cve@mitre.org","published":"2016-06-27T10:59:12.207","lastModified":"2026-06-17T00:49:56.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the vop_ioctl function in drivers/misc/mic/vop/vop_vringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (memory corruption and system crash) by changing a certain header, aka a \"double fetch\" vulnerability."},{"lang":"es","value":"Condición de carrera en la función vop_ioctl en drivers/misc/mic/vop/vop_vringh.c en el controlador MIC VOP en el kernel de Linux en versiones anteriores a 4.6.1 permite a usuarios locales obtener información sensible desde la memoria del kernel o causar una denegación de servicio (corrupción de memoria y caída del sistema) cambiando cierta cabecera, también conocida como vulnerabilidad \"double fetch\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:C","baseScore":5.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"E9F34BEC-51BF-44FB-8919-029E2E8E5690"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9bf292bfca94694a721449e3fd752493856710f6","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3616","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/538802/30/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3071-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3071-2","source":"cve@mitre.org"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=116651","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/9bf292bfca94694a721449e3fd752493856710f6","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9bf292bfca94694a721449e3fd752493856710f6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538802/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3071-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3071-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=116651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/9bf292bfca94694a721449e3fd752493856710f6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0229","sourceIdentifier":"psirt@us.ibm.com","published":"2016-06-28T01:59:01.610","lastModified":"2026-06-17T00:37:09.487","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Marketing Platform 8.6.x y 9.x en versiones anteriores a 9.1.2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B8A5AFAE-62C2-4606-8173-862BE8575821"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"357ACDBE-4F06-4615-9BAC-22E8478D1717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D5BD3CC-0948-4399-999C-0D7F5DCA5F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A5D103A-28C0-453A-ABE6-5DF8425D327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F8AAC6A-E167-4C4C-8E4D-409F34F0FBBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"69C12D6B-05BD-4670-9C73-AC4542304F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9BF3EED3-7BF5-4F40-8816-3E8C04F352A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6AC2A982-678B-408B-B09D-DD3D863D8EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"97D36426-0C6E-456B-BA2A-DDB4CBF1E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"58CCE55A-2BA8-492F-9C12-49AE56A6DEE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"40715129-7D5F-484B-8861-AE53064DAAF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:8.6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"71492B73-FDEE-4561-952A-FA1F46A4DFBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AFFD0672-3CA3-41C4-B20C-884DF334A176"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4A662F54-F0F9-4239-BBC3-C17A75FF3491"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"41314C92-FBED-4CB4-AA06-6C14D029D727"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"94D1CF26-6847-4716-87F8-E32A157559FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"54378D54-CC1E-434D-875E-0B1219F99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"56A0E390-060B-4037-BD87-B0F96DE21CFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"951B45A9-07B1-4A2A-8A56-DF6A36DA689E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5E7E7373-2D69-4FA4-ACC4-CA52AE47BECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B84DD0AF-9DA3-40EA-8FF3-6E4014543CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7E038679-FC2F-44D3-B889-22CDE0C86957"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EC8DAAF9-3D37-4A7E-B3A0-52FE224AA333"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AB93F88B-D31C-455D-AD52-D05D433C37A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F8524E66-9979-4905-9DCF-0293ACC8D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A8D781DD-41B8-41C0-B673-B42513083090"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"94404D2B-7D1F-4BF3-9EE3-0112BDF7B4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D29AE58D-A319-434B-B8D8-DF3FC4F752EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E10908ED-0434-4D1B-A246-EAE4A1854A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BF0F8468-8FCB-4E35-8C10-3F7E70F459E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"35BA6952-0713-4671-8B44-6B97D3AA9237"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2BE32557-7EA0-4CCB-B202-252DE8C7C75E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"0796CA17-4462-452B-B6CB-B5D91330F91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"805E751A-E060-48BC-B98A-5EBDA75DBCFD"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21980989","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21980989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8699","sourceIdentifier":"cve@mitre.org","published":"2016-06-29T01:59:01.370","lastModified":"2026-06-17T00:35:03.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en CA Release Automation (anteriormente LISA Release Automation) 5.0.2 en versiones anteriores 5.0.2-227, 5.5.1 en versiones anteriores a 5.5.1-1616, 5.5.2 en versiones anteriores a 5.5.2-434 y 6.1.0 en versiones anteriores a 6.1.0-1026 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:release_automation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.2","versionEndExcluding":"5.0.2-227","matchCriteriaId":"165656E2-4C53-4334-9E76-21F4CA32154D"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:release_automation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.1","versionEndExcluding":"5.5.1-1616","matchCriteriaId":"8B5C1327-AE16-4074-91AA-36A71FC55EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:release_automation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.2","versionEndExcluding":"5.5.2-434","matchCriteriaId":"2200E19F-E450-4E46-BECF-EDA4EECEDCCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:release_automation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"6.1.0-1026","matchCriteriaId":"67EBE780-0737-410D-B017-8C5819628A04"}]}]}],"references":[{"url":"http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160627-01-security-notice-for-release-automation.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036193","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160627-01-security-notice-for-release-automation.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-0298","sourceIdentifier":"psirt@us.ibm.com","published":"2016-06-29T01:59:05.887","lastModified":"2026-06-17T00:37:16.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en IBM Security Guardium Database Activity Monitor 10 en versiones anteriores a 10.0p100 permite a usuarios remotos autenticados leer archivos arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_guardium:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0","matchCriteriaId":"F9981C34-3E38-433D-A697-343CBB8F2E7D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981749","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1237","sourceIdentifier":"security@debian.org","published":"2016-06-29T14:10:01.457","lastModified":"2026-06-17T00:41:31.710","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c."},{"lang":"es","value":"nfsd en el kernel de Linux hasta la versión 4.6.3 permite a usuarios locales eludir las restricciones destinadas al permiso de archivo ajustando una POSIX ACL relacionada con nfs2acl.c, nfs3acl.c y nfs4acl.c."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.3","matchCriteriaId":"FC099084-12C9-4396-ABC7-F389CFAD871E"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=999653786df6954a31044528ac3f7a5dadca08f4","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"security@debian.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/25/2","source":"security@debian.org"},{"url":"http://www.securityfocus.com/bid/91456","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-3053-1","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"security@debian.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"security@debian.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350845","source":"security@debian.org"},{"url":"https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=999653786df6954a31044528ac3f7a5dadca08f4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/25/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3053-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5833","sourceIdentifier":"security@debian.org","published":"2016-06-29T14:10:04.910","lastModified":"2026-06-17T00:50:06.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5834."},{"lang":"es","value":"Vulnerabilidad de XSS en la función column_title en wp-admin/includes/class-wp-media-list-table.php en WordPress en versiones anteriores a 4.5.3 permite a atacantes remotos inyectar secuencia de comandos web o HTML a través de un nombre adjunto manipulado, una vulnerabilidad diferente a CVE-2016-5834."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.2","matchCriteriaId":"6FD1C123-A5DE-4665-BC7B-46996C86E185"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91368","source":"security@debian.org"},{"url":"http://www.securitytracker.com/id/1036163","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"https://codex.wordpress.org/Version_4.5.3","source":"security@debian.org"},{"url":"https://github.com/WordPress/WordPress/commit/4372cdf45d0f49c74bbd4d60db7281de83e32648","source":"security@debian.org","tags":["Patch"]},{"url":"https://wordpress.org/news/2016/06/wordpress-4-5-3/","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8518","source":"security@debian.org"},{"url":"http://www.securityfocus.com/bid/91368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://codex.wordpress.org/Version_4.5.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/WordPress/WordPress/commit/4372cdf45d0f49c74bbd4d60db7281de83e32648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://wordpress.org/news/2016/06/wordpress-4-5-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5834","sourceIdentifier":"security@debian.org","published":"2016-06-29T14:10:05.880","lastModified":"2026-06-17T00:50:06.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833."},{"lang":"es","value":"Vulnerabilidad de XSS en la función wp_get_attachment_link en wp-includes/post-template.php en WordPress en versiones anteriores a 4.5.3 permite a atacantes remotos inyectar secuencia de comandos web o HTML a través de un nombre adjunto manipulado, una vulnerabilidad diferente a CVE-2016-5833."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.2","matchCriteriaId":"6FD1C123-A5DE-4665-BC7B-46996C86E185"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3639","source":"security@debian.org"},{"url":"http://www.securityfocus.com/bid/91368","source":"security@debian.org"},{"url":"http://www.securitytracker.com/id/1036163","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"https://codex.wordpress.org/Version_4.5.3","source":"security@debian.org","tags":["Release Notes"]},{"url":"https://github.com/WordPress/WordPress/commit/4372cdf45d0f49c74bbd4d60db7281de83e32648","source":"security@debian.org","tags":["Patch"]},{"url":"https://wordpress.org/news/2016/06/wordpress-4-5-3/","source":"security@debian.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8518","source":"security@debian.org"},{"url":"http://www.debian.org/security/2016/dsa-3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://codex.wordpress.org/Version_4.5.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://github.com/WordPress/WordPress/commit/4372cdf45d0f49c74bbd4d60db7281de83e32648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://wordpress.org/news/2016/06/wordpress-4-5-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0322","sourceIdentifier":"psirt@us.ibm.com","published":"2016-06-30T01:59:00.140","lastModified":"2026-06-17T00:37:20.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML by uploading an HTML document."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Connections 4.0 hasta la versión CR4, 4.5 hasta la versión CR5, 5.0 hasta la versión CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencia de comandos web o HTML arbitrarios cargando un documento HTML."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1786E8E0-3A05-4845-8184-BC980C8FDF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"548B3376-1304-4289-A9A8-1B967C0425FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO88783","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21982611","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO88783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21982611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0349","sourceIdentifier":"psirt@us.ibm.com","published":"2016-06-30T01:59:01.580","lastModified":"2026-06-17T00:37:22.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restrictions and update process-instance variables via a REST API call."},{"lang":"es","value":"IBM Business Process Manager 8.5.6 hasta la versión 8.5.6.2 y 8.5.7 en versiones anteriores a 8.5.7.CF201606 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y actualizar variables de instancia de proceso a través de una llamada API REST."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8ED3C32B-7397-434D-B084-E92C7C6E2FE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E245DD24-5C1E-4CF0-993D-0D79A5152594"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55701","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981094","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036185","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036185","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4057","sourceIdentifier":"cve@mitre.org","published":"2016-06-30T16:59:01.257","lastModified":"2026-06-17T00:46:48.563","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service (resource consumption) via a large number of crafted packets."},{"lang":"es","value":"Huawei FusionCompute en versiones anteriores a V100R005C10SPC700 permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de recurso) a través de un gran número de paquetes manipulados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:fusioncompute:*:*:*:*:*:*:*:*","versionEndIncluding":"v100r005c00","matchCriteriaId":"036EE6C3-16E1-4A47-842D-5060ADC301D9"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-fusioncompute-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85738","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-fusioncompute-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4086","sourceIdentifier":"cve@mitre.org","published":"2016-06-30T16:59:02.507","lastModified":"2026-06-17T00:46:52.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei HiSuite (In China) before 4.0.4.301 and (Out of China) before 4.0.4.204_ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors."},{"lang":"es","value":"Huawei HiSuite (en China) en versiones anteriores a 4.0.4.301 y (fuera de China) en versiones anteriores a 4.0.4.204_ove permite a atacantes remotos instalar aplicaciones arbitrarias en un teléfono conectado a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:N/I:P/A:N","baseScore":2.9,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":5.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:hisuite:2.3.15:*:*:*:*:*:*:*","matchCriteriaId":"A4653633-6849-406F-BE2B-FA215CBF05A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:hisuite:2.3.28:*:*:*:*:*:*:*","matchCriteriaId":"628F1DD6-6426-4BE1-88D7-B557EF92F26A"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:hisuite:2.3.35:*:*:*:*:*:*:*","matchCriteriaId":"25631EB2-B181-4615-855B-B0D779D13B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:hisuite:2.3.42:*:*:*:*:*:*:*","matchCriteriaId":"2959C5A3-04CA-45EE-9D17-D8DB3715668C"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:hisuite:2.3.50:*:*:*:*:*:*:*","matchCriteriaId":"B94825DF-9B6B-4383-AD7D-FF0C15154D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:hisuite:2.3.55:*:*:*:*:*:*:*","matchCriteriaId":"BE8BFB28-7A5F-4D99-9E8E-C2D1922E348F"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:hisuite:2.3.55.1:*:*:*:*:*:*:*","matchCriteriaId":"806DD5E8-0AF8-466B-8B1A-F804B8A00777"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160422-01-hisuite-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92622","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160422-01-hisuite-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5232","sourceIdentifier":"cve@mitre.org","published":"2016-06-30T16:59:06.307","lastModified":"2026-06-17T00:49:01.083","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service (system crash) via a crafted app."},{"lang":"es","value":"Desbordamiento de buffer en Huawei Mate8 NXT-AL en versiones anteriores NXT-AL10C00B182, NXT-CL en versiones anteriores NXT-CL00C92B182, NXT-DL en versiones anteriores NXT-DL00C17B182 y NXT-TL versiones anteriores a NXT-TL00C01B182 permite a atacantes provocar una denegación de servicio (caída del sistema) a través de una aplicación manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*","matchCriteriaId":"541130D9-3327-4991-A7AB-29AA3B37861C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_8_firmware:nxt:*:*:*:*:*:*:*","matchCriteriaId":"F1B4DEF1-1BD3-427D-B152-BDD11553E32D"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160520-01-smartphone-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91555","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160520-01-smartphone-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5248","sourceIdentifier":"cve@mitre.org","published":"2016-06-30T16:59:07.197","lastModified":"2026-06-17T00:49:02.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument."},{"lang":"es","value":"El comando StopProxy en LSC.Services.SystemService en Lenovo Solution Center en versiones anteriores a 3.3.003 permite a usuarios locales terminar procesos arbitrarios a través del argumento PID."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:solution_center:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.002","matchCriteriaId":"2C4F2060-FE81-4EB1-A144-E6943204AC54"}]}]}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/len_7814","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073","source":"cve@mitre.org"},{"url":"https://support.lenovo.com/us/en/product_security/len_7814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3189","sourceIdentifier":"cve@mitre.org","published":"2016-06-30T17:59:01.470","lastModified":"2026-06-17T00:45:15.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block."},{"lang":"es","value":"Vulnerabilidad de uso después de liberación de memoria en bzip2recover en bzip2 1.0.6 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo bzip2 manipulado, relacionado con el establecimiento de extremos de bloque antes del inicio del bloque."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-09T15:58:23.497432Z","id":"CVE-2016-3189","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EF085A82-73A1-464F-B9CE-7601F7938358"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7.0","versionEndExcluding":"3.7.13","matchCriteriaId":"0F9F989B-EEF4-44E0-8EC5-A6D109CB582A"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"3.8.0","versionEndExcluding":"3.8.13","matchCriteriaId":"A92B327D-75B5-4273-A454-428BC194C4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9.0","versionEndExcluding":"3.9.11","matchCriteriaId":"1D93AE49-9E53-433F-AB01-A18C81CCEAED"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10.0","versionEndExcluding":"3.10.3","matchCriteriaId":"492C0F52-2AE3-427B-87E6-8A2E701F744A"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/20/1","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91297","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036132","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319648","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r19b4a70ac52093115fd71d773a7a4f579599e6275a13cfcf6252c3e3%40%3Cjira.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r1dc4c9b3bd559301bdb1557245f78b8910146efb1ee534b774c5f6af%40%3Cdev.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r481cda41fefb03e04c51484ed14421d812e5ce9e0972edff10f37260%40%3Cjira.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r4ad2ea01354e394b7fa8c78a184b7e1634d51be9bc0e9e4d7e6c9305%40%3Cjira.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f7ac2bd631ccb12ced65b71ff11f94e76d05b22000795e4a7b61203%40%3Cjira.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f80cf3ade5bb73410643e885fe6b7bf9f0222daf3533e42c7ae240c%40%3Cjira.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r6e3962fc9f6a79851f70cffdec5759065969cec9c6708b964464b301%40%3Cjira.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/redf17d8ad16140733b25ca402ae825d6dfa9b85f73d9fb3fd0c75d73%40%3Cdev.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rffebcbeaace56ff1fed7916700d2f414ca1366386fb1293e99b3e31e%40%3Cjira.kafka.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Aug/4","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Jul/22","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201708-08","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4038-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4038-2/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/20/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r19b4a70ac52093115fd71d773a7a4f579599e6275a13cfcf6252c3e3%40%3Cjira.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r1dc4c9b3bd559301bdb1557245f78b8910146efb1ee534b774c5f6af%40%3Cdev.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r481cda41fefb03e04c51484ed14421d812e5ce9e0972edff10f37260%40%3Cjira.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r4ad2ea01354e394b7fa8c78a184b7e1634d51be9bc0e9e4d7e6c9305%40%3Cjira.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f7ac2bd631ccb12ced65b71ff11f94e76d05b22000795e4a7b61203%40%3Cjira.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f80cf3ade5bb73410643e885fe6b7bf9f0222daf3533e42c7ae240c%40%3Cjira.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r6e3962fc9f6a79851f70cffdec5759065969cec9c6708b964464b301%40%3Cjira.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/redf17d8ad16140733b25ca402ae825d6dfa9b85f73d9fb3fd0c75d73%40%3Cdev.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rffebcbeaace56ff1fed7916700d2f414ca1366386fb1293e99b3e31e%40%3Cjira.kafka.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Aug/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Jul/22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201708-08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4038-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4038-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}],"evaluatorComment":"CWE-416: Use After Free"}},{"cve":{"id":"CVE-2016-3649","sourceIdentifier":"secure@symantec.com","published":"2016-06-30T23:59:10.700","lastModified":"2026-06-17T00:46:08.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests."},{"lang":"es","value":"Symantec Endpoint Protection Manager (SEPM) 12.1 en versiones anteriores a RU6 MP5 permite a administradores remotos autenticados enumerar cuentas de administradores a través de peticiones GET modificadas."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection_manager:*:mp4:*:*:*:*:*:*","versionEndIncluding":"12.1.6","matchCriteriaId":"DCE7769D-5CED-4365-93F3-0D4320470943"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91440","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036196","source":"secure@symantec.com"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3652","sourceIdentifier":"secure@symantec.com","published":"2016-06-30T23:59:13.997","lastModified":"2026-06-17T00:46:08.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en la secuencia de comandos de administración en Symantec Endpoint Protection Manager (SEPM) 12.1 en versiones anteriores a RU6 MP5 permiten a usuarios remotos autenticados inyectar secuencia de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection_manager:*:mp4:*:*:*:*:*:*","versionEndIncluding":"12.1.6","matchCriteriaId":"DCE7769D-5CED-4365-93F3-0D4320470943"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91444","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036196","source":"secure@symantec.com"},{"url":"https://www.exploit-db.com/exploits/40041/","source":"secure@symantec.com"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40041/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5304","sourceIdentifier":"secure@symantec.com","published":"2016-06-30T23:59:15.903","lastModified":"2026-06-17T00:49:10.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en un componente del informe de enrutamiento en Symantec Endpoint Protection Manager (SEPM) 12.1 en versiones anteriores a RU6 MP5 permite a usuarios remotos autenticados redirigir usuarios a páginas web arbitrarias y llevar a cabo ataques de phishing a través de vectores no especificados."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection_manager:*:mp4:*:*:*:*:*:*","versionEndIncluding":"12.1.6","matchCriteriaId":"DCE7769D-5CED-4365-93F3-0D4320470943"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91447","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036196","source":"secure@symantec.com"},{"url":"https://www.exploit-db.com/exploits/40041/","source":"secure@symantec.com"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40041/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/601.html\">CWE-601: URL Redirection to Untrusted Site ('Open Redirect')</a>"}},{"cve":{"id":"CVE-2016-5305","sourceIdentifier":"secure@symantec.com","published":"2016-06-30T23:59:16.887","lastModified":"2026-06-17T00:49:10.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via a \"DOM link manipulation\" attack."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en la secuencia de comandos de administración en Symantec Endpoint Protection Manager (SEPM) 12.1 en versiones anteriores a RU6 MP5 permiten a usuarios remotos autenticados inyectar secuencia de comandos web o HTML arbitrarios a través de un ataque \"manipulación de enlace DOM\"."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection_manager:*:mp4:*:*:*:*:*:*","versionEndIncluding":"12.1.6","matchCriteriaId":"DCE7769D-5CED-4365-93F3-0D4320470943"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91448","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036196","source":"secure@symantec.com"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5306","sourceIdentifier":"secure@symantec.com","published":"2016-06-30T23:59:17.950","lastModified":"2026-06-17T00:49:11.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445."},{"lang":"es","value":"Symantec Endpoint Protection Manager (SEPM) 12.1 en versiones anteriores a RU6 MP5 no implementa adecuadamente el mecanismo de protección HSTS, lo que facilita a atacantes remotos obtener información sensible rastreando la red para tráfico HTTP no destinado en puerto 8445."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection_manager:*:mp4:*:*:*:*:*:*","versionEndIncluding":"12.1.6","matchCriteriaId":"DCE7769D-5CED-4365-93F3-0D4320470943"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91449","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036196","source":"secure@symantec.com"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5307","sourceIdentifier":"secure@symantec.com","published":"2016-06-30T23:59:18.903","lastModified":"2026-06-17T00:49:11.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root directory tree via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Symantec Endpoint Protection Manager (SEPM) 12.1 en versiones anteriores a RU6 MP5 permite a usuarios remotos autenticados leer archivos arbitrarios en el árbol de directorio web-root a través de vectores no especificados."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection_manager:*:mp4:*:*:*:*:*:*","versionEndIncluding":"12.1.6","matchCriteriaId":"DCE7769D-5CED-4365-93F3-0D4320470943"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91443","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036196","source":"secure@symantec.com"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0364","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-01T01:59:01.153","lastModified":"2026-06-17T00:37:24.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters."},{"lang":"es","value":"IBM UrbanCode Deploy 6.0.x en versiones anteriores a 6.0.1.13, 6.1.x en versiones anteriores a 6.1.3.3 y 6.2.x en versiones anteriores a 6.2.1.1 no implementa correctamente una característica de ofuscación de inicio de sesión para propiedades seguras, lo que permite a usuarios remotos autenticados obtener información sensible a través de vectores que involucran caracteres especiales."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B6C176CC-51F9-4C53-B0F8-D0E0A5387CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"49D22F1E-6827-4343-BD5E-376710FF9A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C35B3347-EE12-4E84-92D9-533DA7F1581E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"32C10FFF-250A-4530-B631-1B1DAA3B4BC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DE176DE5-BB60-4999-A2B4-D93C8AB776DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"751113D0-7085-4AE7-8F39-292293F297FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"31217ED6-C154-49CF-BD65-C272D630F58A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1F69D247-B168-40EC-BA4B-1C50879B64BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"1894FAF3-1E8E-4A4F-9044-B9176CB2BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C822B4AB-4032-4BEB-A413-A80398A28EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"FF310F06-6674-470E-B258-4DF042B1FA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AEF92016-8494-4EBE-A32F-A123C1517F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"744A36AB-5BC8-4FE1-BB91-9BC3019EBB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.12:*:*:*:*:*:*:*","matchCriteriaId":"A4535B6A-0791-4855-BED4-01A8279F4930"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7AF8BEEC-5F93-424B-94F6-622B9BA84CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F4E6CFA4-8FD7-4106-800C-BE84B63D3E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5DE72929-3618-4341-83DC-E4A006EE3D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F59AC6D5-1F06-4EC4-BD36-6FA5221AE611"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D7ED1843-E659-4931-8E08-8867D4286A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F9BA86C9-0A31-4EBB-B73E-346D6C425988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"70E082B0-B404-4E5E-9FC7-2B0B6F363A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1A5583AF-A3CE-4AEE-8D0F-5E0FE22BC3B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"054A3ED4-290A-484D-9F51-93A71968CAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7C5B4753-3685-4088-A4B1-C4AE58C11F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"32732445-6761-40F0-836B-E7EAC9B9239B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EF8034DC-C20D-4972-AFBA-D3EBF8664164"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5409F075-5268-476E-BEFE-2B93C8BB2870"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"F43800F6-328E-4481-B6AE-44A50F368314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C6A0A50D-547C-4508-8D6C-DBE26D0CEEF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E3BCD23-4033-443D-B2D5-CAF69FCD22D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B1A72039-925C-48AE-8012-BA6AEE659D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"57A488B1-1221-46C4-B97D-B895368E3A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8CFD390D-531E-4BC7-B9D4-74208E153F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EFBFBFFE-8E24-48C0-87D7-6E6D3017C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"93406315-DD19-45E5-84EE-B5D8F0A903D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1C970147-39E9-4CCC-9FDE-B70546941323"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg2C1000152","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg2C1000152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0365","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-01T01:59:02.107","lastModified":"2026-06-17T00:37:24.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors."},{"lang":"es","value":"IBM UrbanCode Deploy 6.0.x en versiones anteriores a 6.0.1.13, 6.1.x en versiones anteriores a 6.1.3.3 y 6.2.x en versiones anteriores a 6.2.1.1, cuando el artefacto en caché Codestation de agente de retransmision está habilitado, permite a atacantes remotos eludir autenticación y obtener información sensible del artefacto a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B6C176CC-51F9-4C53-B0F8-D0E0A5387CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"49D22F1E-6827-4343-BD5E-376710FF9A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C35B3347-EE12-4E84-92D9-533DA7F1581E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"32C10FFF-250A-4530-B631-1B1DAA3B4BC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DE176DE5-BB60-4999-A2B4-D93C8AB776DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"751113D0-7085-4AE7-8F39-292293F297FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"31217ED6-C154-49CF-BD65-C272D630F58A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1F69D247-B168-40EC-BA4B-1C50879B64BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"1894FAF3-1E8E-4A4F-9044-B9176CB2BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C822B4AB-4032-4BEB-A413-A80398A28EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"FF310F06-6674-470E-B258-4DF042B1FA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AEF92016-8494-4EBE-A32F-A123C1517F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"744A36AB-5BC8-4FE1-BB91-9BC3019EBB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.0.1.12:*:*:*:*:*:*:*","matchCriteriaId":"A4535B6A-0791-4855-BED4-01A8279F4930"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7AF8BEEC-5F93-424B-94F6-622B9BA84CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F4E6CFA4-8FD7-4106-800C-BE84B63D3E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5DE72929-3618-4341-83DC-E4A006EE3D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F59AC6D5-1F06-4EC4-BD36-6FA5221AE611"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D7ED1843-E659-4931-8E08-8867D4286A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F9BA86C9-0A31-4EBB-B73E-346D6C425988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"70E082B0-B404-4E5E-9FC7-2B0B6F363A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1A5583AF-A3CE-4AEE-8D0F-5E0FE22BC3B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"054A3ED4-290A-484D-9F51-93A71968CAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7C5B4753-3685-4088-A4B1-C4AE58C11F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"32732445-6761-40F0-836B-E7EAC9B9239B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EF8034DC-C20D-4972-AFBA-D3EBF8664164"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5409F075-5268-476E-BEFE-2B93C8BB2870"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"F43800F6-328E-4481-B6AE-44A50F368314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C6A0A50D-547C-4508-8D6C-DBE26D0CEEF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E3BCD23-4033-443D-B2D5-CAF69FCD22D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B1A72039-925C-48AE-8012-BA6AEE659D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"57A488B1-1221-46C4-B97D-B895368E3A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8CFD390D-531E-4BC7-B9D4-74208E153F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EFBFBFFE-8E24-48C0-87D7-6E6D3017C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"93406315-DD19-45E5-84EE-B5D8F0A903D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:urbancode_deploy:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1C970147-39E9-4CCC-9FDE-B70546941323"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg2C1000149","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91526","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg2C1000149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0387","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-02T14:59:01.240","lastModified":"2026-06-17T00:37:26.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM TRIRIGA Application Platform 3.3 en versiones anteriores a 3.3.2.6, 3.4 en versiones anteriores a 3.4.2.4 y 3.5 en versiones anteriores a 3.5.0.2 permite a usuarios remotos autenticados inyectar secuencia de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2016-2883."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6282A028-3DB7-4CE3-8479-2B254EE20C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D387C439-0C1C-4419-9115-F830414AC6D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B422964C-DAC7-4896-9368-AFDC6BE64F87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"31E156E1-EA1D-463B-AC55-964D1897BB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"110B75DA-3B5D-4B2A-A243-C02F04A69DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CFF6D9D-633A-414B-9A81-9627F1006F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"97EB5F4E-24BB-4F17-80B1-963DBC66E44D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2FAD7EB7-9157-4FA1-822D-C5C704136FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1A818249-26BA-4575-9805-3AC8C038B25B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AC985F26-E915-49CA-951A-7E3FE59E5377"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4271E1DA-B047-4C91-93D6-EF5A9EE9AC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27D8FE59-90C3-4EE3-BA70-01C71DCC27B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3DD18A13-F399-4E83-9976-B7C6FB41B236"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0E748299-7540-4141-B5DC-97C5C18FF162"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"00554970-B211-438A-A51C-5CF618431886"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"220168B8-68E8-45CA-A351-7A07415495CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CE1B5398-7C51-4834-AB7A-F284C23C95FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"627B09F8-666C-4D29-B415-7488DC54CD06"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981740","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0398","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-02T14:59:03.273","lastModified":"2026-06-17T00:37:27.527","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Cognos Analytics (CA) 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted URL."},{"lang":"es","value":"IBM Cognos Analytics (CA) 11.0 en versiones anteriores a 11.0.2 permite a atacantes remotos llevar a cabo ataques de suplantación de contenido a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B5D3BFCE-18D9-4F2B-8562-ED7756417874"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21977070","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21977070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0399","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-02T14:59:04.193","lastModified":"2026-06-17T00:37:27.633","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Maximo Asset Management 7.1 hasta la versión 7.1.1.13, 7.5 en versiones anteriores a 7.5.0.9 IFIX007 y 7.6 en versiones anteriores a 7.6.0.5 FP005 permite a usuarios remotos autenticados inyectar secuencia de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*","matchCriteriaId":"DE721CF9-0F75-410B-A0F4-542041E25925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F261A268-7CD0-4328-8FBB-6AC40927DDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"537C2C01-302E-48A2-9D50-C98AB6DBC466"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"65C72B48-0C0F-4C90-A34B-528A5C67432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F919705D-1394-4443-BE46-117F41A38D87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"59090B6A-09AE-4597-A60A-38C20AEA8F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"74B7BC68-4BCB-4E02-9F6D-0F99DBE87FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6FB99EBA-9725-4AB3-B816-5E00ADD7B7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"19A4B2CD-94F5-4449-8D1F-E69C3BA9929C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"9F077F88-37D3-43FA-8EA6-A7FBD9869AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"741A13F4-DED0-43A2-8761-AAEAA0557B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8945E452-7D50-4C59-B8CE-8F1C756DB01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"D0632D29-B9B9-48E1-9762-A80B660CEBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"048BAB63-0A88-4E3D-998B-06EC7917DC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"41ED069C-0C1B-4D0E-A077-E095897003DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4B590C42-21A1-4C62-8293-5A0D7AD628E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"01604919-877F-4BDF-A137-C1A54E04BEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4577B9CD-45CA-4D01-B99D-7C39131C9C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBB734EA-42EE-4BE0-934E-9E783BCDA31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"16981EC3-76AE-441B-92C4-8DD6E6A1EA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"36BB996E-17BC-4E35-97A0-142946F6B2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BA8B991C-2AE4-499D-B173-BF016D7F78F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"804A2AD3-94FB-4085-AE08-F7120EDDEFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D2659CCD-6D04-4479-BA93-B906DC200424"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C47DB9B3-C8CD-45E9-9F53-617354F3A339"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"BB19E05B-1E03-4230-BE05-21A989695749"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"29858665-FA68-4EDE-A0E7-6C79E8786871"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E5B7CA3C-5F9B-45A3-80AC-F5A4E190CC37"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21984134","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21984134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0400","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-02T14:59:05.197","lastModified":"2026-06-17T00:37:27.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en IBM WebSphere eXtreme Scale 7.1.0 en versiones anteriores a 7.1.0.3, 7.1.1 en versiones anteriores a 7.1.1.1, 8.5 en versiones anteriores a 8.5.0.3 y 8.6 en versiones anteriores a 8.6.0.8 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de separación de respuesta HTTP a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FCF504C3-FC26-4B47-9D19-3095CEA85014"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"79D9CF88-822F-4D5C-85C6-6DA81E9E49F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0472C4A-F281-4D5F-BC47-93427833B907"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0F24E300-FCBA-42E7-A0A0-8067FBE11C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0ACD3876-C36B-42DB-9174-C67DD0959BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B96C0D89-B07B-499E-A746-E3BF1AC6DBD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A974178A-404C-4BB7-AFE6-8C4A53205B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE60414F-6EB4-4285-850F-E0F2D5B36C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"946C4833-5BB2-4E54-8260-CEB66F03AEF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FE3DBEDF-A66C-4078-BD0D-8810B21EF58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2EF20610-8715-4683-83D9-9BBF822C7754"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DAB3F96D-F1FD-4427-BA83-676DCB7A37AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D365BD10-F98D-4F66-8119-21EBF30C1F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_extreme_scale:8.6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"794E70DC-F220-4C2E-B7AD-15022B9C71D9"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI60897","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI60898","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983036","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/40039/","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI60897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI60898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/40039/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/93.html\">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>"}},{"cve":{"id":"CVE-2016-1440","sourceIdentifier":"psirt@cisco.com","published":"2016-07-02T14:59:09.273","lastModified":"2026-06-17T00:41:58.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468."},{"lang":"es","value":"El proceso proxy en dispositivos Cisco Web Security Appliance (WSA) hasta la versión 9.1.0-070 permite a atacantes remotos causar una denegación de servicios (consumo de CPU) estableciendo una sesión FTP y entonces terminando inapropiadamente el control de conexión después de una transferencia de archivo, también conocido como Bug ID CSCuy43468."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:5.6.0-623:*:*:*:*:*:*:*","matchCriteriaId":"3463A482-F89B-4136-AEB3-EB20EA0160A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:6.0.0-000:*:*:*:*:*:*:*","matchCriteriaId":"B10586A4-2BB8-4193-927D-F1775797E4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"115E5118-AB49-4CAF-9DA2-712AA6605C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E320F3AC-9C05-409F-BB54-E3FB1BAAE063"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"900CE698-301B-4B56-B441-D925E924FE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F148C6AE-7B86-4AED-AFE0-9D91A8142005"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"83910933-0B59-453C-B015-99D2CDE7DF3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.5.0-000:*:*:*:*:*:*:*","matchCriteriaId":"D3F89337-B550-4985-BA36-31695D1865C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.5.0-825:*:*:*:*:*:*:*","matchCriteriaId":"2FC6B22F-CDA0-4EFA-A370-D00D0CD138DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.5.1-000:*:*:*:*:*:*:*","matchCriteriaId":"0DFC3A10-C014-4B25-A4EF-96241DF06379"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.5.2-000:*:*:*:*:*:*:*","matchCriteriaId":"7197CAB4-01ED-4502-89FA-DB5E3B0B6435"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.5.2-hp2-303:*:*:*:*:*:*:*","matchCriteriaId":"2A4976F9-1C44-45C2-9C40-420376911113"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.7.0-000:*:*:*:*:*:*:*","matchCriteriaId":"9156B2AE-89FD-4702-A99F-32DE2E9C3A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.7.0-608:*:*:*:*:*:*:*","matchCriteriaId":"64E907A2-C0C9-4288-BAA7-B36D112EE4CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.7.1-000:*:*:*:*:*:*:*","matchCriteriaId":"085D1356-236E-4C35-8C82-7F9BA758C46C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:7.7.5-835:*:*:*:*:*:*:*","matchCriteriaId":"A276AE73-EF2D-4D0F-83D6-02CCACFA373D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.0.0-000:*:*:*:*:*:*:*","matchCriteriaId":"33C867BF-2CD0-4058-9738-22C769B03D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AFBF729F-2AD0-4291-AF41-184CCA230D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.0.5_hp1:*:*:*:*:*:*:*","matchCriteriaId":"865FE706-EA2B-4170-B0CD-148EA310D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9D8750D2-5250-43BE-AC50-981902C0CF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.0.6-078:*:*:*:*:*:*:*","matchCriteriaId":"A5A171CD-A1FB-44AE-B252-9916626AEEDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.0.6-119:*:*:*:*:*:*:*","matchCriteriaId":"D6003553-A114-42E0-B817-D176F3A6112B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.0.7:*:*:*:*:*:*:*","matchCriteriaId":"892F3569-985A-43FD-8A65-440A528A29FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.0.7-142:*:*:*:*:*:*:*","matchCriteriaId":"7514E1C3-42DC-4738-AF6C-3004FAC5BD6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.0.8-mr-113:*:*:*:*:*:*:*","matchCriteriaId":"C62AB23C-9F58-403D-B0E7-8ED3F5A4FE1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.5.0-497:*:*:*:*:*:*:*","matchCriteriaId":"3E9AF842-92F9-43A7-834A-0FFB3B619EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.5.0.000:*:*:*:*:*:*:*","matchCriteriaId":"27B25873-F2FA-4876-9222-362EDC3FB00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.5.1-021:*:*:*:*:*:*:*","matchCriteriaId":"8C75625C-3C19-4449-B992-279325170CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.5.2-024:*:*:*:*:*:*:*","matchCriteriaId":"4954BDC0-0A4B-4EF7-BFD2-2FF6FAE2FCA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.5.2-027:*:*:*:*:*:*:*","matchCriteriaId":"F4F98B8B-8B27-4253-B8EF-5782F57DB654"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.5.3-055:*:*:*:*:*:*:*","matchCriteriaId":"729E3778-4BCA-46C6-AF3D-A2C10CDDB1F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.8.0-000:*:*:*:*:*:*:*","matchCriteriaId":"02CDB2C1-E72C-49A3-B96D-433A9F6A3716"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:8.8.0-085:*:*:*:*:*:*:*","matchCriteriaId":"4F98FEDA-89EF-40BA-BBD3-3EBD6DD33EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.0.0-193:*:*:*:*:*:*:*","matchCriteriaId":"5AD5471D-6A95-4BF2-9ECB-3F7AE74BCE57"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.0_base:*:*:*:*:*:*:*","matchCriteriaId":"04E5E7DC-1197-49BD-8D83-E69015F25622"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.1.0-000:*:*:*:*:*:*:*","matchCriteriaId":"7703E48F-6AAE-42DF-91E4-7205E9A7AD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.1.0-070:*:*:*:*:*:*:*","matchCriteriaId":"8782B7BC-03C5-4866-9807-14EF9A818EB1"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160627-wsa","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036188","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160627-wsa","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2872","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-02T14:59:14.197","lastModified":"2026-06-17T00:44:37.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en IBM Security QRadar SIEM 7.2.x en versiones anteriores a 7.2.7 y QRadar Incident Forensics 7.2.x en versiones anteriores a 7.2.7 permite leer a atacantes remotos archivos arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C137959-2279-4459-8A10-43AFE09E2641"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"39D53329-E729-43C1-8C67-EFA4C3F7BFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9FC4EDCA-DF37-4366-B944-F342FA55EEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"09D0DA15-7DC3-4B1E-9CD9-EFC7FE4C0FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"76CA942D-70AD-4E0D-A28E-443FB7140A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E6BE1C0B-DCDE-40E9-80AE-F9117FA23F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:*","matchCriteriaId":"CE8844C7-52E1-45A0-AC51-B6F6F14DE38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D02706E6-8774-4AC8-B14C-9C671AD2AEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DE66EF55-6E6D-4A48-BB35-073E492EE667"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E974127A-CD24-49F9-BAE8-E158C73E5E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3DD31091-B460-4CDD-9060-ADC475102F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"199B0E14-8151-44FF-BB68-5C3F2CEA2D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"460908EA-F6BA-4B87-89C3-F5D554D63A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DC08AB05-8A1F-4690-A991-03B3C420333F"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985775","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2882","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-02T14:59:15.227","lastModified":"2026-06-17T00:44:38.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses."},{"lang":"es","value":"IBM TRIRIGA Application Platform 3.3 en versiones anteriores a 3.3.2.6, 3.4 en versiones anteriores a 3.4.2.4, y 3.5 en versiones anteriores 3.5.0.2 permite a usuarios remotos autenticados obtener información sensible leyendo respuestas HTTP."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6282A028-3DB7-4CE3-8479-2B254EE20C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D387C439-0C1C-4419-9115-F830414AC6D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A44316ED-571F-4E4B-BC02-CED0E09D175E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B422964C-DAC7-4896-9368-AFDC6BE64F87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"31E156E1-EA1D-463B-AC55-964D1897BB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"648D0E41-BA9F-4798-A5E4-413F7D895B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"110B75DA-3B5D-4B2A-A243-C02F04A69DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CFF6D9D-633A-414B-9A81-9627F1006F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2FAD7EB7-9157-4FA1-822D-C5C704136FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1A818249-26BA-4575-9805-3AC8C038B25B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AC985F26-E915-49CA-951A-7E3FE59E5377"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3DD18A13-F399-4E83-9976-B7C6FB41B236"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0E748299-7540-4141-B5DC-97C5C18FF162"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"00554970-B211-438A-A51C-5CF618431886"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"220168B8-68E8-45CA-A351-7A07415495CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CE1B5398-7C51-4834-AB7A-F284C23C95FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"627B09F8-666C-4D29-B415-7488DC54CD06"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983343","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91552","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2883","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-02T14:59:16.117","lastModified":"2026-06-17T00:44:38.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM TRIRIGA Application Platform 3.3 en versiones anteriores a 3.3.2.6, 3.4 en versiones anteriores a 3.4.2.4 y 3.5 en versiones anteriores a 3.5.0.2 permite a usuarios remotos autenticados inyectar secuencia de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2016-0387."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6282A028-3DB7-4CE3-8479-2B254EE20C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D387C439-0C1C-4419-9115-F830414AC6D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A44316ED-571F-4E4B-BC02-CED0E09D175E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B422964C-DAC7-4896-9368-AFDC6BE64F87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"31E156E1-EA1D-463B-AC55-964D1897BB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7E0AC53E-0F04-4F25-9F9C-AFF998C1CEB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"648D0E41-BA9F-4798-A5E4-413F7D895B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"110B75DA-3B5D-4B2A-A243-C02F04A69DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CFF6D9D-633A-414B-9A81-9627F1006F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2FAD7EB7-9157-4FA1-822D-C5C704136FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"59161DED-CC0F-4BD2-BCAD-6D3E766FAB8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1A818249-26BA-4575-9805-3AC8C038B25B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AC985F26-E915-49CA-951A-7E3FE59E5377"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3DD18A13-F399-4E83-9976-B7C6FB41B236"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2D0F8B24-227A-42F2-A6FC-03AFB588CCCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0E748299-7540-4141-B5DC-97C5C18FF162"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"13E00EA8-D6B3-464A-A7E8-F186FE4A3DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"00554970-B211-438A-A51C-5CF618431886"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"78DD7794-25C5-4C04-9CFD-4CA9EAA4CA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"220168B8-68E8-45CA-A351-7A07415495CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CE1B5398-7C51-4834-AB7A-F284C23C95FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tririga_application_platform:3.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"627B09F8-666C-4D29-B415-7488DC54CD06"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983347","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2961","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-02T14:59:17.383","lastModified":"2026-06-17T00:44:44.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace."},{"lang":"es","value":"El servidor de integración en IBM Integration Bus 9 en versiones anteriores a 9.0.0.6 y 10 en versiones anteriores a 10.0.0.5 y WebSphere Message Broker 8 en versiones anteriores a 8.0.0.8 permite a atacantes remotos obtener información sensible de versión Tomcat enviando una petición de POST mal formada y, después, leyendo el rastro en pila de Java."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:9.0:*:*:*:*:*:*:*","matchCriteriaId":"4D9B868C-9348-4D31-95F9-FEC3D91158AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"725E3F95-4096-497D-8F2A-02C185ACF8CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"576FE339-BD08-4994-B31A-15BC521650E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"371E03D4-BDD9-40A8-B24B-43C320C9F3E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C319D81D-E66B-47E6-A731-D5074314B94B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:10.0:*:*:*:*:*:*:*","matchCriteriaId":"92E6A5C9-29C2-458D-AA67-E74945E2012F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6309A833-9490-494A-BE3A-BA79133BD6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50810A19-BEDC-4DF6-BA82-DAA1F96D5400"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"97486673-4740-4F4F-8956-73C06B477096"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"79E917E9-DE5E-482A-9A20-823DF475BE66"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*","matchCriteriaId":"0F93BF57-FD4F-456C-8DFD-CEF8B5AEF35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B859DAA9-1B0E-47CE-813D-108776C3B239"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2458C42A-90F7-457C-AAD6-205D9893A993"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8BFEC988-5E94-474F-9A60-966B8FA8B8F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BE5CCF85-8149-43DB-A594-99895D94F447"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EA0D7E80-2607-4567-8D1C-2ADA32F174D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"32E57C58-4A30-43BE-B8CC-E6B38E67AA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:8.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D2C048F0-D615-49E6-9B50-22E259C02C5B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT15188","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985017","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT15188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2968","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-02T14:59:18.400","lastModified":"2026-06-17T00:44:44.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unspecified vectors."},{"lang":"es","value":"IBM Security QRadar Incident Forensics 7.2.x en versiones anteriores a 7.2.7 permite a atacantes remotos eludir la autentificación y obtener información sensible o modificar datos, a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D02706E6-8774-4AC8-B14C-9C671AD2AEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DE66EF55-6E6D-4A48-BB35-073E492EE667"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E974127A-CD24-49F9-BAE8-E158C73E5E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3DD31091-B460-4CDD-9060-ADC475102F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"199B0E14-8151-44FF-BB68-5C3F2CEA2D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"460908EA-F6BA-4B87-89C3-F5D554D63A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DC08AB05-8A1F-4690-A991-03B3C420333F"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985773","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-6931","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:00.140","lastModified":"2026-06-17T00:31:37.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en el vSphere Web Client in VMware vCenter Server 5.0 en versiones anteriores a U3g, 5.1 en versiones anteriores a U3d y 5.5 en versiones anteriores a U2d permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"46C704E0-E165-4A44-A104-6C5B83A83237"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E0492A2B-EBE2-4303-B8BD-8511D191D1AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:5.5:*:*:*:*:*:*:*","matchCriteriaId":"8B12523A-5C1E-408F-BB4B-98EF32C7D676"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036112","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0009.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2079","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:05.813","lastModified":"2026-06-17T00:43:24.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"VMware NSX Edge 6.1 en versiones anteriores a 6.1.7 y 6.2 en versiones anteriores a 6.2.3 y vCNS Edge 5.5 en versiones anteriores a 5.5.4.3, cuando la característica SSL-VPN está configurada, permiten a atacantes remotos obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:nsx_edge:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E84A6BD4-C2A7-4B4E-8566-9E8116A83532"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:nsx_edge:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EAF8EF93-2571-430E-BCBE-394EF0B4897C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:nsx_edge:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C1014FCA-713D-4667-8801-EE61BEA62D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:nsx_edge:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D0C2371A-F497-469E-BAA2-C47808D6B82D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:nsx_edge:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5A2D6E92-4C93-4E6E-AC77-DBBE6765F986"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:nsx_edge:6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A6A9306E-5F2E-4C78-A766-6B9168CF5043"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:nsx_edge:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8B5DF0C-BE28-4CC3-84B9-0A3736889596"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:nsx_edge:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3375D9F8-37F5-4C56-8E6C-3034C63CC4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:nsx_edge:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"74191A3C-A634-4081-A96A-C0695468B9A1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"84A4801F-A077-47E2-B2AF-7BA89F834BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8B6E788C-EC91-4E49-B5FE-FA92BB796ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A9797BFE-CD1D-4217-9BE0-559E7C12E152"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CBD0B720-0C06-40D1-B8F6-F59E5DCCA463"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DFA66D20-1AFC-478A-B07F-E261537C426C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"11EF3FE2-7A08-46E9-8DD6-B0A7AB5BA4B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"ECA9A345-686B-4FCE-8562-1A181B4F0975"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036077","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0007.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2081","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:06.907","lastModified":"2026-06-17T00:43:24.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en VMware vRealize Log Insight 2.x y 3.x en versiones anteriores a 3.3.2 permite a atacantes remotos inyectar secuencias de comandos web y HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:2.0:*:*:*:*:*:*:*","matchCriteriaId":"ECA721D3-A31B-4B0C-A9B3-0729E5A486E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3981C264-6EBB-496E-BE5A-1670FABAFAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:2.5:*:*:*:*:*:*:*","matchCriteriaId":"B59B01D4-7ED4-4A20-958D-BC5AB8CD5604"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"40565FA2-BEA0-4DE8-85D0-42AD3415E2AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:3.0:*:*:*:*:*:*:*","matchCriteriaId":"35562FBD-9183-45E8-8E3F-3E24CCFDD759"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"45670401-3130-4504-BE48-19AEFAB0854E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C9F7C79B-09A9-42F3-AD1A-0BACE2FB5D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CCEFB9D5-418C-4012-9961-E1FA94CDDAB6"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036078","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0008.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5701","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:11.187","lastModified":"2026-06-17T00:49:53.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"setup/frames/index.inc.php in phpMyAdmin 4.0.10.x before 4.0.10.16, 4.4.15.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to conduct BBCode injection attacks against HTTP sessions via a crafted URI."},{"lang":"es","value":"setup/frames/index.inc.php en phpMyAdmin 4.0.10.x en versiones anteriores a 4.0.10.16, 4.4.15.x en versiones anteriores a 4.4.15.7 y 4.6.x en versiones anteriores a 4.6.3 permite a atacantes remotos llevar a cabo ataques de inyección BBCode contra sesiones HTTP a través de una URI manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-74"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F06DC95-76B1-4E24-A55F-1358A25ED0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA76CB4-6167-446A-8D4F-6D5B38046334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8D28655-7F37-474D-A4E2-772AF24B94E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1FA1951E-BD85-42BF-BF7F-79A14D165914"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"58DD0910-DBBA-4858-B9B1-FA93D08323D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DC8D93A3-8997-4EB9-A411-74B296D1341F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0245AF2D-F856-4CAA-A830-36D43026D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C69E253E-157D-45BA-A977-079A49F74A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6325E2AE-BB86-4953-AA9E-0433C00B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3C54B828-8B23-4C62-907E-8EE7E757B721"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"02DD18C8-172B-41CD-87DD-58BDEC0D9418"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"10666E30-D98A-47A9-881A-B281066F0EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3993826B-CA66-4BC2-8E1B-06CF9230B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"14928F51-761E-4FCA-B13C-A11530C7FC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"DB761644-20F5-4E0D-B301-7809EAECA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"896439D0-6C98-44A6-8C9D-0D57D57782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"978B828C-1FCB-4386-B685-5BEE5A8A500C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"51A3261B-23BE-42D7-8A52-AE2E8C274A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"F0B7EA51-27EC-4884-8D60-FB9477D2B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"40F85FEC-427E-487D-997E-7EE359475876"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"2C825978-7E00-4C20-A806-0B968AA589AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*","matchCriteriaId":"34986C36-1C93-4DA8-A4C2-0CB8B24BAD3E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C641F362-D37D-47CB-BE6C-36E5F116F844"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"A0EA8819-70F8-48DC-8667-6CF25E7D9C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DD2796DA-3E74-4765-90D1-783849C7A44C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4024DA77-BFE4-48C6-A2AF-46003071BDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"85631B69-7060-42D1-AE24-466BA10EB390"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E62EDC79-47AA-4CED-AB7F-1E4D158EB653"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*","matchCriteriaId":"4BED20D9-C571-4BC5-9A54-450A364C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*","matchCriteriaId":"2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*","matchCriteriaId":"9CBF68B2-2BCF-4EEB-8A7C-D83DCAF1AFB4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91383","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/1dca386505f396f0c2035112a403cc80768a141f","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-17/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/1dca386505f396f0c2035112a403cc80768a141f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-17/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5704","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:15.970","lastModified":"2026-06-17T00:49:54.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving a comment."},{"lang":"es","value":"Vulnerabilidad de XSS en la página table-structure en phpMyAdmin 4.6.x en versiones anteriores a 4.6.3 permite a atacantes remotos inyectar secuencias de comandos web y HTML arbitrarios a través de vectores relacionados con comentarios."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C641F362-D37D-47CB-BE6C-36E5F116F844"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"A0EA8819-70F8-48DC-8667-6CF25E7D9C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DD2796DA-3E74-4765-90D1-783849C7A44C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4024DA77-BFE4-48C6-A2AF-46003071BDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"85631B69-7060-42D1-AE24-466BA10EB390"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E62EDC79-47AA-4CED-AB7F-1E4D158EB653"}]}]}],"references":[{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/72213573182896bd6a6e5af5ba1881dd87c4a20b","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-20/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/72213573182896bd6a6e5af5ba1881dd87c4a20b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-20/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5705","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:17.393","lastModified":"2026-06-17T00:49:54.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) server-privileges certificate data fields on the user privileges page, (2) an \"invalid JSON\" error message in the error console, (3) a database name in the central columns implementation, (4) a group name, or (5) a search name in the bookmarks implementation."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en phpMyAdmin 4.4.x en versiones anteriores a 4.4.15.7 y 4.6.x en versiones anteriores a 4.6.3 permiten a atacantes remotos inyectar comandos web o HTML arbitrarios a través de vectores relacionados con (1) campos de datos de certificado de server-privilegies en la página de privilegios de usuario, (2) un error \"invalid JSON\" en la consola de error, (3) un nombre de database en las columnas centrales de implementación, (4) un nombre de grupo o (5) un nombre de búsqueda en la implementación de marcadores."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C641F362-D37D-47CB-BE6C-36E5F116F844"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"A0EA8819-70F8-48DC-8667-6CF25E7D9C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DD2796DA-3E74-4765-90D1-783849C7A44C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4024DA77-BFE4-48C6-A2AF-46003071BDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"85631B69-7060-42D1-AE24-466BA10EB390"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E62EDC79-47AA-4CED-AB7F-1E4D158EB653"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*","matchCriteriaId":"4BED20D9-C571-4BC5-9A54-450A364C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*","matchCriteriaId":"2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*","matchCriteriaId":"9CBF68B2-2BCF-4EEB-8A7C-D83DCAF1AFB4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91378","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/03f73d48369703e0d3584699b08e24891c3295b8","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/0b7416c5f4439ed3f11c023785f2d4c49a1b09fc","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/364732e309cccb3fb56c938ed8d8bc0e04a3ca98","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/36df83a97a7f140fdb008b727a94f882847c6a6f","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/57ae483bad33059a885366d5445b7e1f6f29860a","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-21/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/03f73d48369703e0d3584699b08e24891c3295b8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/0b7416c5f4439ed3f11c023785f2d4c49a1b09fc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/364732e309cccb3fb56c938ed8d8bc0e04a3ca98","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/36df83a97a7f140fdb008b727a94f882847c6a6f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/57ae483bad33059a885366d5445b7e1f6f29860a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-21/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5730","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:20.237","lastModified":"2026-06-17T00:49:56.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving (1) an array value to FormDisplay.php, (2) incorrect data to validate.php, (3) unexpected data to Validator.php, (4) a missing config directory during setup, or (5) an incorrect OpenID identifier data type, which reveals the full path in an error message."},{"lang":"es","value":"phpMyAdmin 4.0.x en versiones anteriores a 4.0.10.16, 4.4.x en versiones anteriores a 4.4.15.7 y 4.6.x en versiones anteriores a 4.6.3 permite a atacantes remotos obtener información sensible a través de vectores relacionados con (1) un valor de matriz para FormDisplay.php, (2) datos incorrectos para validate.php, (3) datos no esperados para Validator.php, (4) falta de directorio de configuración durante la instalación o (5) un identificador de tipo de datos OpenID incorrecto, lo que revela la ruta completa en un mensaje de error."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F06DC95-76B1-4E24-A55F-1358A25ED0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA76CB4-6167-446A-8D4F-6D5B38046334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8D28655-7F37-474D-A4E2-772AF24B94E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1FA1951E-BD85-42BF-BF7F-79A14D165914"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"58DD0910-DBBA-4858-B9B1-FA93D08323D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DC8D93A3-8997-4EB9-A411-74B296D1341F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0245AF2D-F856-4CAA-A830-36D43026D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C69E253E-157D-45BA-A977-079A49F74A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6325E2AE-BB86-4953-AA9E-0433C00B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3C54B828-8B23-4C62-907E-8EE7E757B721"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"02DD18C8-172B-41CD-87DD-58BDEC0D9418"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"10666E30-D98A-47A9-881A-B281066F0EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3993826B-CA66-4BC2-8E1B-06CF9230B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"14928F51-761E-4FCA-B13C-A11530C7FC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"DB761644-20F5-4E0D-B301-7809EAECA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"896439D0-6C98-44A6-8C9D-0D57D57782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"978B828C-1FCB-4386-B685-5BEE5A8A500C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"51A3261B-23BE-42D7-8A52-AE2E8C274A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"F0B7EA51-27EC-4884-8D60-FB9477D2B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"40F85FEC-427E-487D-997E-7EE359475876"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"2C825978-7E00-4C20-A806-0B968AA589AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*","matchCriteriaId":"34986C36-1C93-4DA8-A4C2-0CB8B24BAD3E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C641F362-D37D-47CB-BE6C-36E5F116F844"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"A0EA8819-70F8-48DC-8667-6CF25E7D9C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DD2796DA-3E74-4765-90D1-783849C7A44C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4024DA77-BFE4-48C6-A2AF-46003071BDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"85631B69-7060-42D1-AE24-466BA10EB390"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E62EDC79-47AA-4CED-AB7F-1E4D158EB653"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*","matchCriteriaId":"4BED20D9-C571-4BC5-9A54-450A364C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*","matchCriteriaId":"2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*","matchCriteriaId":"9CBF68B2-2BCF-4EEB-8A7C-D83DCAF1AFB4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91379","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/27664605b945b13e1d2b71adea822ace2099cc96","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/331c560fbfa0e7d2dce674b5e88e983c5f2a451d","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/96e0aa35653ec0c66084a7e9343465e16c1f769b","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/b0180f18c828706af3a6800f0fb01a536d3ef8c7","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/cd229d718e8cb4bc8ba32446beaa82d27727b6f0","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-23/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/27664605b945b13e1d2b71adea822ace2099cc96","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/331c560fbfa0e7d2dce674b5e88e983c5f2a451d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/96e0aa35653ec0c66084a7e9343465e16c1f769b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/b0180f18c828706af3a6800f0fb01a536d3ef8c7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/cd229d718e8cb4bc8ba32446beaa82d27727b6f0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-23/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5731","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:21.253","lastModified":"2026-06-17T00:49:56.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving an OpenID error message."},{"lang":"es","value":"Vulnerabilidad de XSS en examples/openid.php en phpMyAdmin 4.0.x en versiones anteriores a 4.0.10.16, 4.4.x en versiones anteriores a 4.4.15.7 y 4.6.x en versiones anteriores a 4.6.3 permiten a atacantes remotos inyectar comandos de secuencias web o HTML arbitrarios a través de vectores relacionados con un error de mensaje OpenID."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C641F362-D37D-47CB-BE6C-36E5F116F844"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"A0EA8819-70F8-48DC-8667-6CF25E7D9C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DD2796DA-3E74-4765-90D1-783849C7A44C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4024DA77-BFE4-48C6-A2AF-46003071BDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"85631B69-7060-42D1-AE24-466BA10EB390"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E62EDC79-47AA-4CED-AB7F-1E4D158EB653"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F06DC95-76B1-4E24-A55F-1358A25ED0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA76CB4-6167-446A-8D4F-6D5B38046334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8D28655-7F37-474D-A4E2-772AF24B94E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1FA1951E-BD85-42BF-BF7F-79A14D165914"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"58DD0910-DBBA-4858-B9B1-FA93D08323D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DC8D93A3-8997-4EB9-A411-74B296D1341F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0245AF2D-F856-4CAA-A830-36D43026D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C69E253E-157D-45BA-A977-079A49F74A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6325E2AE-BB86-4953-AA9E-0433C00B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3C54B828-8B23-4C62-907E-8EE7E757B721"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"02DD18C8-172B-41CD-87DD-58BDEC0D9418"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"10666E30-D98A-47A9-881A-B281066F0EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3993826B-CA66-4BC2-8E1B-06CF9230B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"14928F51-761E-4FCA-B13C-A11530C7FC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"DB761644-20F5-4E0D-B301-7809EAECA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"896439D0-6C98-44A6-8C9D-0D57D57782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"978B828C-1FCB-4386-B685-5BEE5A8A500C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"51A3261B-23BE-42D7-8A52-AE2E8C274A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"F0B7EA51-27EC-4884-8D60-FB9477D2B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"40F85FEC-427E-487D-997E-7EE359475876"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"2C825978-7E00-4C20-A806-0B968AA589AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*","matchCriteriaId":"34986C36-1C93-4DA8-A4C2-0CB8B24BAD3E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*","matchCriteriaId":"4BED20D9-C571-4BC5-9A54-450A364C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*","matchCriteriaId":"2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*","matchCriteriaId":"9CBF68B2-2BCF-4EEB-8A7C-D83DCAF1AFB4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/418aeea3d83b0b6021bac311d849570acfc6e48c","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/94cf3864254ffaf3a69e97d8fc454888368b94ab","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-24/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/418aeea3d83b0b6021bac311d849570acfc6e48c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/94cf3864254ffaf3a69e97d8fc454888368b94ab","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-24/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-5732","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:22.627","lastModified":"2026-06-17T00:49:57.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in templates/table/structure/display_partitions.phtml in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via crafted table parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en la implementación de partition-range en templates/table/structure/display_partitions.phtml en la página table-structure en phpMyAdmin 4.6.x en versiones anteriores a 4.6.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una tabla de parámetros manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C641F362-D37D-47CB-BE6C-36E5F116F844"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"A0EA8819-70F8-48DC-8667-6CF25E7D9C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DD2796DA-3E74-4765-90D1-783849C7A44C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4024DA77-BFE4-48C6-A2AF-46003071BDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"85631B69-7060-42D1-AE24-466BA10EB390"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E62EDC79-47AA-4CED-AB7F-1E4D158EB653"}]}]}],"references":[{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/0815af37f483f329f0c0565d68821fea9c47b5f5","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/792cd1262f012b9b13639519d414f2acaeb5e972","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-25/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/0815af37f483f329f0c0565d68821fea9c47b5f5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/792cd1262f012b9b13639519d414f2acaeb5e972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-25/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5733","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T01:59:23.613","lastModified":"2026-06-17T00:49:57.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted table name that is mishandled during privilege checking in table_row.phtml, (2) a crafted mysqld log_bin directive that is mishandled in log_selector.phtml, (3) the Transformation implementation, (4) AJAX error handling in js/ajax.js, (5) the Designer implementation, (6) the charts implementation in js/tbl_chart.js, or (7) the zoom-search implementation in rows_zoom.phtml."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en phpMyAdmin 4.0.x en versiones anteriores a 4.0.10.16, 4.4.x en versiones anteriores a 4.4.15.7 y 4.6.x en versiones anteriores a 4.6.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores relacionados con (1)un nombre de tabla manipulado que es manejado incorrectamente durante la comprobación de privilegios en table_row.phtml, (2) una directiva mysqld log_bin manipulada que es manejada incorrectamente en log_selector.phtml, (3) la implementación de Transformation, (4) manejo del error AJAX en js/ajax.js, (5) la implementación de Designer, (6) la implementación de gráficos en js/tbl_chart.js o (7) la implementación de búsqueda de zoom en rows_zoom.phtml."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F06DC95-76B1-4E24-A55F-1358A25ED0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA76CB4-6167-446A-8D4F-6D5B38046334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8D28655-7F37-474D-A4E2-772AF24B94E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1FA1951E-BD85-42BF-BF7F-79A14D165914"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"58DD0910-DBBA-4858-B9B1-FA93D08323D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DC8D93A3-8997-4EB9-A411-74B296D1341F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0245AF2D-F856-4CAA-A830-36D43026D1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C69E253E-157D-45BA-A977-079A49F74A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6325E2AE-BB86-4953-AA9E-0433C00B096E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3C54B828-8B23-4C62-907E-8EE7E757B721"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"02DD18C8-172B-41CD-87DD-58BDEC0D9418"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"10666E30-D98A-47A9-881A-B281066F0EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3993826B-CA66-4BC2-8E1B-06CF9230B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"14928F51-761E-4FCA-B13C-A11530C7FC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"DB761644-20F5-4E0D-B301-7809EAECA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"896439D0-6C98-44A6-8C9D-0D57D57782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"978B828C-1FCB-4386-B685-5BEE5A8A500C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"51A3261B-23BE-42D7-8A52-AE2E8C274A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"F0B7EA51-27EC-4884-8D60-FB9477D2B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"40F85FEC-427E-487D-997E-7EE359475876"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"2C825978-7E00-4C20-A806-0B968AA589AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*","matchCriteriaId":"34986C36-1C93-4DA8-A4C2-0CB8B24BAD3E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*","matchCriteriaId":"4BED20D9-C571-4BC5-9A54-450A364C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*","matchCriteriaId":"2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*","matchCriteriaId":"9CBF68B2-2BCF-4EEB-8A7C-D83DCAF1AFB4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C641F362-D37D-47CB-BE6C-36E5F116F844"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"A0EA8819-70F8-48DC-8667-6CF25E7D9C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DD2796DA-3E74-4765-90D1-783849C7A44C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4024DA77-BFE4-48C6-A2AF-46003071BDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"85631B69-7060-42D1-AE24-466BA10EB390"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E62EDC79-47AA-4CED-AB7F-1E4D158EB653"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91390","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/4d21b5c077db50c2a54b7f569d20f463cc2651f5","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/615212a14d7d87712202f37354acf8581987fc5a","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/79661610f6f65443e0ec1e382a7240437f28436c","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/8716855b309dbe65d7b9a5d681b80579b225b322","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/895a131d2eb7e447757a35d5731c7d647823ea8b","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/960fd1fd52023047a23d069178bfff7463c2cefc","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/be3ecbb4cca3fbe20e3b3aa4e049902d18b60865","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/d648ade18d6cbb796a93261491c121f078df2d88","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-26/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/4d21b5c077db50c2a54b7f569d20f463cc2651f5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/615212a14d7d87712202f37354acf8581987fc5a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/79661610f6f65443e0ec1e382a7240437f28436c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/8716855b309dbe65d7b9a5d681b80579b225b322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/895a131d2eb7e447757a35d5731c7d647823ea8b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/960fd1fd52023047a23d069178bfff7463c2cefc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/be3ecbb4cca3fbe20e3b3aa4e049902d18b60865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/d648ade18d6cbb796a93261491c121f078df2d88","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-26/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-5664","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-07-03T14:59:00.133","lastModified":"2026-06-17T00:29:33.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en File Station en QNAP QTS en versiones anteriores a 4.2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.4","matchCriteriaId":"0C1A57FA-64F7-4C5E-BBA2-2387CAD4FD51"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN42930233/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000119","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036123","source":"vultures@jpcert.or.jp"},{"url":"https://www.qnap.com/i/en/support/con_show.php?cid=93","source":"vultures@jpcert.or.jp","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN42930233/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.qnap.com/i/en/support/con_show.php?cid=93","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4509","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-07-03T14:59:06.727","lastModified":"2026-06-17T00:47:41.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file."},{"lang":"es","value":"Desbordamiento de buffer basado en memoria dinámica en elcsoft.exe en Eaton ELCSoft 2.4.01 y versiones anteriores permite a usuarios remotos autenticados ejecutar código arbitrario a través de un archivo manipulado."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eaton:elcsoft:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.01","matchCriteriaId":"CA47A40F-286A-414B-81D3-AAB7C98A2531"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91524","source":"ics-cert@hq.dhs.gov"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-408","source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-182-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/91524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-182-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-0221","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-03T21:59:00.133","lastModified":"2026-06-17T00:37:08.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Cognos TM1, tal como se utiliza en IBM Cognos Business Intelligence 10.2 en versiones anteriores a IF20, 10.2.1 en versiones anteriores a IF17, 10.2.1.1 en versiones anteriores a IF16, 10.2.2 en versiones anteriores a IF12 y 10.1.1 en versiones anteriores a IF19, permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B00BAD84-4BB6-41ED-835E-86AB150716D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*","matchCriteriaId":"6588FEE1-5A6F-4ED6-998A-B8CF54954F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA8132D-A09E-4D4C-9A5D-D708010CCFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7CCBB0AE-ECD1-4192-B1BB-18439A4CF7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4A2AA637-B4F6-4C44-BC71-B9C6B06BA670"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21984323","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91542","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036221","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21984323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0346","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-03T21:59:01.633","lastModified":"2026-06-17T00:37:22.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Cognos Business Intelligence 10.2 en versiones anteriores a IF20, 10.2.1 en versiones anteriores a IF17, 10.2.1.1 en versiones anteriores a IF16, 10.2.2 en versiones anteriores a IF12 y 10.1.1 en versiones anteriores a IF19 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B00BAD84-4BB6-41ED-835E-86AB150716D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*","matchCriteriaId":"6588FEE1-5A6F-4ED6-998A-B8CF54954F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA8132D-A09E-4D4C-9A5D-D708010CCFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7CCBB0AE-ECD1-4192-B1BB-18439A4CF7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4A2AA637-B4F6-4C44-BC71-B9C6B06BA670"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21984323","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85864","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036221","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21984323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/85864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0359","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-03T21:59:03.023","lastModified":"2026-06-17T00:37:23.423","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 Full before 8.5.5.10, and 8.5 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en IBM WebSphere Application Server (WAS) 7.0 en versiones anteriores a 7.0.0.43, 8.0 en versiones anteriores a 8.0.0.13, 8.5 Full en versiones anteriores a 8.5.5.10 y 8.5 Liberty en versiones anteriores a Liberty Fix Pack 16.0.0.2 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de separación de respuesta HTTP a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAC5F6C-D589-4337-88AD-4693AE953D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A8FC820-48D5-4850-82F7-8DA4A18EFF51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9BFBDE57-3895-4841-B23C-06336A7016EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CF56870A-F9D3-4544-B63A-EFC2E82A1F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"30B7A7B9-FCD1-4509-93CF-C5B736B04F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"C93D1CE2-1772-44C0-A8CB-73E9AA1AF6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"90BA0923-4064-49D3-82A2-EEFC4B0F9A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6289CCB4-9A13-4BB5-B44E-7CA936DD8421"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"833256BB-E2A6-4FE9-BE4F-982578023E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"9631D69C-AFEC-4CFF-9190-3E5435EDCEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE94EFF2-CA86-4179-8250-350DF0D2BE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"373412A5-2971-4C92-BAAE-A1B77D2DA723"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"920F69CD-DEDB-4393-BE6E-B837BA6820B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"7B5FE844-7F1C-4326-94EF-2CC0B4196085"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"5662B903-5480-403D-BC3D-2222F88264A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"3F830D7B-17C2-40B5-B4A4-7A99980F63AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"4D82C3F2-9C50-4D1A-B939-77FC53E44EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"03E6BAB6-D0D8-4698-BCF9-05D5A256FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.22:*:*:*:*:*:*:*","matchCriteriaId":"4EB7ACE7-6572-4D19-8E7A-BB9FC57AA343"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*","matchCriteriaId":"EF042A51-E34A-482C-8601-9FD09E6C866A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.24:*:*:*:*:*:*:*","matchCriteriaId":"075EC2D3-8A48-4103-910C-724A4CAF43DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*","matchCriteriaId":"3BFE6260-F130-44E1-9A31-985153F51385"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*","matchCriteriaId":"489E4427-4059-4026-B952-72364AFFC135"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.28:*:*:*:*:*:*:*","matchCriteriaId":"07170545-430F-493E-8EB1-0423774D4D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.29:*:*:*:*:*:*:*","matchCriteriaId":"B95D1940-E5AD-4B59-80B4-C3370BB03169"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.31:*:*:*:*:*:*:*","matchCriteriaId":"C7083F0E-57BA-4828-99E0-ECA8B54E2069"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.32:*:*:*:*:*:*:*","matchCriteriaId":"28C790DF-0D8B-473B-AC11-A6F02C81319E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.33:*:*:*:*:*:*:*","matchCriteriaId":"799B6FA0-0094-4CE9-8C63-8DBFF45E7260"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.34:*:*:*:*:*:*:*","matchCriteriaId":"0E3C74F1-5CF6-4C35-9F5A-B9EFE8153992"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.35:*:*:*:*:*:*:*","matchCriteriaId":"ABEFAA7D-56F8-4F73-A4E9-1A164B889F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.36:*:*:*:*:*:*:*","matchCriteriaId":"2D6CA79D-1B97-45EF-A40E-8ADD3644201B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.37:*:*:*:*:*:*:*","matchCriteriaId":"C39BC1E7-EDF9-4AD6-BA15-4E750903B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.38:*:*:*:*:*:*:*","matchCriteriaId":"FE7083FC-586B-49C4-BEED-E8AF6F7DDE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.39:*:*:*:*:*:*:*","matchCriteriaId":"28AF3645-415B-40BA-8024-32F7A3FCB7AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.41:*:*:*:*:*:*:*","matchCriteriaId":"3FB480DC-1A90-45EA-8BE6-08F451E59CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"07EBB48B-4EE2-4333-851E-BA1B104FBE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AF1667C5-D19B-469C-82D5-8406B6D75EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"89551609-69B7-452A-9CB2-04C12D268B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AF27B7D7-4442-47CA-880D-D3B5412AEF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B595B048-4204-49B4-9497-B8D119C8784D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC38B5D4-66A3-4671-9099-0F38D283BA94"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B357DB53-061F-43D5-9E9F-5D5468A5805B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"29ADADD2-EC21-4C45-A381-BC2091CD9F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2AD901DE-9258-40DA-A09B-B0CA9DCCF843"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8C21DDD3-C1CF-4CB2-BA13-4807F17AC5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A6DBD14D-F0F2-4606-BC55-ECB6CCA3EF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"1F994982-0972-4AC2-A0AB-BD3E46F7AA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7FAAF976-032D-49F7-AE25-29A85E371EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"B2B4F3AE-880A-45C9-8E31-A1F2548E58CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1FD8F9CE-4E98-4187-B84A-429FA1C65E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:-:liberty_profile:*:*:*:*:*","matchCriteriaId":"C59741DC-50CD-4F5A-BCB1-EB3B9AD58662"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"168E2F18-56C6-4789-BBAC-C99D4792046F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B53EBD40-8E1A-4516-927D-ED1CF212B211"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"1A4E88BA-F637-4400-A64F-E6516AE8917C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"32C745A6-FDE7-4236-BA1D-8BB22D184AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C8EE753-8773-4DFF-90A7-35CE45C7EC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"F4B0179F-C523-4835-BDF2-E7C2166B4B8A"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI58918","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21982526","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91484","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036184","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI58918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21982526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036184","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/93.html\">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>"}},{"cve":{"id":"CVE-2016-1398","sourceIdentifier":"psirt@cisco.com","published":"2016-07-03T21:59:07.680","lastModified":"2026-06-17T00:41:51.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669."},{"lang":"es","value":"Desbordamiento de buffer en la interfaz de gestión basada en web en dispositivos Cisco RV110W con firmware hasta la versión 1.2.1.4, dispositivos RV130W con firmware hasta la versión 1.0.2.7 y dispositivos RV215W con firmware hasta la versión 1.3.0.7 permite a usuarios remotos autenticados causar una denegación de servicio (reinicio del dispositivo) a través de una petición HTTP manipulada, también conocido como Bug ID CSCux86669."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv130w_firmware:1.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"ECCF42F5-8626-4D23-85B9-95644C7E98BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv130w_firmware:1.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"41EC53E2-7AC9-4998-9917-4C510E2BCBA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv130w_firmware:1.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"36A6781B-AC64-431F-959A-674F4C50F5C0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*","matchCriteriaId":"C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_firmware:1.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"5D028A9A-4CDF-4B67-829B-7B7E742FF04C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_firmware:1.2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9F712711-18F7-4FB8-8EBC-B42DC59B67A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_firmware:1.2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"97FC925D-46ED-4AB5-B55B-64C2A0F131AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv110w_firmware:1.2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"466E481B-7DD9-4AA0-B5E5-75BBE3820190"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*","matchCriteriaId":"20E8ECAC-E842-41DB-9612-9374A9648DC2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_firmware:1.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B109BB09-DF8C-4087-8C16-BF17D12A2863"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_firmware:1.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FA7BD747-2A0C-4ADE-9CD8-391676F9C070"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_firmware:1.2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4F96C05D-C899-4D1B-B45A-A30F2DE3A731"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_firmware:1.2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"E8A6EAAE-3AA3-4A52-97F0-71EC67677681"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:rv215w_firmware:1.3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"962B7F13-6D32-476B-8940-86D9CDE6979D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*","matchCriteriaId":"8686AB22-F757-468A-930B-DDE45B508969"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036115","source":"psirt@cisco.com"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1425","sourceIdentifier":"psirt@cisco.com","published":"2016-07-03T21:59:08.777","lastModified":"2026-06-17T00:41:57.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, and 15.4(1.13)S allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug ID CSCun66735."},{"lang":"es","value":"Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S y 15.4(1.13)S permite a atacantes remotos causar una denegación de servicio (caída del dispositivo) a través de un paquete LLDP manipulado, también conocido como Bug ID CSCun66735."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.0\\(2\\)sg5:*:*:*:*:*:*:*","matchCriteriaId":"CAD0EAC6-8B70-40C7-80D0-9BDD09AF5523"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(2\\)sg3:*:*:*:*:*:*:*","matchCriteriaId":"42D47483-F300-4224-86B2-6FBEFA35EE63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.2\\(1\\)e:*:*:*:*:*:*:*","matchCriteriaId":"07B725B7-AFBB-4F0D-87BA-38477E250374"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.3\\(3\\)s:*:*:*:*:*:*:*","matchCriteriaId":"AB84CE04-F2D0-4A37-B2BA-25126D1824D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.4\\(1.13\\)s:*:*:*:*:*:*:*","matchCriteriaId":"BB69F86A-F194-4A61-9F77-DEBFC74B0402"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91545","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036129","source":"psirt@cisco.com"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-ios1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-ios1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2862","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-03T21:59:11.883","lastModified":"2026-06-17T00:44:36.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 before 7.0.0.9 cumulative iFix 3, and 8.0 before 8.0.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Commerce 6.0 hasta la versión 6.0.0.11, 7.0 en versiones anteriores a 7.0.0.9 acumulable iFix 3 y 8.0 en versiones anteriores a 8.0.0.5 permite a atacantes remotos inyectar secuencia de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B59C1AD7-5E0A-4DB6-B1F9-BAE6C6BC52D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C21677D0-CF4E-4958-83A7-EF8C3AF4B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAF24659-1284-4762-925C-4879B56AC386"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"162FF755-CFF5-4AF2-B5D4-AEBA107DD93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4783F5D2-0709-4E5B-B6B7-DF7823E928CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8EB6E277-36B8-483E-8F9E-34D350BBB0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"40A7EA48-BCC0-41BD-975D-0C01B6066BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FA2AE738-BC94-4731-B6C3-54F808756ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FE23443C-6FB5-43AC-9822-1267AE61D14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"5952ADD8-4D62-401A-A5D3-1A63706D2F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8BA04184-B648-48CB-8664-D53AE07196BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F7D656-CFD1-4447-97CE-1D183CB41571"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:*:*:*:*:*:*:*","matchCriteriaId":"775206CE-A901-4653-BD17-DE1BFBA076FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"213C52C9-C5B5-4F26-BBB7-EE0824A995AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3CC937CD-1BE1-4827-9145-E2EA7F3AA792"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2A6189A9-E083-41D3-9D36-7B41D82EC197"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE6F4DC0-41E3-4F73-9F62-3D415F8949C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1ACFED34-9B1E-4950-9D03-756942EF32F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"202F791B-697B-4D9C-BF5D-84F7C657C790"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"012405FA-CE85-47B6-B368-2EAEBD06A15E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"05260EDC-BD28-4F89-809A-7852E294A540"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"66F86968-8BD4-42D0-A5C5-9685E3287D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CE2E7243-19A2-47B2-905E-47219F08F4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C534568E-A611-472C-9399-15FC66D875C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AEF3D419-A12C-4A21-9796-DBB73D638E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:8.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"87504CD1-92DA-4847-BDA7-013622CA7AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"625E1896-9035-46F3-957B-83FB128F90F2"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55049","source":"psirt@us.ibm.com","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55139","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55141","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55264","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983625","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91533","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036206","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6130","sourceIdentifier":"cve@mitre.org","published":"2016-07-03T21:59:18.040","lastModified":"2026-06-17T00:50:30.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the sclp_ctl_ioctl_sccb function in drivers/s390/char/sclp_ctl.c in the Linux kernel before 4.6 allows local users to obtain sensitive information from kernel memory by changing a certain length value, aka a \"double fetch\" vulnerability."},{"lang":"es","value":"Condición de carrera en la función sclp_ctl_ioctl_sccb en drivers/s390/char/sclp_ctl.c en el kernel de Linux en versiones anteriores a 4.6 permite a usuarios locales obtener información sensible de la memoria del kernel cambiando un valor de longitud determinado, también conocida como una vulnerabilidad \"double fetch\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.5","matchCriteriaId":"2870CD78-709E-4894-8CE7-147FD70F4070"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=532c34b5fbf1687df63b3fcd5b2846312ac943c6","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3616","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/538803/30/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91540","source":"cve@mitre.org"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=116741","source":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/532c34b5fbf1687df63b3fcd5b2846312ac943c6","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=532c34b5fbf1687df63b3fcd5b2846312ac943c6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538803/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=116741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/532c34b5fbf1687df63b3fcd5b2846312ac943c6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0899","sourceIdentifier":"security_alert@emc.com","published":"2016-07-04T16:59:00.130","lastModified":"2026-06-17T00:38:26.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files."},{"lang":"es","value":"EMC RSA Archer GRC 5.5.x en versiones anteriores a 5.5.3.4 permite a usuarios remotos autenticados leer el archivo web.config.bak y obtener información sensible de credenciales, modificando la configuración IIS para establecer una cabecera Content-Type para archivos .bak."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_archer_egrc:5.5:*:*:*:*:*:*:*","matchCriteriaId":"C3DB8B9F-A96F-4B38-B7B5-4D923FCFDBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_archer_egrc:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0816F652-D874-4884-9F07-618304B75823"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_archer_egrc:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3E25F9A8-0D26-4C4F-A5E1-F6895C3C1A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_archer_egrc:5.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"48E7FC43-B542-446C-B0C3-2397BA9A8654"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_archer_egrc:5.5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"93AC15A9-4869-4593-B06D-0111E625C94D"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Jun/54","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1036080","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/Jun/54","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5848","sourceIdentifier":"cve@mitre.org","published":"2016-07-04T16:59:01.863","lastModified":"2026-06-17T00:50:08.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges."},{"lang":"es","value":"Siemens SICAM PAS en versiones anteriores a 8.07 no restringe adecuadamente datos de contraseña en la base de datos, lo que facilita a usuarios locales calcular contraseñas aprovechando privilegios de base de datos no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:N/A:N","baseScore":1.7,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sicam_pas\\/pqs:*:*:*:*:*:*:*:*","versionEndIncluding":"8.07","matchCriteriaId":"528009F7-CD1B-44E6-8C83-994B047DBB1D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91525","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/91525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4465","sourceIdentifier":"secalert@redhat.com","published":"2016-07-04T22:59:10.117","lastModified":"2026-06-17T00:47:36.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field."},{"lang":"es","value":"La clase URLValidator en Apache Struts 2 2.3.20 hasta la versión 2.3.28.1 y 2.5.x en versiones anteriores a 2.5.1 permite a atacantes remotos provocar una denegación de servicio a través de un valor nulo para un campo URL."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*","matchCriteriaId":"22FF6282-0BCA-46EB-9648-6EE3EDA189F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*","matchCriteriaId":"6D1467BC-9BC8-402D-A420-615CF9698648"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.20.3:*:*:*:*:*:*:*","matchCriteriaId":"880AEA69-3705-447D-80FF-60753248158F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*","matchCriteriaId":"524C5119-416D-413B-BF1D-29291E23FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*","matchCriteriaId":"45446B16-F531-4C6D-B889-A8A6622C70A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*","matchCriteriaId":"71823E13-1896-4EE4-A49C-CFFB717FFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*","matchCriteriaId":"C778ADED-75B5-4AD3-8CDC-EFDFFAD5A742"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*","matchCriteriaId":"067F6249-CC5A-4402-843C-06D5F9F77267"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.5:*:*:*:*:*:*:*","matchCriteriaId":"63CE1226-E0E6-4DC6-AC89-3FFDE6BD7B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E17D62B8-349B-4F30-8849-6912828802C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.5:beta2:*:*:*:*:*:*","matchCriteriaId":"D5E91133-D585-43F7-9093-94D735B3167E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.5:beta3:*:*:*:*:*:*","matchCriteriaId":"DD44FD72-ECE7-4E08-AD9E-5CE2C310C2C8"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN12352818/index.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000114","source":"secalert@redhat.com","tags":["VDB Entry","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987854","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91278","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348253","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://struts.apache.org/docs/s2-041.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN12352818/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1348253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://struts.apache.org/docs/s2-041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4955","sourceIdentifier":"cve@mitre.org","published":"2016-07-05T01:59:02.267","lastModified":"2026-06-17T00:48:29.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time."},{"lang":"es","value":"ntpd en NTP 4.x en versiones anteriores a 4.2.8p8, cuando está habilitada la autoclave, permite a atacantes remotos provocar una denegación de servicio (limpiando el par variable y corte de asociación) enviando (1) un paquete crypto-NAK manipulado o (2) un paquete con un valor MAC incorrecto en un momento determinado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.8","matchCriteriaId":"C240BAAB-8C12-4501-9DC6-FB877304E908"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3.0","versionEndExcluding":"4.3.93","matchCriteriaId":"863751A2-A97F-47CD-8D57-6D60E6F3593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*","matchCriteriaId":"EEA51D83-5841-4335-AF07-7A43C118CAAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*","matchCriteriaId":"C855BBD2-2B38-4EFF-9DBE-CA61CCACD0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*","matchCriteriaId":"49ADE0C3-F75C-4EC0-8805-56013F0EB92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*","matchCriteriaId":"D8FF625A-EFA3-43D1-8698-4A37AE31A07C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*","matchCriteriaId":"E3B99BBD-97FE-4615-905A-A614592226F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*","matchCriteriaId":"E7A9AD3A-F030-4331-B52A-518BD963AB8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*","matchCriteriaId":"C293B8BE-6691-4944-BCD6-25EB98CABC73"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*","matchCriteriaId":"CEA650F8-2576-494A-A861-61572CA319D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*","matchCriteriaId":"4ED21EE8-7CBF-4BC5-BFC3-185D41296238"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*","matchCriteriaId":"C76A0B44-13DE-4173-8D05-DA54F6A71759"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*","matchCriteriaId":"1450241C-2F6D-4122-B33C-D78D065BA403"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*","matchCriteriaId":"721AFD22-91D3-488E-A5E6-DD84C86E412B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*","matchCriteriaId":"8D6ADDB1-2E96-4FF6-AE95-4B06654D38B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*","matchCriteriaId":"41E44E9F-6383-4E12-AEDC-B653FEA77A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*","matchCriteriaId":"466D9A37-2658-4695-9429-0C6BF4A631C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*","matchCriteriaId":"99774181-5F12-446C-AC2C-DB1C52295EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*","matchCriteriaId":"4427EE6D-3F79-4FF5-B3EC-EE6BD01562CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*","matchCriteriaId":"99C71C00-7222-483B-AEFB-159337BD3C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*","matchCriteriaId":"75A9AA28-1B20-44BB-815C-7294A53E910E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*","matchCriteriaId":"8C213794-111D-41F3-916C-AD97F731D600"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*","matchCriteriaId":"50811A7B-0379-4437-8737-B4C1ACBC9EFD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CBED083-B935-4C47-BBDA-F39D8EA277ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*","matchCriteriaId":"BD6136E8-74DE-48AF-A8AB-B0E93D34870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"514646C5-C5D4-487E-8950-B3A2B1DE8EEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"CB6476C7-03F2-4939-AB85-69AA524516D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*","matchCriteriaId":"B12243B2-D726-404C-ABFF-F1AB51BA1783"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"22EFD09A-3D77-47B0-93FB-50F6C13A2F9A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp_443-1_opc_ua:-:*:*:*:*:*:*:*","matchCriteriaId":"7F488810-73E3-4475-975A-C2FCA037E78B"}]}]}],"references":[{"url":"http://bugs.ntp.org/3043","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137322/FreeBSD-Security-Advisory-FreeBSD-SA-16-24.ntp.html","source":"cve@mitre.org"},{"url":"http://support.ntp.org/bin/view/Main/NtpBug3043","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/321640","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538599/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/538600/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91007","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036037","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3096-1","source":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/","source":"cve@mitre.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201607-15","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11","source":"cve@mitre.org"},{"url":"https://www.kb.cert.org/vuls/id/321640","source":"cve@mitre.org"},{"url":"http://bugs.ntp.org/3043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/137322/FreeBSD-Security-Advisory-FreeBSD-SA-16-24.ntp.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ntp.org/bin/view/Main/NtpBug3043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/321640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538599/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538600/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3096-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201607-15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/321640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4956","sourceIdentifier":"cve@mitre.org","published":"2016-07-05T01:59:03.283","lastModified":"2026-06-17T00:48:29.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548."},{"lang":"es","value":"ntpd en NTP 4.x en versiones anteriores a 4.2.8p8 permite a atacantes remotos provocar una denegación de servicio (transición de modo intercalado y cambio de hora) a través de un paquete de difusión manipulado. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2016-1548."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.8","matchCriteriaId":"C240BAAB-8C12-4501-9DC6-FB877304E908"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3.0","versionEndExcluding":"4.3.93","matchCriteriaId":"863751A2-A97F-47CD-8D57-6D60E6F3593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*","matchCriteriaId":"EEA51D83-5841-4335-AF07-7A43C118CAAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*","matchCriteriaId":"C855BBD2-2B38-4EFF-9DBE-CA61CCACD0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*","matchCriteriaId":"49ADE0C3-F75C-4EC0-8805-56013F0EB92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*","matchCriteriaId":"D8FF625A-EFA3-43D1-8698-4A37AE31A07C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*","matchCriteriaId":"E3B99BBD-97FE-4615-905A-A614592226F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*","matchCriteriaId":"E7A9AD3A-F030-4331-B52A-518BD963AB8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*","matchCriteriaId":"C293B8BE-6691-4944-BCD6-25EB98CABC73"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*","matchCriteriaId":"CEA650F8-2576-494A-A861-61572CA319D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*","matchCriteriaId":"4ED21EE8-7CBF-4BC5-BFC3-185D41296238"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*","matchCriteriaId":"C76A0B44-13DE-4173-8D05-DA54F6A71759"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*","matchCriteriaId":"1450241C-2F6D-4122-B33C-D78D065BA403"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*","matchCriteriaId":"721AFD22-91D3-488E-A5E6-DD84C86E412B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*","matchCriteriaId":"8D6ADDB1-2E96-4FF6-AE95-4B06654D38B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*","matchCriteriaId":"41E44E9F-6383-4E12-AEDC-B653FEA77A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*","matchCriteriaId":"466D9A37-2658-4695-9429-0C6BF4A631C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*","matchCriteriaId":"99774181-5F12-446C-AC2C-DB1C52295EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*","matchCriteriaId":"4427EE6D-3F79-4FF5-B3EC-EE6BD01562CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*","matchCriteriaId":"99C71C00-7222-483B-AEFB-159337BD3C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*","matchCriteriaId":"75A9AA28-1B20-44BB-815C-7294A53E910E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*","matchCriteriaId":"8C213794-111D-41F3-916C-AD97F731D600"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*","matchCriteriaId":"50811A7B-0379-4437-8737-B4C1ACBC9EFD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CBED083-B935-4C47-BBDA-F39D8EA277ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*","matchCriteriaId":"BD6136E8-74DE-48AF-A8AB-B0E93D34870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"514646C5-C5D4-487E-8950-B3A2B1DE8EEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*","matchCriteriaId":"CB6476C7-03F2-4939-AB85-69AA524516D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*","matchCriteriaId":"B12243B2-D726-404C-ABFF-F1AB51BA1783"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*","matchCriteriaId":"55C5561F-BE86-4EEA-99D4-8697F8BD9DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"22EFD09A-3D77-47B0-93FB-50F6C13A2F9A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp_443-1_opc_ua:-:*:*:*:*:*:*:*","matchCriteriaId":"7F488810-73E3-4475-975A-C2FCA037E78B"}]}]}],"references":[{"url":"http://bugs.ntp.org/3042","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html","source":"cve@mitre.org"},{"url":"http://support.ntp.org/bin/view/Main/NtpBug3042","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/321640","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538599/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/538600/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/540683/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/archive/1/540683/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91009","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036037","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3096-1","source":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/","source":"cve@mitre.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201607-15","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11","source":"cve@mitre.org"},{"url":"https://www.kb.cert.org/vuls/id/321640","source":"cve@mitre.org"},{"url":"http://bugs.ntp.org/3042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ntp.org/bin/view/Main/NtpBug3042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/321640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538599/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538600/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/540683/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/archive/1/540683/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3096-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201607-15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/321640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5097","sourceIdentifier":"cve@mitre.org","published":"2016-07-05T01:59:05.673","lastModified":"2026-06-17T00:48:45.373","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs."},{"lang":"es","value":"phpMyAdmin en versiones anteriores a 4.6.2 emplaza tokens en cadenas de consulta y no gestiona su eliminación antes de la navegación externa, lo que permite a atacantes remotos obtener información sensible leyendo (1) peticiones HTTP o (2) los registros del servidor."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.1","matchCriteriaId":"243F912A-3C8F-4187-A259-427CAAB45F81"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035978","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/11eb574242d2526107366d367ab5585fbe29578f","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/59e56bd63a5e023b797d82eb272cd074e3b4bfd1","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/5fc8020c5ba9cd2e38beb5dfe013faf2103cdf0f","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/8326aaebe54083d9726e153abdd303a141fe5ad3","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-14","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/11eb574242d2526107366d367ab5585fbe29578f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/59e56bd63a5e023b797d82eb272cd074e3b4bfd1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/5fc8020c5ba9cd2e38beb5dfe013faf2103cdf0f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/8326aaebe54083d9726e153abdd303a141fe5ad3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5098","sourceIdentifier":"cve@mitre.org","published":"2016-07-05T01:59:06.677","lastModified":"2026-06-17T00:48:45.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en libraries/error_report.lib.php en phpMyAdmin en versiones anteriores a 4.6.2-prerelease permite a atacantes remotos determinar la existencia de archivos arbitrarios desencadenando un error."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E62EDC79-47AA-4CED-AB7F-1E4D158EB653"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035980","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-15","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}],"evaluatorComment":"Per <a href=\"https://www.phpmyadmin.net/security/PMASA-2016-15/\">Vendor  Advisory</a>:  \"No released version was vulnerable.\""}},{"cve":{"id":"CVE-2016-5099","sourceIdentifier":"cve@mitre.org","published":"2016-07-05T01:59:07.613","lastModified":"2026-06-17T00:48:45.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding."},{"lang":"es","value":"Vulnerabilidad de XSS en phpMyAdmin 4.4.x en versiones anteriores a 4.4.15.6 y 4.6.x en versiones anteriores a 4.6.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de caracteres especiales que no son manejados adecuadamente durante la doble decodificación URL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"13CD0228-728B-437A-84C1-BD7AFA52FFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF55485-9892-4E7B-AEE0-017E61EAA7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6100FE3E-0A31-4B55-90F2-90AF765A8EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E06B1D3-29B4-45B7-B81F-C864AF579011"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2E3923-0E2B-411A-B091-088E6FF050D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1848C748-804D-4FE4-AB9C-B1BF9E58A19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"12296322-DFAD-4B36-83EC-D01BF5DF7F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA321C14-C8F4-41FC-B601-2F646064ABBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF3DBC5-7020-48D0-ADEA-E71776DB2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"317F952E-5F12-4ED3-8FA3-FC1106B50F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"87B97F98-C0A7-4D9E-8333-7EE9EC456A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7A1E753D-5653-4D7A-8E41-6C02511EBFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*","matchCriteriaId":"417230C7-0EC2-49F4-B810-A8AE84A302AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*","matchCriteriaId":"103FEAB1-194E-4CEF-935A-4DBCCA298205"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*","matchCriteriaId":"C5814003-9FF8-4F8E-9D90-A2BBB80B8451"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*","matchCriteriaId":"16D28B77-9353-4259-9299-30638A78CCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*","matchCriteriaId":"C022292B-6E06-4328-842F-135A872D22AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*","matchCriteriaId":"F15F00FB-BB9B-4D54-B198-0A74D418B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*","matchCriteriaId":"DC10AF20-7B65-4FAE-A2AD-783867D60A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*","matchCriteriaId":"4BED20D9-C571-4BC5-9A54-450A364C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*","matchCriteriaId":"2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C641F362-D37D-47CB-BE6C-36E5F116F844"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"A0EA8819-70F8-48DC-8667-6CF25E7D9C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DD2796DA-3E74-4765-90D1-783849C7A44C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4024DA77-BFE4-48C6-A2AF-46003071BDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"85631B69-7060-42D1-AE24-466BA10EB390"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/90877","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035979","source":"cve@mitre.org"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/b061096abd992801fbbd805ef6ff74e627528780","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"cve@mitre.org"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-16","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/b061096abd992801fbbd805ef6ff74e627528780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/201701-32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1546","sourceIdentifier":"cret@cert.org","published":"2016-07-06T14:59:01.503","lastModified":"2026-06-17T00:42:08.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service (stream-processing outage) via modified flow-control windows."},{"lang":"es","value":"El servidor HTTP Apache 2.4.17 y 2.4.18, cuando mod_http2 está activado, no limita el número de trabajadores de flujo simultáneos para una sola conexión HTTP/2, lo que permite a atacantes remotos provocar una denegación de servicio (corte de flujo de procesamiento) a través de las ventanas de control de flujo modificadas."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"E1F45B27-504B-4202-87B8-BD3B094003F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"F2FB2B98-DFD2-420A-8A7F-9B288651242F"}]}]}],"references":[{"url":"http://httpd.apache.org/security/vulnerabilities_24.html","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1733727","source":"cret@cert.org"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.4","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/92331","source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1161","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cret@cert.org"},{"url":"https://security.gentoo.org/glsa/201610-02","source":"cret@cert.org"},{"url":"https://security.netapp.com/advisory/ntap-20180601-0001/","source":"cret@cert.org"},{"url":"http://httpd.apache.org/security/vulnerabilities_24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1733727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180601-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4507","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-07-06T14:59:02.503","lastModified":"2026-06-17T00:47:41.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 y versiones anteriores permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bosch:bladecontrol-webvis:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2","matchCriteriaId":"E396476A-37E1-4D6C-AC49-45B20A834743"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4508","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-07-06T14:59:03.487","lastModified":"2026-06-17T00:47:41.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bosch:bladecontrol-webvis:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2","matchCriteriaId":"E396476A-37E1-4D6C-AC49-45B20A834743"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-6170","sourceIdentifier":"secalert@redhat.com","published":"2016-07-06T14:59:05.597","lastModified":"2026-06-17T00:50:34.360","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message."},{"lang":"es","value":"ISC BIND hasta la versión 9.9.9-P1, 9.10.x hasta la versión 9.10.4-P1 y 9.11.x hasta la versión 9.11.0b1 permite a servidores DNS primarios provocar una denegación de servicio (caída de servidor DNS secundario) a través de una respuesta AXFR grande, y posiblemente permite a servidores IXFR provocar una denegación de servicio (caída de cliente IXFR) a través de una respuesta IXFR grande y permite a usuarios remotos autenticados provocar una denegación de servicio (caída de servidor DNS primario) a través de un mensaje UPDATE grande."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.9.8","matchCriteriaId":"493B9A51-FA5C-4E94-871F-83AE4ED9EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionStartIncluding":"9.10.0","versionEndIncluding":"9.10.3","matchCriteriaId":"667502D2-746A-4FE6-8752-ED19ADA20981"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*","matchCriteriaId":"2A2CF04B-BF26-43F9-8BF4-CEBB9BE3AE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:beta1:*:*:*:*:*:*","matchCriteriaId":"81E0A500-84EA-47E2-9767-19D8D08CC344"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:beta2:*:*:*:*:*:*","matchCriteriaId":"F1E53DC4-53B9-4127-9B8D-96DFFD1E340F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*","matchCriteriaId":"376915CA-6BDB-423E-B216-64B098344DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:*","matchCriteriaId":"477AA5E9-2C6F-4CCC-B596-F3DF5AAB13C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*","matchCriteriaId":"BB2D2132-62E8-4E73-A0BF-4790DAFC5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.11.0:a1:*:*:*:*:*:*","matchCriteriaId":"D72B0718-8054-4C8C-8FAF-0DC79C3B4D4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.11.0:a2:*:*:*:*:*:*","matchCriteriaId":"4F155EC7-B84E-4C05-908A-BFBAF2CE612D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.11.0:a3:*:*:*:*:*:*","matchCriteriaId":"C6C3D04E-B352-4124-A8A5-68AA90EC95DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.11.0:b1:*:*:*:*:*:*","matchCriteriaId":"E053C268-5C5F-4ED4-91CF-F8F795185C25"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/07/06/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91611","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036241","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353563","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/sischkg/xfer-limit/blob/master/README.md","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"https://kb.isc.org/article/AA-01390","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01390/169/CVE-2016-6170","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015073.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015075.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-07","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/06/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/sischkg/xfer-limit/blob/master/README.md","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"https://kb.isc.org/article/AA-01390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01390/169/CVE-2016-6170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0230","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-07T14:59:00.237","lastModified":"2026-06-17T00:37:09.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors."},{"lang":"es","value":"IBM Power Hardware Management Console (HMC) 7.3 hasta la versión 7.3.0 SP7, 7.9 hasta la versión 7.9.0 SP3, 8.1 hasta la versión 8.1.0 SP3, 8.2 hasta la versión 8.2.0 SP2, 8.3 hasta la versión 8.3.0 SP2, 8.4 hasta la versión 8.4.0 SP1 y 8.5.0 permite a atacantes físicamente próximos obtener acceso de root a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.9.0:-:*:*:*:*:*:*","matchCriteriaId":"374E33CA-EBEF-49FB-B941-07118D3A6D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6F702523-55BE-4743-88F3-DB1539269D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA2834CF-DFDF-4BEA-9BE0-BD1C11C918D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp3:*:*:*:*:*:*","matchCriteriaId":"CDB8E8D9-2AE1-48D5-9F71-99BC3F97066D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.1.0:-:*:*:*:*:*:*","matchCriteriaId":"4C37D81D-56E4-4AED-AD5E-1ED483535849"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"33DA50CC-EE92-4386-B2E2-25DDB7B39984"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D6F97979-8DE1-49FA-BD67-424655913D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp3:*:*:*:*:*:*","matchCriteriaId":"8135B772-98EE-484E-87F3-3C4CD7AF41F5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.2.0:-:*:*:*:*:*:*","matchCriteriaId":"76F757D9-6B24-4B9D-B584-143E523F1AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9EA06BD4-ADFB-4419-BD0D-DC2B35A05C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B09B0AE3-AF65-4821-9CE1-4D06BB937A1F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.3.0:-:*:*:*:*:*:*","matchCriteriaId":"C3406E93-1C05-4D55-B52F-0C95E1635365"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"A7D67F4F-5E80-44C8-95F4-044BB54CADFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"17A95F76-30EA-45CC-AA46-5AA3CAB8B668"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.3.0:-:*:*:*:*:*:*","matchCriteriaId":"C1E0BDA3-FF99-49FC-A89B-64789A4D6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"76115CAB-E39D-4F7F-AE6C-5B234AE6C23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp4:*:*:*:*:*:*","matchCriteriaId":"56BACDE1-5CC6-4692-AEAD-66F4A8A5DF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp5:*:*:*:*:*:*","matchCriteriaId":"0C3ACD74-718E-40E1-B38C-01EAE90A0253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp7:*:*:*:*:*:*","matchCriteriaId":"FEC79BEA-AB54-42E5-89C3-1153A8A2105A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.4.0:-:*:*:*:*:*:*","matchCriteriaId":"B147086F-706C-4C62-B7FA-EE20F5A222D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"1BF354DF-8ADB-41D7-B990-5B5597817401"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"42172521-C8D9-47C1-9A43-5A54A6A247F5"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91535","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0389","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-07T14:59:01.830","lastModified":"2026-06-17T00:37:26.633","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Admin Center en IBM WebSphere Application Server (WAS) 8.5.5.2 hasta la versión 8.5.5.9 Liberty en versiones anteriores a Liberty Fix Pack 16.0.0.2 permite a atacantes remotos obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.2:*:*:*:liberty:*:*:*","matchCriteriaId":"04599812-6515-48A0-A9C9-0A3B30689D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.3:*:*:*:liberty:*:*:*","matchCriteriaId":"5701BCC0-9E93-41E5-8DC4-EA26C95148D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.4:*:*:*:liberty:*:*:*","matchCriteriaId":"B0ECF4C0-B755-4221-A074-15A775FB452E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.5:*:*:*:liberty:*:*:*","matchCriteriaId":"3029A691-2288-453A-8FC0-7598EF60357C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.6:*:*:*:liberty:*:*:*","matchCriteriaId":"03ED302A-CCAB-400F-8525-C69BF05CD4B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.7:*:*:*:liberty:*:*:*","matchCriteriaId":"14095436-08EA-4DE2-8C4E-8D7380316065"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.8:*:*:*:liberty:*:*:*","matchCriteriaId":"759D5AD7-4EC7-4308-8ACA-16D3C6EEF883"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:8.5.5.9:*:*:*:liberty:*:*:*","matchCriteriaId":"1EA01F06-A4BD-4BC2-B269-D8C9136A5F02"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI62052","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21982012","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91515","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI62052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21982012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1444","sourceIdentifier":"psirt@cisco.com","published":"2016-07-07T14:59:05.970","lastModified":"2026-06-17T00:41:59.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601."},{"lang":"es","value":"El componente Mobile and Remote Access (MRA) en Cisco TelePresence Video Communication Server (VCS) X8.1 hasta la versión X8.7 y Expressway X8.1 hasta la versión X8.6 no maneja correctamente los certificados, lo que permite a atacantes remotos eludir la autenticación a través de un certificado confiable manipulado, también conocido como Bug ID CSCuz64601."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.1:*:*:*:*:*:*:*","matchCriteriaId":"935A6CEE-3860-4D6F-A09F-3852ACE2A6C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4D72830A-472E-4634-BDE8-B0210DFA88B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"920FE47B-5E1C-4EC3-92C1-D173468CB6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.2:*:*:*:*:*:*:*","matchCriteriaId":"AE36B64A-8826-4B79-ABC3-867325CEDC57"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8FB9EE33-F267-4CC2-8FDA-724235EE5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"68882242-65D5-452C-B84C-666C13627A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5:rc4:*:*:*:*:*:*","matchCriteriaId":"BD2525F4-19BE-4865-949D-467022385A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F2340556-9735-40A8-B57D-C27A16F3B45A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"FABB3CEE-81DB-49FB-8C00-913AFAF9B617"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9B49F452-C359-41B2-8A7F-79FE034015FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.3:*:*:*:*:*:*:*","matchCriteriaId":"074E887D-3234-415A-A339-D74BDE003F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B99CF9AE-32DE-483A-B0E3-437384E64427"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8C16F599-AB82-4609-AADD-BE8D40984DB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7:*:*:*:*:*:*:*","matchCriteriaId":"BD644623-840C-424C-82EE-20FC01A9E56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.1:*:*:*:expressway:*:*:*","matchCriteriaId":"E66073CB-E4BF-458F-B645-5EFA5FB3067D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.2:*:*:*:expressway:*:*:*","matchCriteriaId":"E549E37F-3D1A-490B-8BEE-482D082486EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.5.3:*:*:*:expressway:*:*:*","matchCriteriaId":"1BB58937-A990-48B1-89E4-6C0EDADC84E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_video_communication_server_software:x8.6:*:*:*:expressway:*:*:*","matchCriteriaId":"D44B9E1D-623E-4C76-B4DD-5BEACEFF9154"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91669","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036237","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-0252","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-08T01:59:01.663","lastModified":"2026-06-17T00:37:11.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors."},{"lang":"es","value":"IBM Control Center 6.x en versiones anteriores a 6.0.0.1 iFix06 y Sterling Control Center 5.4.x en versiones anteriores a 5.4.2.1 iFix09 permiten a usuarios locales descifrar la clave maestra a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:control_center:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E25AFD79-FD16-41A5-8BB0-B85E02EE0CCE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_control_center:5.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"009662B8-A5FB-44AB-B2A1-2E7497C95BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_control_center:5.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"39B4F368-32E7-4C9E-B81A-874298F8C3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_control_center:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AD97BBDA-EE72-46A9-8C06-97114654C967"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_control_center:5.4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"EAD7B1C9-5CD3-4854-879C-EE0839E02E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_control_center:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"AA2456E9-8F42-4765-956D-B2F09857BA6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_control_center:5.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8710F9BC-610B-48CB-9916-DD03F9025A5C"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985641","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0313","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-08T01:59:05.337","lastModified":"2026-06-17T00:37:19.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2888 and CVE-2016-0350."},{"lang":"es","value":"Vulnerabilidad de XSS en el Report Builder and Data Collection Component (DCC) en IBM Jazz Reporting Service (JRS) 5.x en versiones anteriores a 5.0.2 ifix016 y 6.x en versiones anteriores a 6.0.1 ifix005 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2016-2888 y CVE-2016-0350."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4D226029-A37F-486C-9DCD-1921671F242D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"83152595-8909-4AA4-A7D1-2E113A197B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"103F9E24-E11F-4BAC-8EDB-86D332B9EC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*","matchCriteriaId":"07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF3780DD-9FAC-4850-AA83-DCA7D013FB3E"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983147","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0314","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-08T01:59:06.350","lastModified":"2026-06-17T00:37:19.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors."},{"lang":"es","value":"El Report Builder and Data Collection Component (DCC) en IBM Jazz Reporting Service (JRS) 5.x en versiones anteriores a 5.0.2 ifix016 y 6.x en versiones anteriores a 6.0.1 ifix005 permiten a usuarios remotos autenticados llevar a cabo ataques de secuestro de clic a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4D226029-A37F-486C-9DCD-1921671F242D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"83152595-8909-4AA4-A7D1-2E113A197B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"103F9E24-E11F-4BAC-8EDB-86D332B9EC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*","matchCriteriaId":"07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF3780DD-9FAC-4850-AA83-DCA7D013FB3E"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983147","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91697","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0350","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-08T01:59:08.243","lastModified":"2026-06-17T00:37:22.560","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2888 and CVE-2016-0313."},{"lang":"es","value":"Vulnerabilidad de XSS en el Report Builder and Data Collection Component (DCC) en IBM Jazz Reporting Service (JRS) 5.x en versiones anteriores a 5.0.2 ifix016 y 6.x en versiones anteriores a 6.0.1 ifix005 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2016-2888 y CVE-2016-0313."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4D226029-A37F-486C-9DCD-1921671F242D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"83152595-8909-4AA4-A7D1-2E113A197B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"103F9E24-E11F-4BAC-8EDB-86D332B9EC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*","matchCriteriaId":"07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF3780DD-9FAC-4850-AA83-DCA7D013FB3E"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983147","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2888","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-08T01:59:09.290","lastModified":"2026-06-17T00:44:39.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0313 and CVE-2016-0350."},{"lang":"es","value":"Vulnerabilidad de XSS en el Report Builder and Data Collection Component (DCC) en IBM Jazz Reporting Service (JRS) 5.x en versiones anteriores a 5.0.2 ifix016 y 6.x en versiones anteriores a 6.0.1 ifix005 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, una vulnerabilidad diferente a CVE-2016-0313 y CVE-2016-0350."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4D226029-A37F-486C-9DCD-1921671F242D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"83152595-8909-4AA4-A7D1-2E113A197B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"103F9E24-E11F-4BAC-8EDB-86D332B9EC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*","matchCriteriaId":"07DD3FB3-ABE3-4645-9AFB-429EA4EA818D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF3780DD-9FAC-4850-AA83-DCA7D013FB3E"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983147","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-9798","sourceIdentifier":"security@android.com","published":"2016-07-11T01:59:19.787","lastModified":"2026-06-17T00:19:00.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service (OS outage) via a crafted application, aka Android internal bug 28821448 and Qualcomm internal bug CR681965."},{"lang":"es","value":"platform/msm_shared/dev_tree.c en el gestor de arranque de Qualcomm en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 5 no comprueba la relación entre direcciones de etiquetas y direcciones aboot, lo que permite a atacantes provocar una denegación de servicio (corte de SO) a través de una aplicación manipulada, también conocido como error interno de Android 28821448 y error interno de Qualcomm CR681965."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=b05eed2491a098bf627ac485a5b43d2f4fae2484","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=b05eed2491a098bf627ac485a5b43d2f4fae2484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8893","sourceIdentifier":"security@android.com","published":"2016-07-11T01:59:31.353","lastModified":"2026-06-17T00:35:26.457","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial of service (OS outage or buffer over-read) via a crafted application, aka Android internal bug 28822690 and Qualcomm internal bug CR822275."},{"lang":"es","value":"app/aboot/aboot.c en el gestor de arranque de Qualcomm en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 5 y 7 (2013) permite a atacantes provocar una denegación de servicio (interrupción del SO o sobre lectura del buffer) a través de una aplicación manipulada, también conocido como error interno de Android 28822690 y error interno de Qualcomm CR822275."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=800255e8bfcc31a02e89460460e3811f225e7a69","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=800255e8bfcc31a02e89460460e3811f225e7a69","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3761","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:02.433","lastModified":"2026-06-17T00:46:19.563","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive foreground-application information via a crafted background application, aka internal bug 28300969."},{"lang":"es","value":"NfcService.java en NFC en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-07-01 permite a atacantes obtener información de aplicación de primer plano sensible a través de una aplicación de fondo manipulada, también conocido como error interno 28300969."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/apps/Nfc/+/9ea802b5456a36f1115549b645b65c791eff3c2c","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/packages/apps/Nfc/+/9ea802b5456a36f1115549b645b65c791eff3c2c","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3764","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:05.653","lastModified":"2026-06-17T00:46:19.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive pointer information via a crafted application, aka internal bug 28377502."},{"lang":"es","value":"media/libmediaplayerservice/MetadataRetrieverClient.cpp en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-07-01 permite a atacantes obtener información sensible de puntero a través de una aplicación manipulada, también conocido como error interno 28377502."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/av/+/daef4327fe0c75b0a90bb8627458feec7a301e1f","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/frameworks/av/+/daef4327fe0c75b0a90bb8627458feec7a301e1f","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3809","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:33.140","lastModified":"2026-06-17T00:46:22.893","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The networking component in Android before 2016-07-05 on Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 27532522."},{"lang":"es","value":"El componente de red en Android en versiones anteriores a 2016-07-05 en dispositivos Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player y Pixel C permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno 27532522."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3810","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:34.033","lastModified":"2026-06-17T00:46:23.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28175522 and MediaTek internal bug ALPS02694389."},{"lang":"es","value":"El controlador Wi-Fi de MediaTek en Android en versiones anteriores a 2016-07-05 en dispositivos Android One permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28175522 y error interno de MediaTek ALPS02694389."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3812","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:35.783","lastModified":"2026-06-17T00:46:23.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28174833 and MediaTek internal bug ALPS02688832."},{"lang":"es","value":"El controlador de códec de vídeo de MediaTek en Android en versiones anteriores a 2016-07-05 en dispositivos Android One permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28174833 y error interno de MediaTek ALPS02688832."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3813","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:36.860","lastModified":"2026-06-17T00:46:23.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28172322 and Qualcomm internal bug CR1010222."},{"lang":"es","value":"El controlador USB de Qualcomm en Android en versiones anteriores 2016-07-05 en dispositivos Nexus 5, 5X, 6 y 6P permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28172322 y error interno de Qualcomm CR1010222."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3814","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:37.720","lastModified":"2026-06-17T00:46:23.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28193342."},{"lang":"es","value":"El controlador de cámara NVIDIA en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 9 permite a atacantes obtener información sensible a través de una información manipulada, también conocido como error interno de Android 28193342."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4561","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3815","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:38.673","lastModified":"2026-06-17T00:46:23.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28522274."},{"lang":"es","value":"El controlador de cámara NVIDIA en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 9 permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28522274."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4561","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3816","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:39.550","lastModified":"2026-06-17T00:46:23.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28402240."},{"lang":"es","value":"El controlador de pantalla de MediaTek en Android en versiones anteriores a 2016-07-05 en dispositivos Android One permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28402240."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3818","sourceIdentifier":"security@android.com","published":"2016-07-11T02:00:40.423","lastModified":"2026-06-17T00:46:23.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libc in Android 4.x before 4.4.4 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 28740702."},{"lang":"es","value":"libc en Android 4.x en versiones anteriores a 4.4.4 permite a atacantes remotos provocar una denegación de servicio (cuelgue o reinicio del dispositivo) a través de un archivo manipulado, también conocido como error interno 28740702."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1445","sourceIdentifier":"psirt@cisco.com","published":"2016-07-12T01:59:45.140","lastModified":"2026-06-17T00:41:59.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliance (ASA) Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Echo Reply ACLs via vectors related to subtypes."},{"lang":"es","value":"Cisco Adaptive Security Appliance (ASA) Software 8.2 hasta la versión 9.4.3.3 permite a atacantes remotos eludir el ICMP Echo Reply ACLs previsto a través de vectores relacionados con los subtipos."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2","versionEndExcluding":"9.4.3.3","matchCriteriaId":"AF8EA934-A636-4544-BF20-70452D45FD51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","versionStartIncluding":"9.5.0","versionEndExcluding":"9.5.2.10","matchCriteriaId":"D244A21B-32A2-4BE3-9FA2-DBEA36CF081A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","versionStartIncluding":"9.6.0","versionEndExcluding":"9.6.1.5","matchCriteriaId":"312B1228-1B5E-492D-BF54-075EB8D3D792"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160711-asa","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91693","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036271","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160711-asa","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-2205","sourceIdentifier":"secure@symantec.com","published":"2016-07-12T02:00:05.017","lastModified":"2026-06-17T00:43:40.023","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read unspecified application files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo de configuración de la descarga de archivos en la consola de administración en Symantec Workspace Streaming (SWS) 7.5.x en versiones anteriores a 7.5 SP1 HF9 y 7.6.0 en versiones anteriores a 7.6 HF5 y Symantec Workspace Virtualization (SWV) 7.5.x en versiones anteriores a 7.5 SP1 HF9 y 7.6.0 en versiones anteriores a 7.6 HF5 permite a usuarios remotos autenticados leer archivos de la aplicación no especificados a través de vectores desconocidos."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:C/I:N/A:N","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_streaming:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1A57AD51-8C27-4923-8BFB-9C6908672928"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_streaming:7.5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4AE636C3-39F2-4A2B-AB66-0CAB94FB94D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_streaming:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5AF1978D-4EAC-4EAD-A564-3BC76C993B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_virtualization:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"859E021F-B71B-494D-994D-D6CE99E3A148"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_virtualization:7.5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"2FE7CBC1-675A-4B64-9B65-320235D6BA86"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_virtualization:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"980C3700-23DC-43C9-AB11-6A86291E06E9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/89395","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036262","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036263","source":"secure@symantec.com"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/89395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2206","sourceIdentifier":"secure@symantec.com","published":"2016-07-12T02:00:06.017","lastModified":"2026-06-17T00:43:40.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download configuration file."},{"lang":"es","value":"La consola de administración en Symantec Workspace Streaming (SWS) 7.5.x en versiones anteriores a 7.5 SP1 HF9 y 7.6.0 en versiones anteriores a 7.6 HF5 y Symantec Workspace Virtualization (SWV) 7.5.x en versiones anteriores a 7.5 SP1 HF9 y 7.6.0 en versiones anteriores a 7.6 HF5 permite a usuarios remotos autenticados leer archivos arbitrarios modificando el archivo de configuración de la descarga de archivos."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_streaming:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1A57AD51-8C27-4923-8BFB-9C6908672928"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_streaming:7.5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4AE636C3-39F2-4A2B-AB66-0CAB94FB94D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_streaming:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5AF1978D-4EAC-4EAD-A564-3BC76C993B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_virtualization:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"859E021F-B71B-494D-994D-D6CE99E3A148"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_virtualization:7.5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"2FE7CBC1-675A-4B64-9B65-320235D6BA86"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:workspace_virtualization:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"980C3700-23DC-43C9-AB11-6A86291E06E9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/89394","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036262","source":"secure@symantec.com"},{"url":"http://www.securitytracker.com/id/1036263","source":"secure@symantec.com"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/89394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5308","sourceIdentifier":"secure@symantec.com","published":"2016-07-12T02:00:12.863","lastModified":"2026-06-17T00:49:11.213","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Client Intrusion Detection System (CIDS) driver before 15.0.6 in Symantec Endpoint Protection (SEP) and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service (memory corruption and system crash) via a malformed Portable Executable (PE) file."},{"lang":"es","value":"El controlador Client Intrusion Detection System (CIDS) en versiones anteriores a 15.0.6 en Symantec Endpoint Protection (SEP) y en versiones anteriores a 15.1.2 en Norton Security permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída del sistema) a través de un archivo Portable Executable (PE) mal formado."}],"affected":[{"source":"secure@symantec.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_intrusion_detection_system:*:*:*:*:*:*:*:*","versionEndExcluding":"15.1.2","matchCriteriaId":"660B9D5F-A07E-456B-A282-D88663484B2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_intrusion_detection_system:*:*:*:*:*:*:*:*","versionEndExcluding":"15.0.6","matchCriteriaId":"012DDF83-ADC5-4868-AC31-8A229C3F1CE2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91608","source":"secure@symantec.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036264","source":"secure@symantec.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036265","source":"secure@symantec.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_01","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-3192","sourceIdentifier":"secalert@redhat.com","published":"2016-07-12T19:59:00.240","lastModified":"2026-06-17T00:25:30.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file."},{"lang":"es","value":"Pivotal Spring Framework en versiones anteriores a 3.2.14 y 4.x en versiones anteriores a 4.1.7 no procesa correctamente las declaraciones DTD en línea cuando DTD no está completamente desactivado, lo que permite a atacantes remotos provocar una caída de servicio (consumo de memoria y errores fuera de rango) a través de un archivo XML manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:spring_framework:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E02D9007-1215-4FD1-822A-BA95748E75D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D2E2EA60-735E-431E-BEFE-DC5C1046E532"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DFD1FA92-7BFC-4874-89FC-BE0F378F0DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7CC0E26F-2E8B-4B30-8C43-8BD2015EBB88"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3CB73406-5FE4-438E-BCB7-57FBF6EC38D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B76F06BC-F53E-4E37-B84F-3E992D459A49"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DD8CC0CF-61DE-4E3A-80DD-4AD34EBDF419"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"09D49870-9E17-4049-9ABB-311C319A0E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"EB9CE889-FBC5-4078-ABAC-8BC6CA235D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"AF34B57A-9732-44C8-9EC7-07394FB588F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C528FEA9-2E5E-413B-89C1-F14C67059702"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"8C7EA42F-55C6-4934-8F60-98B7717188D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"E1DA44C3-D083-4584-8ACC-73B234767669"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"1D6399F2-B9D6-4097-89DB-5F4B434DFFD3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:spring_framework:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D83EE4-F71B-4186-A34E-9128B6DA333B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CC1A4DB1-083B-4AAB-B1A2-CFFD487A1FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53D5991E-2CD0-42D9-8158-25FF18275B21"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"130DBD54-EF87-4A90-A727-F2BFFBF2DFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB59905-C658-4EFD-B073-FE84F0BF1DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B9382948-689D-40CD-ADC8-E41BB1F02D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:spring_framework:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"2D269ABA-5E23-4F3D-B999-C51B2494EE01"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162015.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162017.html","source":"secalert@redhat.com"},{"url":"http://pivotal.io/security/cve-2015-3192","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1592.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1593.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2035.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2036.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/90853","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036587","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1218","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1219","source":"secalert@redhat.com"},{"url":"https://jira.spring.io/browse/SPR-13136","source":"secalert@redhat.com"},{"url":"https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pivotal.io/security/cve-2015-3192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1592.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1593.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.spring.io/browse/SPR-13136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2219","sourceIdentifier":"cve@mitre.org","published":"2016-07-12T19:59:02.270","lastModified":"2026-06-17T00:43:41.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de administración en Palo Alto Networks PAN-OS 7.x en versiones anteriores a 7.0.8 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrario a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6806631A-23D1-42E8-995E-2EA1696FCEBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE577FC-15FF-4E57-8257-DCDFFB2A9985"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D8F8C2BE-21DE-49FE-A58F-97158657EF24"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"831890DD-6702-4AA1-9F20-B0E22B06043A"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036192","source":"cve@mitre.org"},{"url":"https://security.paloaltonetworks.com/CVE-2016-2219","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.paloaltonetworks.com/CVE-2016-2219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4428","sourceIdentifier":"secalert@redhat.com","published":"2016-07-12T19:59:03.257","lastModified":"2026-06-17T00:47:32.233","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form."},{"lang":"es","value":"Vulnerabilidad de XSS en OpenStack Dashboard (Horizon) 8.0.1 y versiones anteriores y 9.0.0 hasta la versión 9.0.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrario inyectando una plantilla AngularJS en un formulario del cuadro de mandos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:horizon:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.1","matchCriteriaId":"1AEAD3CD-47C1-4450-8C85-BFE200CCD7D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:horizon:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4F67B5-5856-4D19-87C5-BE69829D44C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:horizon:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"583BDBA0-7B0B-4B9B-89B8-DE63C6104D56"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*","matchCriteriaId":"31EC146C-A6F6-4C0D-AF87-685286262DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9DAA72A4-AC7D-4544-89D4-5B07961D5A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*","matchCriteriaId":"E8B8C725-34CF-4340-BE7B-37E58CF706D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B152EDF3-3140-4343-802F-F4F1C329F5C3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3617","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/4","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1268","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1269","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1270","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1271","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1272","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/horizon/+bug/1567673","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://review.openstack.org/329996","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://review.openstack.org/329997","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://review.openstack.org/329998","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-010.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/horizon/+bug/1567673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://review.openstack.org/329996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://review.openstack.org/329997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://review.openstack.org/329998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5009","sourceIdentifier":"secalert@redhat.com","published":"2016-07-12T19:59:06.617","lastModified":"2026-06-17T00:48:36.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix."},{"lang":"es","value":"La función handle_command en mon/Monitor.cc en Ceph permite a usuarios remotos autenticados provocar un denegación de servicio (fallo de segmentación y caída del monitor ceph) a través de un prefijo (1) vacío o (2) manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:ceph_storage_mon:1.3:*:*:*:*:*:*:*","matchCriteriaId":"01F0F540-E08A-43DB-AD86-7FD8B212BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:ceph_storage_osd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"6ECF4DC0-ECE3-40C0-ABF3-A8E17C17589C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*","matchCriteriaId":"37CE1DC7-72C5-483C-8921-0B462C8284D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*","versionEndIncluding":"0.94.6","matchCriteriaId":"E878A417-1027-4B9A-ADFB-0D9AFF214FBE"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00126.html","source":"secalert@redhat.com"},{"url":"http://tracker.ceph.com/issues/16297","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1384","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1385","source":"secalert@redhat.com"},{"url":"https://github.com/ceph/ceph/commit/957ece7e95d8f8746191fd9629622d4457d690d6","source":"secalert@redhat.com"},{"url":"https://github.com/ceph/ceph/pull/9700","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tracker.ceph.com/issues/16297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/ceph/ceph/commit/957ece7e95d8f8746191fd9629622d4457d690d6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/ceph/ceph/pull/9700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5850","sourceIdentifier":"cve@mitre.org","published":"2016-07-12T19:59:08.583","lastModified":"2026-06-17T00:50:08.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the volume backup service module in Huawei Public Cloud Solution before 1.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el módulo de servicio de copia de seguridad de volumen en Huawei Public Cloud Solution en versiones anteriores a 1.0.5 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrario a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:public_cloud_solution:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0","matchCriteriaId":"D3215375-0E84-44B8-A85C-5009C7421618"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160629-01-publiccloud-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91513","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160629-01-publiccloud-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3244","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:07.560","lastModified":"2026-06-17T00:45:21.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \"Microsoft Edge Security Feature Bypass.\""},{"lang":"es","value":"Microsoft Edge permite a atacantes remotos eludir el mecanismo de protección ASLR a través de un sitio web manipulada, también conocido como \"Microsoft Edge Security Feature Bypass\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*","matchCriteriaId":"8BD5B232-95EA-4F8E-8C7D-7976877AD243"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91599","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036286","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3245","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:08.527","lastModified":"2026-06-17T00:45:21.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 9 through 11 allows remote attackers to trick users into making TCP connections to a restricted port via a crafted web site, aka \"Internet Explorer Security Feature Bypass Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 9 hasta la versión 11 permite a atacantes remotos engañar al usuario para realizar conexiones TCP a un puerto restringido a través de un sitio web manipulado, también conocida como \"Internet Explorer Security Feature Bypass Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*","matchCriteriaId":"15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91585","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036283","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3256","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:18.060","lastModified":"2026-06-17T00:45:22.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka \"Windows Secure Kernel Mode Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Windows 10 Gold and 1511 permite a usuarios locales eludir el mecanismo de protección Secure Kernel Mode y obtener información sensible a través de una aplicación manipulada, también conocida como \"Windows Secure Kernel Mode Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91590","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036287","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-089","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3258","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:19.000","lastModified":"2026-06-17T00:45:22.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Low Integrity protection mechanism and write to files by leveraging unspecified object-manager features, aka \"Windows File System Security Feature Bypass.\""},{"lang":"es","value":"Condición de carrera en el kernel en Microsoft Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold y 1511 permite a usuarios locales eludir el mecanismo de protección Low Integrity y escribir en archivos aprovechando las funcionalidades de administración de objetos no especificados, también conocido como \"Windows File System Security Feature Bypass\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","baseScore":1.2,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91606","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036289","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-092","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3261","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:22.000","lastModified":"2026-06-17T00:45:23.303","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 11 permite a atacantes remotos obtener información sensible a través de un sitio web manipulado, también conocido como \"Internet Explorer Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91575","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036283","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3271","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:26.407","lastModified":"2026-06-17T00:45:24.253","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The VBScript engine in Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Scripting Engine Information Disclosure Vulnerability.\""},{"lang":"es","value":"El motor VBScript en Microsoft Edge permite a atacantes remotos obtener información sensible de la memoria de proceso a través de un sitio web manipulado, también conocida como \"Scripting Engine Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91586","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036286","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3273","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:28.703","lastModified":"2026-06-17T00:45:24.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remote attackers to obtain sensitive information via a crafted web site, aka \"Microsoft Browser Information Disclosure Vulnerability.\""},{"lang":"es","value":"El XSS Filter en Microsoft Internet Explorer 9 hasta la versión 11 y Microsoft Edge no restringe correctamente código JavaScript, lo que permite a atacantes remotos obtener información sensible a través de un sitio web manipulado, también conocida como \"Microsoft Browser Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*","matchCriteriaId":"8BD5B232-95EA-4F8E-8C7D-7976877AD243"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*","matchCriteriaId":"15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91576","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036283","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3277","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:31.453","lastModified":"2026-06-17T00:45:24.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka \"Microsoft Browser Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 10 y 11 y Microsoft Edge permiten a atacantes remotos obtener información sensible a través de un sitio web manipulado, también conocida como \"Microsoft Browser Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*","matchCriteriaId":"15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91596","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036283","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3279","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:33.610","lastModified":"2026-06-17T00:45:24.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted XLA file, aka \"Microsoft Office Remote Code Execution Vulnerability.\""},{"lang":"es","value":"Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services en SharePoint Server 2010 SP2 y Office Web Apps 2010 SP2 permiten a atacantes remotos ejecutar código arbitrario a través de un archivo XLA manipulado, también conocida como \"Microsoft Office Remote Code Execution Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"E36D981E-E56D-46C7-9486-FC691A75C497"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"F564117D-450D-45C4-9688-AF35F630A8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*","matchCriteriaId":"09BF0981-749E-470B-A7AC-95AD087797EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_rt:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"27745C7E-94A0-4C2A-8318-684CB85F48D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"081DE1E3-4622-4C32-8B9C-9AEC1CD20638"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"A8235774-4B57-4793-BE26-2CDE67532EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"9CCB2D72-B779-4772-8F72-7177E3F47A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"BA6E71BA-0EBA-40EE-8B81-92C6DECE8DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint_rt:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"2FA6DEE3-84A5-42DC-9C52-21A3986376C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"24EEDAD9-9656-4B21-82E4-D60B83777492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"32E1400A-836A-4E48-B2CD-2B0A9A8241BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*","matchCriteriaId":"4DA042D4-B14E-4DDF-8423-DFB255679EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_rt:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"558B8B5E-125A-4370-A6E9-3CB75808D7B3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91587","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036274","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036275","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-088","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3287","sourceIdentifier":"secure@microsoft.com","published":"2016-07-13T01:59:40.627","lastModified":"2026-06-17T00:45:25.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Secure Boot protection mechanism by leveraging administrative access to install a crafted policy, aka \"Secure Boot Security Feature Bypass.\""},{"lang":"es","value":"Microsoft Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1, y Windows 10 Gold y 1511 permiten a usuarios locales eludir el mecanismo de protección Secure Boot mediante el aprovechamiento del acceso administrativo para instalar una política manipulada, también conocido como \"Secure Boot Security Feature Bypass\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91604","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036290","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-094","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/91604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4178","sourceIdentifier":"psirt@adobe.com","published":"2016-07-13T01:59:47.817","lastModified":"2026-06-17T00:47:03.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Adobe Flash Player en versiones anteriores a 18.0.0.366 y 19.x hasta la versión 22.x en versiones anteriores a 22.0.0.209 en Windows y OS X y en versiones anteriores a 11.2.202.632 en Linux permite a atacantes eludir restricciones destinadas al acceso y obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*","versionEndIncluding":"22.0.0.192","matchCriteriaId":"2882AD1A-923D-436F-9695-5132A63A6E9E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*","versionEndIncluding":"18.0.0.360","matchCriteriaId":"5E1CBE9D-0D76-4373-9C8E-1D96F7FBDFA5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*","versionEndIncluding":"22.0.0.192","matchCriteriaId":"1B17EE56-CEA0-4752-A11C-C7935EE1B21A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*","matchCriteriaId":"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*","versionEndIncluding":"22.0.0.192","matchCriteriaId":"BC528B44-152E-462E-AEDD-361CEDADF230"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*","versionEndIncluding":"22.0.0.192","matchCriteriaId":"E586D377-2A01-4058-8639-3AF4B9B12800"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.2.202.626","matchCriteriaId":"201C6239-BC3D-4DA6-B599-579D94347909"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/91723","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036280","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1423","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-25.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/91723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-25.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4247","sourceIdentifier":"psirt@adobe.com","published":"2016-07-13T02:00:53.627","lastModified":"2026-06-17T00:47:12.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Condición de carrera en Adobe Flash Player en versiones anteriores a 18.0.0.366 y 19.x hasta la versión 22.x en versiones anteriores a 22.0.0.209 en Windows y OS X y en versiones anteriores a 11.2.202.632 en Linux permite a atacantes obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*","versionEndIncluding":"22.0.0.192","matchCriteriaId":"2882AD1A-923D-436F-9695-5132A63A6E9E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*","versionEndIncluding":"18.0.0.360","matchCriteriaId":"5E1CBE9D-0D76-4373-9C8E-1D96F7FBDFA5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*","versionEndIncluding":"22.0.0.192","matchCriteriaId":"1B17EE56-CEA0-4752-A11C-C7935EE1B21A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*","matchCriteriaId":"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*","versionEndIncluding":"22.0.0.192","matchCriteriaId":"BC528B44-152E-462E-AEDD-361CEDADF230"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*","versionEndIncluding":"22.0.0.192","matchCriteriaId":"E586D377-2A01-4058-8639-3AF4B9B12800"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.2.202.626","matchCriteriaId":"201C6239-BC3D-4DA6-B599-579D94347909"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91720","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036280","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1423","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093","source":"psirt@adobe.com","tags":["Patch","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-25.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201607-03","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-25.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201607-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8808","sourceIdentifier":"cve@mitre.org","published":"2016-07-13T15:59:00.137","lastModified":"2026-06-17T00:35:17.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file."},{"lang":"es","value":"La función DecodeImage en coders/gif.c en GraphicsMagick 1.3.18 permite a atacantes remotos provocar una denegación de servicio (acceso a memoria no inicializada) a través de un archivo GIF manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.17","matchCriteriaId":"999B6EE4-DCDB-4C23-B9E0-F8A62542DB69"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","matchCriteriaId":"F892F1B0-514C-42F7-90AE-12ACDFDC1033"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:studio_onsite:1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCA435-7594-49E8-9BAE-9E02E129B6C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*","matchCriteriaId":"D41A798E-0D69-43C7-9A63-1E5921138EAC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177834.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=graphicsmagick-commit&m=142283721604323&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3746","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/83058","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177834.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=graphicsmagick-commit&m=142283721604323&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/02/06/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5092","sourceIdentifier":"cve@mitre.org","published":"2016-07-13T15:59:06.857","lastModified":"2026-06-17T00:48:44.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Fortinet FortiWeb en versiones anteriores a 5.5.3 permite a administradores remotos autenticados con privilegios de lectura y escritura leer archivos arbitrarios mediante el aprovechamiento de una función de aprendizaje automático."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.2","matchCriteriaId":"FFC422B4-3E04-4946-BAB6-F3139A5F5AD5"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/fortiweb-path-traversal-vulnerability","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://fortiguard.com/advisory/fortiweb-path-traversal-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5109","sourceIdentifier":"cve@mitre.org","published":"2016-07-13T15:59:08.013","lastModified":"2026-06-17T00:48:46.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication."},{"lang":"es","value":"Citrix Worx Home para iOS en versiones anteriores a 10.3.6 y XenMobile MDX Toolkit para iOS en versiones anteriores a 10.3.6 pueden permitir a atacantes físicamente próximos eludir autenticación en la aplicación Apple Touch ID a través de vectores no especificados, relacionado con una aplicación que requiere re-autenticación."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.7,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenmobile_mdx_toolkit:10.3.0:*:*:*:*:iphone_os:*:*","matchCriteriaId":"E29080E2-ED0C-438F-8B84-73046B8D46E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenmobile_mdx_toolkit:10.3.5:*:*:*:*:iphone_os:*:*","matchCriteriaId":"98A9DE80-2F93-4BA8-B6BF-BC26EE1D9B1B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:worx_home:10.3.0:*:*:*:*:iphone_os:*:*","matchCriteriaId":"1A9ECFAF-9DFC-4ED8-982A-5F2519AB0EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:worx_home:10.3.1:*:*:*:*:iphone_os:*:*","matchCriteriaId":"CA26139F-D6DA-4925-92FA-05B5FC545C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:worx_home:10.3.5:*:*:*:*:iphone_os:*:*","matchCriteriaId":"30D7A5EC-5262-4A5E-ACD7-54A55A1E95EA"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX214006","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX214006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1447","sourceIdentifier":"psirt@cisco.com","published":"2016-07-15T16:59:02.157","lastModified":"2026-06-17T00:41:59.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuy83194."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz del administrador en Cisco WebEx Meetings Server 2.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, también conocido como Bug ID CSCuy83194."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F8745FD6-B0B3-46A9-9254-7B13877D7080"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings_server:2.6.1.39:*:*:*:*:*:*:*","matchCriteriaId":"794B669D-5A30-49CA-9F35-8F7AA5A2DF62"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-wms1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91781","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036314","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-wms1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1449","sourceIdentifier":"psirt@cisco.com","published":"2016-07-15T16:59:03.143","lastModified":"2026-06-17T00:41:59.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy92711."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco WebEx Meetings Server 2.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocido como Bug ID CSCuy92711."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings_server:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F8745FD6-B0B3-46A9-9254-7B13877D7080"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings_server:2.6.1.39:*:*:*:*:*:*:*","matchCriteriaId":"794B669D-5A30-49CA-9F35-8F7AA5A2DF62"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-wms3","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91780","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036313","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-wms3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1451","sourceIdentifier":"psirt@cisco.com","published":"2016-07-15T16:59:05.207","lastModified":"2026-06-17T00:42:00.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Meeting Server (formerly Acano Conferencing Server) 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de administración basada en web en Cisco Meeting Server (anteriormente Acano Conferencing Server) 1.7 hasta la versión 1.9 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros manipulados, también conocido como Bug ID CSCva19922."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:meeting_server:1.7_base:*:*:*:*:*:*:*","matchCriteriaId":"3CDCC8B2-4BD0-4053-9CC5-3208406EA658"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:meeting_server:1.8_base:*:*:*:*:*:*:*","matchCriteriaId":"0CD09398-8DBF-4467-9BE3-A9297AE247AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:meeting_server:1.9_base:*:*:*:*:*:*:*","matchCriteriaId":"4B08B05F-1D47-401C-8938-8971DDD3DC52"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-ms","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-ms","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1452","sourceIdentifier":"psirt@cisco.com","published":"2016-07-15T16:59:06.207","lastModified":"2026-06-17T00:42:00.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community, aka Bug ID CSCuz29526."},{"lang":"es","value":"Dispositivos Cisco ASR 5000 con software 18.3 hasta la versión 20.0.0 permiten a atacantes remotos realizar cambios de configuración sobre SNMP aprovechando los conocimientos de la comunidad de lectura y escritura, también conocido como Bug ID CSCuz29526."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*","matchCriteriaId":"746254AC-B039-432C-AA5C-A82260E57AD7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:18.3.0:*:*:*:*:*:*:*","matchCriteriaId":"DF3BDCAA-9E20-4DD6-A6FD-29E3FE79E98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:18.3_base:*:*:*:*:*:*:*","matchCriteriaId":"E9B1C78C-5349-4D4F-B3D1-DB76D432C520"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:19.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D300F74-79BD-4054-90F3-22FCD3E1FDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60737:*:*:*:*:*:*:*","matchCriteriaId":"367EE318-4040-42C7-831C-747A71B7545C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60828:*:*:*:*:*:*:*","matchCriteriaId":"27E59FC3-EC5C-43E9-8444-2CC1ADC052DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:19.0.m0.61045:*:*:*:*:*:*:*","matchCriteriaId":"BF555599-94A2-4E5A-A487-75D67297BC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:19.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D26DF95-B1FB-4720-BAE0-33698CD5EB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:19.1.0.61559:*:*:*:*:*:*:*","matchCriteriaId":"32EAC723-2922-40C2-8B5A-56B51B33DCE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:19.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6188B2-D27E-4FBE-B5C3-BC439D5CC405"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:19.3.0:*:*:*:*:*:*:*","matchCriteriaId":"87A4BA17-D3C2-4CB0-A1CA-F40D63A022FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:asr_5000_software:20.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DDD3C35D-0CDD-4E67-99CC-1A7CB0C5042F"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-asr","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91756","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036298","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-asr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5787","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-07-15T16:59:11.423","lastModified":"2026-06-17T00:50:02.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors."},{"lang":"es","value":"General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY en versiones anteriores a 8.2 SIM 27 no maneja adecuadamente el servicio DACLs, lo que permite a usuarios locales modificar una configuración de servicio a través de vectores no especificados."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.0,"impactScore":3.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2","matchCriteriaId":"7D612AFA-8D00-4BD8-805F-CF0F081CE58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim1:*:*:*:*:*:*","matchCriteriaId":"35CA3DDA-4A19-4387-B8C5-675985E5039E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim10:*:*:*:*:*:*","matchCriteriaId":"E5ED995F-8528-42EC-BFD3-E0A042565AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim11:*:*:*:*:*:*","matchCriteriaId":"9BDA2D7C-B50E-44AB-AF5C-56208C1E54AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim12:*:*:*:*:*:*","matchCriteriaId":"1B2A334B-2DFA-486D-B6D9-ABCCD0247FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim13:*:*:*:*:*:*","matchCriteriaId":"E7A22369-313E-4088-9514-B01368F764C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim14:*:*:*:*:*:*","matchCriteriaId":"5CFD955C-4298-446C-9286-7B0D84509191"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim15:*:*:*:*:*:*","matchCriteriaId":"68551205-68AF-4757-90CC-15161BC7384E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim16:*:*:*:*:*:*","matchCriteriaId":"94FD0998-A644-445F-9DA7-A857A981CC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim17:*:*:*:*:*:*","matchCriteriaId":"D96AC352-07AE-41A5-9805-080DF9DD4B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim18:*:*:*:*:*:*","matchCriteriaId":"419CD7DE-CCA1-4547-8339-748B840489F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim19:*:*:*:*:*:*","matchCriteriaId":"FC1E1F21-9BC7-4ACA-91ED-4D4AECF1672F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim2:*:*:*:*:*:*","matchCriteriaId":"BDB6AC3A-82C8-4C49-8B54-CF6684529CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim20:*:*:*:*:*:*","matchCriteriaId":"D4D0541D-E2E1-406F-AF2B-B482C07FD55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim21:*:*:*:*:*:*","matchCriteriaId":"5A652C12-24BB-4CF6-9C28-35FE350CF403"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim22:*:*:*:*:*:*","matchCriteriaId":"A6B4ED3A-56E1-439D-8573-16CF442B45FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim23:*:*:*:*:*:*","matchCriteriaId":"FD9B715D-48C1-4F44-8EE4-C10828B1EE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim24:*:*:*:*:*:*","matchCriteriaId":"F33C2217-650A-4969-9006-471D869D63AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim25:*:*:*:*:*:*","matchCriteriaId":"8331490A-A63D-4903-9CD6-D687EA1F6DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim26:*:*:*:*:*:*","matchCriteriaId":"BD71870C-1213-4369-804A-5E67C79C5B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim3:*:*:*:*:*:*","matchCriteriaId":"75F41815-D16F-4C29-B1DF-E5F956FD464F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim4:*:*:*:*:*:*","matchCriteriaId":"6BF44E77-00D5-471C-A4AF-E7A905BA299E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim5:*:*:*:*:*:*","matchCriteriaId":"0995915D-025A-46E6-8E2F-237E33369E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim6:*:*:*:*:*:*","matchCriteriaId":"ABBDCBBB-AD6A-4752-9C07-22C4B6494057"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim7:*:*:*:*:*:*","matchCriteriaId":"A0D0F15D-849A-4344-8725-7996CA9DACA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim8:*:*:*:*:*:*","matchCriteriaId":"79494C7A-F9E9-4DBB-A44B-5897948338DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge:cimplicity:8.2:sim9:*:*:*:*:*:*","matchCriteriaId":"2977EC39-E34B-4A07-98B9-A1F1909332FD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91727","source":"ics-cert@hq.dhs.gov","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01","source":"ics-cert@hq.dhs.gov","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/91727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-5797","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-07-15T16:59:13.393","lastModified":"2026-06-17T00:50:03.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of attempts."},{"lang":"es","value":"Tollgrade LightHouse SMS en versiones anteriores a 5.1 patch 3 proporciona diferentes mensajes de error para intentos de autenticación fallidos en función de si existe el nombre de usuario, lo que permite a atacantes remotos enumerar los nombres de cuenta a través de una serie de intentos."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tollgrade:lighthouse_sms:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1","matchCriteriaId":"07556768-E56B-43A9-9B4B-53A529608BE4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91728","source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-194-01","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/91728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-194-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-0269","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-15T18:59:01.140","lastModified":"2026-06-17T00:37:13.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM BigFix Platform 9.x en versiones anteriores a 9.1.8 y 9.2.x en versiones anteriores a 9.2.7 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"33D2F8B3-CCDD-4C4D-8790-4468A15D32AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3E47D31B-7665-416E-9220-7DC02B4BC298"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BF7890CF-0008-48BA-8A04-FCFFC0C1B01B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4442C0AA-DE96-4040-B907-2B10167B18AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AB5419C4-A2C6-417E-8EE4-A797579A2B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FF8C1B44-1283-441B-9AAB-B95C7DC80255"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.6:*:*:*:*:*:*:*","matchCriteriaId":"35FE1605-0746-4A94-A643-5187CBEAE596"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DBF00DCA-80E9-4F8E-A0D6-9806206ECF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D9726F3-7DCE-4811-ADA3-CC517BD56123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.0.7:*:*:*:*:*:*:*","matchCriteriaId":"8172EA9A-41B1-4FC3-9BF8-A6A2744AA8BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.0.8:*:*:*:*:*:*:*","matchCriteriaId":"24A0AD9E-5753-48A5-B049-791564328E6D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"44A36BD8-D35C-4FDE-9CFC-455728F61F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6EC36F04-C3B1-4DBD-B28B-4C4BBBB139E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B82EAE1E-3994-45CA-9988-7561A67652E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.6:*:*:*:*:*:*:*","matchCriteriaId":"200C85DF-E535-4A36-A601-9A6CF79141C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D37ED6B1-BB21-4DC5-8DDD-909FEE674001"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985734","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91690","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0338","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-15T18:59:03.233","lastModified":"2026-06-17T00:37:21.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by (1) reading a configuration file or (2) examining a process."},{"lang":"es","value":"IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 hasta la versión 7.0.1.1 en versiones anteriores a 7.0.1-ISS-SIM-FP0003 permite a usuarios locales descubrir contraseñas en texto plano (1) leyendo un archivo de configuración o (2) examinando un proceso."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4F8FD871-0A5E-4413-8F1C-4125DA7741CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17761140-202D-46B4-A955-F20FB7E4202E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9238298D-D05D-4E71-A824-36D50820482E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CE2D15D2-AA55-4077-AD96-8E380FD326C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2FA93FE3-93FF-40E4-B8CC-F078310C1B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E94FC6-A188-4029-A855-AC9F4BC6539D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985736","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036255","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0339","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-15T18:59:04.297","lastModified":"2026-06-17T00:37:21.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of \"traffic records.\""},{"lang":"es","value":"IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 hasta la versión 7.0.1.1 en versiones anteriores a 7.0.1-ISS-SIM-FP0003 maneja incorrectamente identificadores de sesión después del cierre de sesión, lo que facilita a atacantes remotos suplantar usuarios aprovechando el conocimiento de \"traffic records\"."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4F8FD871-0A5E-4413-8F1C-4125DA7741CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17761140-202D-46B4-A955-F20FB7E4202E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9238298D-D05D-4E71-A824-36D50820482E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CE2D15D2-AA55-4077-AD96-8E380FD326C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2FA93FE3-93FF-40E4-B8CC-F078310C1B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E94FC6-A188-4029-A855-AC9F4BC6539D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985736","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91689","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036255","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0357","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-15T18:59:06.203","lastModified":"2026-06-17T00:37:23.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site."},{"lang":"es","value":"IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 hasta la versión 7.0.1.1 en versiones anteriores a 7.0.1-ISS-SIM-FP0003 permite a atacantes remotos llevar a cabo ataques de clickjacking a través de un sitio web manipulado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4F8FD871-0A5E-4413-8F1C-4125DA7741CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17761140-202D-46B4-A955-F20FB7E4202E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9238298D-D05D-4E71-A824-36D50820482E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CE2D15D2-AA55-4077-AD96-8E380FD326C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2FA93FE3-93FF-40E4-B8CC-F078310C1B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_identity_manager_adapter:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E94FC6-A188-4029-A855-AC9F4BC6539D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985736","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/87528","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036255","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/87528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2865","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-15T18:59:07.170","lastModified":"2026-06-17T00:44:37.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed request."},{"lang":"es","value":"El componente GIT Integration en IBM Rational Team Concert (RTC) 5.x en versiones anteriores a 5.0.2 iFix14 y 6.x en versiones anteriores a 6.0.1 iFix5 y Rational Collaborative Lifecycle Management 5.x en versiones anteriores a 5.0.2 iFix14 y 6.x en versiones anteriores a 6.0.1 iFix5 permite a usuarios remotos autenticados obtener información sensible a través de una petición mal formada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FDFE57E-7905-4DC8-93FC-CAE5BC070790"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BEC305-F98D-45F4-B149-1188744DE408"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3A32DF4D-B68E-4C3E-AF20-05C80B26461A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B877D86-6ABE-43E8-A681-0C937C779388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"61DE20FB-F2C6-49CB-B1A7-0C5A1F802C56"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AFBEB328-08B8-41ED-8D80-748948CB2BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3010A6F8-A2C7-4236-B5F8-21BC6581B823"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985865","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91680","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5660","sourceIdentifier":"cret@cert.org","published":"2016-07-15T18:59:09.140","lastModified":"2026-06-17T00:49:49.813","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter."},{"lang":"es","value":"Vulnerabilidad de XSS en AttachmentsList.aspx en portal Accela Civic Platform Citizen Access permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro iframeid."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accela:civic_platform:-:*:*:*:*:*:*:*","matchCriteriaId":"A9A76850-B5D0-4180-BC95-2B40BDC9AB52"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/665280","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JLAD-ABMPVA","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/91765","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/665280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JLAD-ABMPVA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/91765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-0321","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-17T22:59:00.177","lastModified":"2026-06-17T00:37:19.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script."},{"lang":"es","value":"IBM Personal Communications (también conocido como PCOMM) 6.x en versiones anteriores a 6.0.17 y 12.x en versiones anteriores a 12.0.0.1 no restringe correctamente la extracción de credenciales, lo cual permite a usuarios locales descubrir contraseñas aprovechando el acceso a la cuenta de la víctima y ejecutando una secuencia de comandos PowerShell."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"00FC213B-BC7E-4AB1-BC48-58227BE008FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"050B8D11-FA5E-4F70-9934-057479F6260E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"838D216B-5C30-4CFF-9740-A0AB18A281B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CA429D0C-CDBF-4864-B661-E13733A84675"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F1E0730A-8C81-4D5C-B11C-3FBD9AF50FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A007FE4A-C587-4ABC-8E5E-BAA8B9FD10C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EF2FCFDF-C876-4630-B899-FEB56BAA4F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5738F6B4-952C-4EFE-868C-53AEB2151224"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"8081C4E7-E42F-4C79-B11F-8280412768D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2BF981B9-C7F9-4926-9310-AD30B2E1BFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"0F10FF32-B5A5-45EF-B626-F6300644ECE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E6B6DADA-B769-44CA-A6DF-11DB26831696"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"87BD8E7B-68FD-488C-A2F7-60A9C5A1FA3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"C540FB24-5B13-4489-8012-052209C3E421"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A66BF474-B69D-4610-85DD-9E79B69B08B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8223D044-D8F9-4F43-B44C-F28A19F3275E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"F93907E7-C765-43E6-839F-25C8C8BE5C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:personal_communications:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6D1D51A4-4975-436A-B30B-CD950E74EF7B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12006","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981692","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91751","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT12006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0393","sourceIdentifier":"psirt@us.ibm.com","published":"2016-07-17T22:59:01.193","lastModified":"2026-06-17T00:37:27.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files."},{"lang":"es","value":"IBM Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.10-TIV-MBS-IFIX002 y 7.6 en versiones anteriores a 7.6.0.5-TIV-MAMMT-FP001 permite a atacantes remotos obtener información sensible de URL leyendo archivos de registro."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4B590C42-21A1-4C62-8293-5A0D7AD628E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"01604919-877F-4BDF-A137-C1A54E04BEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4577B9CD-45CA-4D01-B99D-7C39131C9C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBB734EA-42EE-4BE0-934E-9E783BCDA31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"16981EC3-76AE-441B-92C4-8DD6E6A1EA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"36BB996E-17BC-4E35-97A0-142946F6B2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BA8B991C-2AE4-499D-B173-BF016D7F78F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"804A2AD3-94FB-4085-AE08-F7120EDDEFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D2659CCD-6D04-4479-BA93-B906DC200424"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C47DB9B3-C8CD-45E9-9F53-617354F3A339"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"BB19E05B-1E03-4230-BE05-21A989695749"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B028794E-5FA0-4E3D-AC4D-A2826DD6282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"050D798F-F9CC-447B-94F4-81A893349695"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"948B518D-129E-42E7-B07F-5E1CA5056DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7038EBF6-E527-492B-A6A5-14F9A2F79BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"29858665-FA68-4EDE-A0E7-6C79E8786871"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E5B7CA3C-5F9B-45A3-80AC-F5A4E190CC37"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986053","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91744","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1459","sourceIdentifier":"psirt@cisco.com","published":"2016-07-17T22:59:03.303","lastModified":"2026-06-17T00:42:00.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP message, aka Bug ID CSCuz21061."},{"lang":"es","value":"Cisco IOS 12.4 y 15.0 hasta la versión 15.5 y IOS XE 3.13 hasta la versión 3.17 permiten a usuarios remotos autenticados provocar una denegación de servicio (reinicio de dispositivo) a través de atributos manipulados en un mensaje BGP, también conocido como Bug ID CSCuz21061."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:N/A:C","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)xc7:*:*:*:*:*:*:*","matchCriteriaId":"5C689450-7C7D-4A66-AD17-FC78F676F95B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(15\\)t17:*:*:*:*:*:*:*","matchCriteriaId":"665B295C-D387-4156-A6B4-FEF772A2F0B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(19a\\):*:*:*:*:*:*:*","matchCriteriaId":"8D78695B-9F7C-43DC-BA66-7A25129A798C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(22\\)yb2:*:*:*:*:*:*:*","matchCriteriaId":"EFD42A62-01A9-476A-A299-8AFAE0AC9A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)gc4:*:*:*:*:*:*:*","matchCriteriaId":"5528533C-7248-4BF3-952B-C58D0DD7CEE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)gc5:*:*:*:*:*:*:*","matchCriteriaId":"19106ACC-FA7B-4B97-918F-5D14F2A710C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.0\\(1\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"189B0C7C-D794-43EB-A6C6-F29C4B9623A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.0\\(1\\)m:*:*:*:*:*:*:*","matchCriteriaId":"B97701A6-F7AE-4D14-A5C1-8F7743256766"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.0\\(1\\)m9:*:*:*:*:*:*:*","matchCriteriaId":"049F7107-B407-4F99-8688-738AF3AF4CBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.0\\(1\\)m10:*:*:*:*:*:*:*","matchCriteriaId":"97EC3675-6213-4AA2-9C91-73A89AD7D98C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.0\\(1\\)s:*:*:*:*:*:*:*","matchCriteriaId":"F9B9B664-5B90-4F3A-BD6C-33F0AAC75CEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.0\\(1\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"3048FEB4-3269-4EE1-88B5-0AA3E681402B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.0\\(2\\)sg:*:*:*:*:*:*:*","matchCriteriaId":"815EAC82-48B1-47A2-80D7-8CEE806E4B9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(3\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"75634752-042C-4E27-972E-E0D5DCD38BE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(4\\)gc2:*:*:*:*:*:*:*","matchCriteriaId":"B082C941-CE02-440F-8DD7-87873504B964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.1\\(4\\)m10:*:*:*:*:*:*:*","matchCriteriaId":"B990E413-C863-4613-803F-1E492982C70C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.2\\(3\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"A597644C-023A-4EA0-99CC-2EBCF1FBB382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*","matchCriteriaId":"CF10596D-457A-4DA8-8037-5E92E1D39232"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.2\\(4\\)m10:*:*:*:*:*:*:*","matchCriteriaId":"0322D5E9-FE05-49EF-A210-A276D69B9F16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.3\\(2\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"6BF7DF14-DD6F-4D24-8F12-AAB145FBDB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.3\\(3\\)m:*:*:*:*:*:*:*","matchCriteriaId":"6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.3\\(3\\)m7:*:*:*:*:*:*:*","matchCriteriaId":"496E2D60-AEEF-4D34-ABE4-9A9B101643D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"02866AED-A1B4-4D89-A11F-27089EF935BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*","matchCriteriaId":"2B8FB86F-2A89-413B-BED7-97E3D392804E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.5\\(3\\)m3:*:*:*:*:*:*:*","matchCriteriaId":"09CD336D-1110-4B0C-B8D4-7C96293CBADE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*","matchCriteriaId":"7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*","matchCriteriaId":"3F6E9386-30B4-4E86-9676-E7E005274048"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*","matchCriteriaId":"7E70C455-E41C-4B17-847A-5F4281139252"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*","matchCriteriaId":"64A07329-3A7D-4483-AE69-4786FEB23D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*","matchCriteriaId":"FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*","matchCriteriaId":"B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*","matchCriteriaId":"E61E0102-B9B6-41F4-9041-0A5F144D849A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*","matchCriteriaId":"579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*","matchCriteriaId":"2A076E1F-3457-410A-8AB6-64416ECB20A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*","matchCriteriaId":"0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*","matchCriteriaId":"F1BFE916-916F-4936-A331-21A0E8193920"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*","matchCriteriaId":"D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*","matchCriteriaId":"5568EABF-8F43-4A87-8DE4-A03E9065BE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*","matchCriteriaId":"AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*","matchCriteriaId":"970FD986-6D0E-441C-9BF3-C66A25763A7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*","matchCriteriaId":"1826C997-6D5D-480E-A12E-3048B6C61216"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*","matchCriteriaId":"12793F39-13C4-4DBC-9B78-FE361BDDF89D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*","matchCriteriaId":"876767C7-0196-4226-92B1-DDE851B53655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*","matchCriteriaId":"0141D67B-632F-48ED-8837-4CC799616C57"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160715-bgp","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91800","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036321","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160715-bgp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2775","sourceIdentifier":"cve@mitre.org","published":"2016-07-19T22:59:00.147","lastModified":"2026-06-17T00:44:22.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol."},{"lang":"es","value":"ISC BIND 9.x en versiones anteriores a 9.9.9-P2, 9.10.x en versiones anteriores a 9.10.4-P2 y 9.11.x en versiones anteriores a 9.11.0b2, cuando lwresd o la opción nombrada lwres está habilitada, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de una petición larga que utiliza el protocolo ligero de resolución."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.9.8","matchCriteriaId":"493B9A51-FA5C-4E94-871F-83AE4ED9EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionStartIncluding":"9.10.0","versionEndIncluding":"9.10.3","matchCriteriaId":"667502D2-746A-4FE6-8752-ED19ADA20981"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*","matchCriteriaId":"2A2CF04B-BF26-43F9-8BF4-CEBB9BE3AE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:b1:*:*:*:*:*:*","matchCriteriaId":"B74D9C8B-886C-4D77-AD5F-393B8CAA732F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:b2:*:*:*:*:*:*","matchCriteriaId":"ACDB1CD1-7A0C-4418-ADFF-EDE393FB2703"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*","matchCriteriaId":"376915CA-6BDB-423E-B216-64B098344DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:rc1:*:*:*:*:*:*","matchCriteriaId":"FC3883FE-39B5-4D0D-BB5B-0C6F032C9487"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:s1:*:*:*:*:*:*","matchCriteriaId":"21FBF6B7-BA47-46AC-B7EB-3A3A2E985BFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.9.9:s1rc1:*:*:*:*:*:*","matchCriteriaId":"EAA63832-F627-4495-B135-C0BBC4B0CB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:*","matchCriteriaId":"477AA5E9-2C6F-4CCC-B596-F3DF5AAB13C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.4:beta1:*:*:*:*:*:*","matchCriteriaId":"CCF5FAB8-202C-4892-90C9-237292E840D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.4:beta2:*:*:*:*:*:*","matchCriteriaId":"4B059C6D-9CB3-48A8-8E9C-AD83000A422A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.4:beta3:*:*:*:*:*:*","matchCriteriaId":"1F463911-2412-433F-87E9-AE9F22846A7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*","matchCriteriaId":"BB2D2132-62E8-4E73-A0BF-4790DAFC5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.11.0:-:*:*:*:*:*:*","matchCriteriaId":"83538F7C-B8A7-4B8F-B0CB-E92400FF2456"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.11.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"1A6E457F-750E-445E-8655-72B0D0342F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.11.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"5C2775BB-32E1-4407-8094-1F7FD86943F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.11.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"5A22E38E-0D40-40BA-8FFE-A499F12D041E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.11.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F88EAF34-A2F3-4189-AD37-510A9E997F78"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*","matchCriteriaId":"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92037","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036360","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHBA-2017:0651","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2017:1767","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2533","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01393/74/CVE-2016-2775","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01435","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://kb.isc.org/article/AA-01436","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://kb.isc.org/article/AA-01438","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7T2WJP5ELO4ZRSBXSETIZ3GAO6KOEFTA/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZUCSMEOZIZ2R2SKA4FPLTOVZHJBAOWC/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ5STNEUHBNEPUHJT7CYEVSMATFYMIX7/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TT754KDUJTKOASJODJX7FKHCOQ6EC7UX/","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201610-07","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160722-0002/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHBA-2017:0651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2017:1767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01393/74/CVE-2016-2775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://kb.isc.org/article/AA-01435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://kb.isc.org/article/AA-01436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://kb.isc.org/article/AA-01438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7T2WJP5ELO4ZRSBXSETIZ3GAO6KOEFTA/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZUCSMEOZIZ2R2SKA4FPLTOVZHJBAOWC/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ5STNEUHBNEPUHJT7CYEVSMATFYMIX7/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TT754KDUJTKOASJODJX7FKHCOQ6EC7UX/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160722-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5653","sourceIdentifier":"cret@cert.org","published":"2016-07-19T22:59:02.317","lastModified":"2026-06-17T00:49:49.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Misys FusionCapital Opics Plus permiten a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro (1) ID o (2) Branch."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:misys:fusioncapital_opics_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"FD0102EE-DB76-4B64-920D-B08EEADA6D20"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/682704","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/92035","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/682704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/92035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5655","sourceIdentifier":"cret@cert.org","published":"2016-07-19T22:59:04.350","lastModified":"2026-06-17T00:49:49.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate."},{"lang":"es","value":"Misys FusionCapital Opics Plus no verifica certificados X.509 de servidores SSL, lo que permite a atacantes man-in-the-middle obtener información sensible a través de un certificado manipulado."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:misys:fusioncapital_opics_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"FD0102EE-DB76-4B64-920D-B08EEADA6D20"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/682704","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/92035","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/682704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/92035","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/295.html\">CWE-295: Improper Certificate Validation</a>"}},{"cve":{"id":"CVE-2016-3424","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:02.317","lastModified":"2026-06-17T00:45:39.727","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: Optimizer."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:50:29.559776Z","id":"CVE-2016-3424","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.12","matchCriteriaId":"64C785AD-A655-4124-BB69-8A44B49107E7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91976","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3432","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:03.737","lastModified":"2026-06-17T00:45:41.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente BI Publisher (anteriormente XML Publisher) en Oracle Fusion Middleware 11.1.1.7.0 y 11.1.1.9.0 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores relacionados con Web Server."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:50:27.963740Z","id":"CVE-2016-3432","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"0A88732E-A07D-4E53-A304-255561C11AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92033","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036370","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3433","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:05.660","lastModified":"2026-06-17T00:45:41.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web Administration."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Business Intelligence Enterprise Edition en Oracle Fusion Middleware 11.1.1.7.0 y 11.1.1.9.0 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores relacionados con Analytics Web Administration."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:50:26.275295Z","id":"CVE-2016-3433","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:11.1.1.7.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"D18D8F82-D325-402B-BF46-3C5C27C95091"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"523CD57C-43D4-4C79-BA00-A9A65C6588E3"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92029","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036370","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3445","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:10.240","lastModified":"2026-06-17T00:45:42.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-5488."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle WebLogic Server en Oracle Fusion Middleware 10.3.6.0 y 12.1.3.0 permite a atacantes remotos afectar la disponibilidad a través de vectores relacionados con Web Container, una vulnerabilidad diferente a CVE-2016-5488."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:51.535205Z","id":"CVE-2016-3445","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B40B13B7-68B3-4510-968C-6A730EB46462"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C93CC705-1F8C-4870-99E6-14BF264C3811"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036373","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3448","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:12.880","lastModified":"2026-06-17T00:45:43.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Application Express en Oracle Database Server en versiones anteriores a 5.0.4 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores desconocidos."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:50:23.354326Z","id":"CVE-2016-3448","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.3","matchCriteriaId":"D48DB7E1-18F3-4D4D-B9FB-E89B00BECAC9"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91885","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036363","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3451","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:15.067","lastModified":"2026-06-17T00:45:43.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity via vectors related to Web."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente ILOM en Oracle Sun Systems Products Suite 3.0, 3.1 y 3.2 permite a atacantes remotos afectar la integridad a través de vectores relacionados con Web."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:50:15.708050Z","id":"CVE-2016-3451","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F03D9357-7755-488D-80A2-F922CA4283DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7CEFD9F-B0CC-40E5-921F-34B354B465E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F788EE61-2231-4364-869F-8E29321E4B67"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92022","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036408","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3453","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:17.367","lastModified":"2026-06-17T00:45:43.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to Kernel."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 10 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con Kernel."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:50:12.695351Z","id":"CVE-2016-3453","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91947","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036407","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3458","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:18.850","lastModified":"2026-06-17T00:45:44.473","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Java SE 6u115, 7u101 y 8u92 y Java SE Embedded 8u91 permite a atacantes remotos afectar la integridad a través de vectores relacionados con CORBA."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:50:10.788680Z","id":"CVE-2016-3458","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update115:*:*:*:*:*:*","matchCriteriaId":"31B36B01-7736-44B7-BFE7-838E07013B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AEA7244-D1DC-4144-BA69-0488EDD8ABAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"95C17CAA-0971-44CB-8A04-F135ACBEFBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.6.0:update115:*:*:*:*:*:*","matchCriteriaId":"F3E80A87-8142-4391-88C9-27FBE20BD9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AE0C67B-6B6E-4B16-A0EB-4DFBAE83134F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"CFC93807-F81D-4F4C-AD4F-3F0A45C36F34"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1504.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1776.html","source":"secalert_us@oracle.com"},{"url":"http://www.debian.org/security/2016/dsa-3641","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91945","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036365","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3043-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3062-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3077-1","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1458","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1477","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201701-43","source":"secalert_us@oracle.com"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1776.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3043-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3062-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3077-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-43","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3459","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:19.897","lastModified":"2026-06-17T00:45:44.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.6.30 y versiones anteriores y 5.7.12 y versiones anteriores y MariaDB 10.0.x en versiones anteriores a 10.0.25 y 10.1.x en versiones anteriores a 10.1.14 permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: InnoDB."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:50:04.412870Z","id":"CVE-2016-3459","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.25","matchCriteriaId":"104CD439-9CF1-4EC1-82F4-93058908482D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.14","matchCriteriaId":"9FEBD808-0ACF-4858-81E6-1E5C68455C93"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.30","matchCriteriaId":"E8519121-8EA3-4851-A824-13921232DB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.12","matchCriteriaId":"2E576DEB-1E39-4582-BFAA-E1D9F311242D"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91943","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10114-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3467","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:20.990","lastModified":"2026-06-17T00:45:45.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Application Express en Oracle Database Server en versiones anteriores a 5.0.4 permite a atacantes remotos afectar la disponiblidad a través de vectores desconocidos."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:43.296550Z","id":"CVE-2016-3467","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.3","matchCriteriaId":"D48DB7E1-18F3-4D4D-B9FB-E89B00BECAC9"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91894","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036363","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3472","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:26.100","lastModified":"2026-06-17T00:45:46.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel Engineering - Installer and Deployment en Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015 e IP2016 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores relacionados con Web Server."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:59.104697Z","id":"CVE-2016-3472","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_engineering-installer_and_deployment:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00FFBD9B-7539-4ABC-8902-2E41E05F6E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_engineering-installer_and_deployment:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BAD21D74-4C41-457E-9F67-37A9078448DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_engineering-installer_and_deployment:2014:*:*:*:*:*:*:*","matchCriteriaId":"F63E8872-EFC7-4480-B141-47F97058E344"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_engineering-installer_and_deployment:2015:*:*:*:*:*:*:*","matchCriteriaId":"564CEC76-1511-42D5-B4B2-CEDB4D69AF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_engineering-installer_and_deployment:2016:*:*:*:*:*:*:*","matchCriteriaId":"5CD4DC61-B767-4595-B864-37FF483090E6"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91978","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3475","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:28.397","lastModified":"2026-06-17T00:45:46.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote authenticated users to affect confidentiality via vectors related to Information Manager Console."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Knowledge en Oracle Siebel CRM 8.5.x permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores relacionados con Information Manager Console."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:55.924164Z","id":"CVE-2016-3475","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge:8.5:*:*:*:*:*:*:*","matchCriteriaId":"5AC44080-61DA-4E64-8D6B-991D53F171FE"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91944","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3476","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:29.413","lastModified":"2026-06-17T00:45:46.767","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote attackers to affect confidentiality and integrity via vectors related to Information Manager Console."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Knowledge en Oracle Siebel CRM 8.5.x permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con Information Manager Console."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:36.712060Z","id":"CVE-2016-3476","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge:8.5:*:*:*:*:*:*:*","matchCriteriaId":"5AC44080-61DA-4E64-8D6B-991D53F171FE"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91948","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3478","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:31.633","lastModified":"2026-06-17T00:45:47.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to File Processing."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.53, 8.54 y 8.55 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con File Processing."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:54.425191Z","id":"CVE-2016-3478","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91846","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036404","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3480","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:34.100","lastModified":"2026-06-17T00:45:47.303","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect confidentiality via vectors related to HA for Postgresql."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Solaris Cluster en Oracle Sun Systems Products Suite 3.3 y 4.3 permite a usuarios locales afectar la confidencialidad a través de vectores relacionados con HA para Postgresql."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:53.104539Z","id":"CVE-2016-3480","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:solaris_cluster:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C5FFE725-7FE0-4236-82D1-3025EFCD0190"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:solaris_cluster:4.3:*:*:*:*:*:*:*","matchCriteriaId":"39081BA5-E70C-4ACB-B98C-E264AAEFD6C4"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91919","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036407","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3486","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:40.587","lastModified":"2026-06-17T00:45:48.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.6.30 y versiones anteriores y 5.7.12 y versiones anteriores permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores relacionados con Server: FTS."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:47.003021Z","id":"CVE-2016-3486","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.30","matchCriteriaId":"E8519121-8EA3-4851-A824-13921232DB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.12","matchCriteriaId":"2E576DEB-1E39-4582-BFAA-E1D9F311242D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91980","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3488","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:42.680","lastModified":"2026-06-17T00:45:48.293","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the DB Sharding component in Oracle Database Server 12.1.0.2 allows local users to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente DB Sharding en Oracle Database Server 12.1.0.2 permite a usuarios locales afectar la integridad a través de vectores desconocidos."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:45.678957Z","id":"CVE-2016-3488","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F3C58EE-B36B-4081-A307-0FE9B52D8E62"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91905","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036363","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3489","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:43.617","lastModified":"2026-06-17T00:45:48.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Data Pump Import en Oracle Database Server 11.2.0.4, 12.1.0.1 y 12.1.0.2 permite a usuarios locales afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:53:25.391745Z","id":"CVE-2016-3489","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5100F5C8-D5F8-466B-AABE-E42B3770B39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:12.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0AEAAD2D-F233-4C5B-B141-44143BA8DE4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F3C58EE-B36B-4081-A307-0FE9B52D8E62"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91874","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036363","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3494","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:47.960","lastModified":"2026-06-17T00:45:49.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Enterprise Manager Ops Center en Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2 y 12.3.2 permite a atacantes remotos afectar la disponibilidad a través de vectores relacionados con OS Provisioning."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:40.748408Z","id":"CVE-2016-3494","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BA2CF507-AA3F-464C-88DF-71E30672E623"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE12B6A4-E128-41EC-8017-558F50B961BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B45C6-A877-4317-BCE5-EF9E9542276A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91872","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036406","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3496","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:49.040","lastModified":"2026-06-17T00:45:49.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Enterprise Manager Grid Control 11.1.1.7, and 11.1.1.9 allows remote attackers to affect confidentiality via vectors related to SOA Topology Viewer."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Enterprise Manager for Fusion Middleware en Oracle Enterprise Manager Grid Control 11.1.1.7 y 11.1.1.9 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con SOA Topology Viewer."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:39.375589Z","id":"CVE-2016-3496","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:11.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"55CD19AE-0EAF-481D-9678-D36E5A3A3629"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:11.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"E6546ECC-EB6E-483B-843C-5E69E213C356"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91887","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036406","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3497","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:49.960","lastModified":"2026-06-17T00:45:49.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-5469 and CVE-2016-5471."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 11.3 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con Kernel, una vulnerabilidad diferente a CVE-2016-5469 y CVE-2016-5471."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:37.931194Z","id":"CVE-2016-3497","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91926","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036407","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3498","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:50.930","lastModified":"2026-06-17T00:45:49.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Java SE 7u101 y 8u92 permite a atacantes remotos afectar la disponibilidad a través de vectores relacionados con JavaFX."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:32.681076Z","id":"CVE-2016-3498","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AEA7244-D1DC-4144-BA69-0488EDD8ABAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"95C17CAA-0971-44CB-8A04-F135ACBEFBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AE0C67B-6B6E-4B16-A0EB-4DFBAE83134F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"CFC93807-F81D-4F4C-AD4F-3F0A45C36F34"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91956","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036365","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"secalert_us@oracle.com"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3500","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:53.337","lastModified":"2026-06-17T00:45:49.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Java SE 6u115, 7u101 y 8u92; Java SE Embedded 8u91 y JRockit R28.3.10 permite a atacantes remotos afectar la disponibilidad a través de vectores relacionados con JAXP, una vulnerabilidad diferente a CVE-2016-3508."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:31.143802Z","id":"CVE-2016-3500","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update115:*:*:*:*:*:*","matchCriteriaId":"31B36B01-7736-44B7-BFE7-838E07013B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AEA7244-D1DC-4144-BA69-0488EDD8ABAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update91:*:*:*:*:*:*","matchCriteriaId":"429DC535-FA00-4309-AD75-E79F238A4B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"95C17CAA-0971-44CB-8A04-F135ACBEFBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.6.0:update115:*:*:*:*:*:*","matchCriteriaId":"F3E80A87-8142-4391-88C9-27FBE20BD9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AE0C67B-6B6E-4B16-A0EB-4DFBAE83134F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update91:*:*:*:*:*:*","matchCriteriaId":"35E4B9B9-917E-4EB1-B8ED-B69D5589A0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"CFC93807-F81D-4F4C-AD4F-3F0A45C36F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r28.3.10:*:*:*:*:*:*:*","matchCriteriaId":"77416A88-9162-4B8B-B5B3-6CF5671FBED2"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1504.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1776.html","source":"secalert_us@oracle.com"},{"url":"http://www.debian.org/security/2016/dsa-3641","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036365","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3043-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3062-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3077-1","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1458","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1477","source":"secalert_us@oracle.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10166","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201701-43","source":"secalert_us@oracle.com"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1776.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3043-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3062-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3077-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-43","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3501","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:54.463","lastModified":"2026-06-17T00:45:50.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.6.30 y versiones anteriores y 5.7.12 y versiones anteriores permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores relacionados con Server: Optimizer."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:36.506024Z","id":"CVE-2016-3501","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.30","matchCriteriaId":"E8519121-8EA3-4851-A824-13921232DB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.12","matchCriteriaId":"2E576DEB-1E39-4582-BFAA-E1D9F311242D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91949","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3502","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:55.463","lastModified":"2026-06-17T00:45:50.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle WebCenter Sites en Oracle Fusion Middleware 11.1.1.8 y 12.2.1.0 permite a usuarios remotos autenticados afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.3,"impactScore":3.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:35.037168Z","id":"CVE-2016-3502","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:webcenter_sites:11.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7465E664-1F94-4122-A0D4-1F3141A2B379"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:webcenter_sites:12.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C952EFF2-C0E9-4BE7-BD42-EA7EC30F6AEA"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92030","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036370","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3507","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:12:59.883","lastModified":"2026-06-17T00:45:50.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to WebClient / Admin."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a atacantes remotos afectar la integridad a través de vectores relacionados con WebClient / Admin."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:33.858405Z","id":"CVE-2016-3507","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92015","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3508","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:00.883","lastModified":"2026-06-17T00:45:50.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Java SE 6u115, 7u101 y 8u92; Java SE Embedded 8u91 y JRockit R28.3.10 permite a atacantes remotos afectar la disponibilidad a través de vectores relacionados con JAXP, una vulnerabilidad diferente a CVE-2016-3500."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:29.977026Z","id":"CVE-2016-3508","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update115:*:*:*:*:*:*","matchCriteriaId":"31B36B01-7736-44B7-BFE7-838E07013B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AEA7244-D1DC-4144-BA69-0488EDD8ABAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update91:*:*:*:*:*:*","matchCriteriaId":"429DC535-FA00-4309-AD75-E79F238A4B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"95C17CAA-0971-44CB-8A04-F135ACBEFBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.6.0:update115:*:*:*:*:*:*","matchCriteriaId":"F3E80A87-8142-4391-88C9-27FBE20BD9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AE0C67B-6B6E-4B16-A0EB-4DFBAE83134F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update91:*:*:*:*:*:*","matchCriteriaId":"35E4B9B9-917E-4EB1-B8ED-B69D5589A0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"CFC93807-F81D-4F4C-AD4F-3F0A45C36F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r28.3.10:*:*:*:*:*:*:*","matchCriteriaId":"77416A88-9162-4B8B-B5B3-6CF5671FBED2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1504.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1776.html","source":"secalert_us@oracle.com"},{"url":"http://www.debian.org/security/2016/dsa-3641","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91972","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036365","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3043-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3062-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3077-1","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1458","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1477","source":"secalert_us@oracle.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10166","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201701-43","source":"secalert_us@oracle.com"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1776.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3043-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3062-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3077-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-43","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3509","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:01.870","lastModified":"2026-06-17T00:45:51.173","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Folders / URL Attachment."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores relacionados con File Folders / URL Attachment."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:32.544904Z","id":"CVE-2016-3509","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92005","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3513","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:06.557","lastModified":"2026-06-17T00:45:51.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Communications Operations Monitor component in Oracle Communications Applications before 3.3.92.0.0 allows remote authenticated users to affect confidentiality via vectors related to Infrastructure."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Communications Operations Monitor en Oracle Communications Applications en versiones anteriores a 3.3.92.0.0 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores relacionados con Infrastructure."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:29.016510Z","id":"CVE-2016-3513","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.92.0.0","matchCriteriaId":"5B07F920-A05F-4E16-B133-237B99FD3F72"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036401","source":"secalert_us@oracle.com"},{"url":"http://www.synacktiv.com/ressources/oracle_sbc_configuration_issues.pdf","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.synacktiv.com/ressources/oracle_sbc_configuration_issues.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3514","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:08.150","lastModified":"2026-06-17T00:45:51.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to affect confidentiality via vectors related to GUI, a different vulnerability than CVE-2016-3516."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Enterprise Communications Broker en Oracle Communications Applications en versiones anteriores a PCz 2.0.0m4p1 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores relacionados con GUI, una vulnerabilidad diferente a CVE-2016-3516."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:27.676994Z","id":"CVE-2016-3514","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_communications_broker:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.041","matchCriteriaId":"CFAA63BB-3E65-434E-A346-A55903EDC046"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036401","source":"secalert_us@oracle.com"},{"url":"http://www.synacktiv.com/ressources/oracle_sbc_configuration_issues.pdf","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.synacktiv.com/ressources/oracle_sbc_configuration_issues.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3517","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:11.277","lastModified":"2026-06-17T00:45:52.207","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to PC / Get Shortcut."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a atacantes remotos afectar la integridad a través de vectores relacionados con PC / Get Shortcut."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:19.916049Z","id":"CVE-2016-3517","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92011","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3518","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:12.213","lastModified":"2026-06-17T00:45:52.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores relacionados con Server: Optimizer."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:18.681431Z","id":"CVE-2016-3518","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.12","matchCriteriaId":"64C785AD-A655-4124-BB69-8A44B49107E7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91967","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3519","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:13.683","lastModified":"2026-06-17T00:45:52.433","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PC / Get Shortcut."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con PC / Get Shortcut."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:17.199800Z","id":"CVE-2016-3519","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91993","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3520","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:14.840","lastModified":"2026-06-17T00:45:52.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality via vectors related to AOL Diagnostic tests."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Object Library en Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a administradores remotos afectar la confidencialidad a través de vectores relacionados con pruebas AOL Diagnostic."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:15.904719Z","id":"CVE-2016-3520","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9E42C3CE-CA98-4C13-B41E-DF7A3FEC560F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86D2B444-B8D8-4A3D-BCCA-3B5280F05A38"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0FDD0B52-77F6-4607-84F8-1BCF99DB1B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"20ACF759-62E7-49D8-8F12-BE17B9CDCED7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91896","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3521","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:15.840","lastModified":"2026-06-17T00:45:52.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.49 y versiones anteriores, 5.6.30 y versiones anteriores y 5.7.12 y versiones anteriores y MariaDB en versiones anteriores a 5.5.50, 10.0.x en versiones anteriores a 10.0.26 y 10.1.x en versiones anteriores a 10.1.15 permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores relacionados con Server: Types."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:14.744381Z","id":"CVE-2016-3521","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.50","matchCriteriaId":"75234AB4-E57D-44ED-A3FF-E9A5B8C53C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.26","matchCriteriaId":"164A66E3-C17C-4A73-9D74-597D7670A69C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.15","matchCriteriaId":"6724CBC2-7F62-4D6A-8AF4-8E69F6F99D03"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.49","matchCriteriaId":"C3890FB9-556E-49DD-9A1E-21DA45BFBE80"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.30","matchCriteriaId":"E8519121-8EA3-4851-A824-13921232DB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.12","matchCriteriaId":"2E576DEB-1E39-4582-BFAA-E1D9F311242D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1603.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1604.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1637.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3624","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3632","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91932","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1603.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1604.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1637.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3523","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:18.167","lastModified":"2026-06-17T00:45:52.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Application Service."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Web Applications Desktop Integrator en Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la integridad a través de vectores relacionados con Application Service."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:07.166010Z","id":"CVE-2016-3523","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:web_applications_desktop_integrator:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9D02DB9B-FE13-46E8-979C-EACE98743B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:web_applications_desktop_integrator:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"50126ABE-2A09-465B-ADB5-4D20B6081893"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:web_applications_desktop_integrator:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"07B2675A-6862-4643-A6BC-2100AC8E42F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:web_applications_desktop_integrator:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"441C83A8-BB1A-4353-A9C2-764AB8E1908D"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91911","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3524","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:19.323","lastModified":"2026-06-17T00:45:53.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Applications Technology Stack en Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con Configuration."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:05.485049Z","id":"CVE-2016-3524","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9E42C3CE-CA98-4C13-B41E-DF7A3FEC560F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86D2B444-B8D8-4A3D-BCCA-3B5280F05A38"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0FDD0B52-77F6-4607-84F8-1BCF99DB1B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"20ACF759-62E7-49D8-8F12-BE17B9CDCED7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91870","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3525","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:20.370","lastModified":"2026-06-17T00:45:53.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality via vectors related to Cookie Management."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Applications Manager en Oracle E-Business Suite 12.1.3 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con Cookie Management."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","baseScore":5.4,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:49:03.384055Z","id":"CVE-2016-3525","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:applications_manager:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C2FDF7A2-A97E-46CD-8F20-BF4A1C4F0058"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91878","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3529","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:24.777","lastModified":"2026-06-17T00:45:53.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3526 and CVE-2016-3560."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con SDK, una vulnerabilidad diferente a CVE-2016-3526 y CVE-2016-3560."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:19.535219Z","id":"CVE-2016-3529","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92002","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3533","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:29.560","lastModified":"2026-06-17T00:45:54.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Search. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves multiple open redirect vulnerabilities, which allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Knowledge Management en Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la integridad a través de vectores relacionados con Search. NOTA: la información anterior es de la CPU de Julio 2016. Oracle no ha comentado nada sobre terceros que alegan que este problema implica múltiples vulnerabilidades de redirección abierta, lo que permite a atacantes remotos redirigir a usuarios a sitios web arbitrarios y llevar a cabo ataques phishing a través de vectores no especificados."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:52.642738Z","id":"CVE-2016-3533","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0231892-2983-4811-8987-8AADD602B1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7C81FB17-E715-4B6C-A6D4-01438798559E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0E1B5BAE-472F-4279-8FF9-84B34CB6073E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6EFD2181-F646-41B6-A871-0FDF45F81F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7DFDEB88-9F68-406C-96A6-F1335D06AFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"79EDFAFC-0252-4BCA-BA73-6B4DDF0D86F5"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91909","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"https://www.onapsis.com/blog/oracle-fixes-record-276-vulnerabilities-july-2016","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.onapsis.com/blog/oracle-fixes-record-276-vulnerabilities-july-2016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3534","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:30.590","lastModified":"2026-06-17T00:45:54.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Engineering Change Order. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue involves an open redirect vulnerability, which allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Installed Base en Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la integridad a través de vectores relacionados con Engineering Change Order. NOTA: la información anterior es de la CPU de Julio 2016. Oracle no ha comentado nada sobre terceros que alegan que este problema implica una vulnerabilidad de redirección abierta, lo que permite a atacantes remotos redirigir a usuarios a sitois web arbitrarios y llevar a cabo ataques phishing a través de vectores no especificados."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:46.153348Z","id":"CVE-2016-3534","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:installed_base:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9203E4D1-0A5F-43D2-8BE7-62EF7130BDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:installed_base:12.1.2:*:*:*:*:*:*:*","matchCriteriaId":"BA5A5E97-DDCB-4F47-94F9-378BEB93414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:installed_base:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5B4BB2B3-91E1-47A1-A725-0107EF6ED8EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:installed_base:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B5DCA35A-D471-4536-AC3E-5E6C8B1F6B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:installed_base:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"ABA44FAE-FAA9-4934-B11E-7B94829EBFE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:installed_base:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D50E63C0-7A78-4C5E-90E4-BE8B51FD87F3"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91907","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"https://www.onapsis.com/blog/oracle-fixes-record-276-vulnerabilities-july-2016","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.onapsis.com/blog/oracle-fixes-record-276-vulnerabilities-july-2016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3537","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:33.840","lastModified":"2026-06-17T00:45:54.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-5473."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores relacionados con File Folders / Attachment, una vulnerabilidad diferente a CVE-2016-5473."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:41.834843Z","id":"CVE-2016-3537","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91984","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3540","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:37.013","lastModified":"2026-06-17T00:45:55.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 and 13.1.0.0 allows remote attackers to affect confidentiality via vectors related to UI Framework."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Enterprise Manager Base Platform en Oracle Enterprise Manager Grid Control 12.1.0.5 y 13.1.0.0 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con UI Framework."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:37.272830Z","id":"CVE-2016-3540","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"36E39918-B2D6-43F0-A607-8FD8BFF6F340"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"240435BF-D14D-4F5C-84C4-C39CECB1AB4F"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91892","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036406","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3542","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:39.483","lastModified":"2026-06-17T00:45:55.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Knowledge Management en Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a administradores remotos afectar la confidencialidad y la integridad a través de vectores desconocidos."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:N","baseScore":8.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:53:18.618213Z","id":"CVE-2016-3542","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0231892-2983-4811-8987-8AADD602B1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7C81FB17-E715-4B6C-A6D4-01438798559E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0E1B5BAE-472F-4279-8FF9-84B34CB6073E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6EFD2181-F646-41B6-A871-0FDF45F81F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7DFDEB88-9F68-406C-96A6-F1335D06AFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:knowledge_management:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"79EDFAFC-0252-4BCA-BA73-6B4DDF0D86F5"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91873","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3545","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:42.530","lastModified":"2026-06-17T00:45:55.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Object Library en Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con pantallas de ayuda basadas en Web."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:07.988525Z","id":"CVE-2016-3545","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F7A59435-A033-48BD-AC2A-140DCF6113DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"73BD1423-F7EE-4B53-AE4B-DFA784F685C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C95FED83-21C8-4035-BB1B-3C8A93D4645F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"411C3C4C-5513-4F7D-8D58-A39F21F43637"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91882","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3547","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:44.843","lastModified":"2026-06-17T00:45:55.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle One-to-One Fulfillment component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Content Manager."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle One-to-One Fulfillment en Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con Content Manager."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:06.600009Z","id":"CVE-2016-3547","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"818AA91A-F9EC-42D3-8BF2-40AE61D214C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:*","matchCriteriaId":"225B4D6A-7136-49B1-B537-DE573BFEBCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2C6374C8-AD2E-4997-AE75-D91F1AF90206"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6362431D-4809-4720-A1EF-A64D2FEC6C77"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9463EF3E-D207-4F96-8018-C67744D9BFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BA7A3F6B-DCFA-47B0-9675-D77F75F6D9B0"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91893","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3548","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:45.747","lastModified":"2026-06-17T00:45:55.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Marketing activity collateral."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Marketing en Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con actividad colateral de Marketing."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:05.380569Z","id":"CVE-2016-3548","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:marketing:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FE5E189E-FB41-4332-A037-3DDA98746371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:marketing:12.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5EC9AAD6-30EF-4F5B-9923-2619E75C66B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:marketing:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"EDB00EEA-140F-4652-AF01-5FE522E5D1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:marketing:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6CEB6C88-B08C-44B2-8330-57B5BD931A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:marketing:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"F8273378-896F-4EA3-884C-47B31422028C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:marketing:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"704D9437-039F-46F4-ACC4-C8C10C56E251"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91888","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3549","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:46.827","lastModified":"2026-06-17T00:45:56.097","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle E-Business Suite Secure Enterprise Search component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Search Integration Engine."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle E-Business Suite Secure Enterprise Search en Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con Search Integration Engine."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:03.920768Z","id":"CVE-2016-3549","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_secure_enterprise_search:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4F1AD0-7A52-4A3B-ACB7-906A0B79BBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_secure_enterprise_search:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"921569D2-13D9-4B24-880B-78117BC60804"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_secure_enterprise_search:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AE743241-C38A-4674-9D27-8FCA2D88AE82"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_secure_enterprise_search:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"66F59598-168F-4873-AD35-5F84AF0ECCF0"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91886","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3550","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:48.233","lastModified":"2026-06-17T00:45:56.213","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot."},{"lang":"es","value":"Vulnerabilidad en Oracle Java SE 6u115, 7u101 y 8u92 y Java SE Embedded 8u91 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con Hotspot."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:34.298588Z","id":"CVE-2016-3550","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update115:*:*:*:*:*:*","matchCriteriaId":"31B36B01-7736-44B7-BFE7-838E07013B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AEA7244-D1DC-4144-BA69-0488EDD8ABAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update91:*:*:*:*:*:*","matchCriteriaId":"429DC535-FA00-4309-AD75-E79F238A4B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"95C17CAA-0971-44CB-8A04-F135ACBEFBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.6.0:update115:*:*:*:*:*:*","matchCriteriaId":"F3E80A87-8142-4391-88C9-27FBE20BD9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:*","matchCriteriaId":"8AE0C67B-6B6E-4B16-A0EB-4DFBAE83134F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update91:*:*:*:*:*:*","matchCriteriaId":"35E4B9B9-917E-4EB1-B8ED-B69D5589A0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*","matchCriteriaId":"CFC93807-F81D-4F4C-AD4F-3F0A45C36F34"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1504.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1776.html","source":"secalert_us@oracle.com"},{"url":"http://www.debian.org/security/2016/dsa-3641","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91951","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036365","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3043-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3062-1","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3077-1","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1458","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1477","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201701-43","source":"secalert_us@oracle.com"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1776.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3043-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3062-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3077-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-43","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160721-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3553","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:50.203","lastModified":"2026-06-17T00:45:56.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality and integrity via vectors related to PC Core."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores relacionados con PC Core."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:33.042364Z","id":"CVE-2016-3553","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92007","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3555","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:52.093","lastModified":"2026-06-17T00:45:56.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PGC / Excel Plugin."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con PGC / Excel Plugin."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:31.551420Z","id":"CVE-2016-3555","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91997","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3557","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:54.407","lastModified":"2026-06-17T00:45:57.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to File Load."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados a File Load."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:24.979054Z","id":"CVE-2016-3557","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3558","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:55.343","lastModified":"2026-06-17T00:45:57.267","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Email Center Agent Console, a different vulnerability than CVE-2016-3559."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Email Center en Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la integridad a través de vectores relacionados con Email Center Agent Console, una vulnerabilidad diferente a CVE-2016-3559."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:23.362327Z","id":"CVE-2016-3558","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1898484-F93B-422D-949C-73272AF8C486"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A7437698-A0C0-4038-9786-01ABEFC9E2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4E5439E4-ED00-4CA9-9585-A1B339CB9ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DBBC5B43-4326-49EC-BDBD-3AB13D7A00D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"6BD11784-A642-4F43-9D98-73DE8A245B22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6337D432-6BEC-4632-A2C9-40D00CE89390"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91899","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3559","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:56.357","lastModified":"2026-06-17T00:45:57.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Email Center Agent Console, a different vulnerability than CVE-2016-3558."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Email Center en Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4 y 12.2.5 permite a atacantes remotos afectar la integridad a través de vectores relacionados con Email Center Agent Console, una vulnerabilidad diferente a CVE-2016-3558."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:21.897995Z","id":"CVE-2016-3559","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1898484-F93B-422D-949C-73272AF8C486"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A7437698-A0C0-4038-9786-01ABEFC9E2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4E5439E4-ED00-4CA9-9585-A1B339CB9ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DBBC5B43-4326-49EC-BDBD-3AB13D7A00D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.2.4:*:*:*:*:*:*:*","matchCriteriaId":"6BD11784-A642-4F43-9D98-73DE8A245B22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:email_center:12.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6337D432-6BEC-4632-A2C9-40D00CE89390"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91903","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036403","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3560","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:57.360","lastModified":"2026-06-17T00:45:57.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3526 and CVE-2016-3529."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Agile PLM en Oracle Supply Chain Products Suite 9.3.4 y 9.3.5 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con SDK, una vulnerabilidad diferente a CVE-2016-3526 y CVE-2016-3529."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:11:02.647525Z","id":"CVE-2016-3560","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"18260EE8-9BC0-4BA1-9642-90FE052E8B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036402","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3563","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:13:59.873","lastModified":"2026-06-17T00:45:57.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-5604."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Enterprise Manager Base Platform en Oracle Enterprise Manager Grid Control 12.1.0.5 permite a usuarios locales afectar la confidencialidad e integridad a través de vectores relacionados con Security Framework, una vulnerabilidad diferente a CVE-2016-5604."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.1,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:C/A:N","baseScore":5.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:20.454459Z","id":"CVE-2016-3563","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"36E39918-B2D6-43F0-A607-8FD8BFF6F340"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91880","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036406","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3566","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:03.017","lastModified":"2026-06-17T00:45:58.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Primavera P6 Enterprise Project Portfolio Management en Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2 y 16.1 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con el acceso Web, una vulnerabilidad diferente a CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571 y CVE-2016-3573."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:17.568393Z","id":"CVE-2016-3566","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*","matchCriteriaId":"A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"84BF6794-2CE6-407F-B8E0-81871AB7B40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021C23-AB9B-4877-833F-D01359A98762"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F8ED016-32A1-42EE-844E-3E6B2C116B74"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91851","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036393","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3567","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:04.157","lastModified":"2026-06-17T00:45:58.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web access."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Primavera P6 Enterprise Project Portfolio Management en Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2 y 16.1 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores relacionados con el acceso Web."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:16.250445Z","id":"CVE-2016-3567","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*","matchCriteriaId":"A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"84BF6794-2CE6-407F-B8E0-81871AB7B40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021C23-AB9B-4877-833F-D01359A98762"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F8ED016-32A1-42EE-844E-3E6B2C116B74"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91862","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036393","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3568","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:05.280","lastModified":"2026-06-17T00:45:58.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Primavera P6 Enterprise Project Portfolio Management en Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2 y 16.1 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con el acceso Web, una vulnerabilidad diferente a CVE-2016-3566, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571 y CVE-2016-3573."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:14.940288Z","id":"CVE-2016-3568","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*","matchCriteriaId":"A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"84BF6794-2CE6-407F-B8E0-81871AB7B40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021C23-AB9B-4877-833F-D01359A98762"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F8ED016-32A1-42EE-844E-3E6B2C116B74"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91876","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036393","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3569","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:06.593","lastModified":"2026-06-17T00:45:58.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Primavera P6 Enterprise Project Portfolio Management en Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2 y 16.1 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con el acceso Web, una vulnerabilidad diferente a CVE-2016-3566, CVE-2016-3568, CVE-2016-3570, CVE-2016-3571 y CVE-2016-3573."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:13.703331Z","id":"CVE-2016-3569","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*","matchCriteriaId":"A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"84BF6794-2CE6-407F-B8E0-81871AB7B40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021C23-AB9B-4877-833F-D01359A98762"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F8ED016-32A1-42EE-844E-3E6B2C116B74"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91859","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036393","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3570","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:08.093","lastModified":"2026-06-17T00:45:58.673","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3571, and CVE-2016-3573."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Primavera P6 Enterprise Project Portfolio Management en Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2 y 16.1 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con el acceso Web, una vulnerabilidad diferente aCVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3571 y CVE-2016-3573."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:12.382066Z","id":"CVE-2016-3570","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*","matchCriteriaId":"A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"84BF6794-2CE6-407F-B8E0-81871AB7B40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021C23-AB9B-4877-833F-D01359A98762"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F8ED016-32A1-42EE-844E-3E6B2C116B74"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91884","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036393","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3571","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:09.237","lastModified":"2026-06-17T00:45:58.797","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, and CVE-2016-3573."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Primavera P6 Enterprise Project Portfolio Management en Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2 y 16.1 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con el acceso Web, una vulnerabilidad diferente a CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570 y CVE-2016-3573."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:06.031678Z","id":"CVE-2016-3571","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*","matchCriteriaId":"A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"84BF6794-2CE6-407F-B8E0-81871AB7B40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021C23-AB9B-4877-833F-D01359A98762"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F8ED016-32A1-42EE-844E-3E6B2C116B74"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91866","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036393","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3572","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:10.377","lastModified":"2026-06-17T00:45:58.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Primavera P6 Enterprise Project Portfolio Management en Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2 y 16.1 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores relacionados con el acceso Web."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:48:04.614225Z","id":"CVE-2016-3572","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*","matchCriteriaId":"A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"84BF6794-2CE6-407F-B8E0-81871AB7B40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021C23-AB9B-4877-833F-D01359A98762"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F8ED016-32A1-42EE-844E-3E6B2C116B74"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91855","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036393","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3573","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:11.330","lastModified":"2026-06-17T00:45:59.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, and CVE-2016-3571."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Primavera P6 Enterprise Project Portfolio Management en Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2 y 16.1 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con el acceso Web, una vulnerabilidad diferente a CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570 y CVE-2016-3571."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:58.073527Z","id":"CVE-2016-3573","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*","matchCriteriaId":"A47BF03C-BF18-4477-9DBB-20EFEA53AFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"84BF6794-2CE6-407F-B8E0-81871AB7B40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021C23-AB9B-4877-833F-D01359A98762"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F8ED016-32A1-42EE-844E-3E6B2C116B74"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91881","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036393","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3588","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:27.907","lastModified":"2026-06-17T00:46:00.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect integrity and availability via vectors related to Server: InnoDB."},{"lang":"es","value":"Vulnerabilidad no especificad en Oracle MySQL 5.7.12 y en versiones anteriores permite a usuarios remotos autenticados afectar la integridad y disponibilidad a través de vectores relacionados con Server: InnoDB."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:P","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:56.288427Z","id":"CVE-2016-3588","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.12","matchCriteriaId":"64C785AD-A655-4124-BB69-8A44B49107E7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91983","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3589","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:28.957","lastModified":"2026-06-17T00:46:01.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Applications 12.0.1, 12.0.2, and 12.0.3 allows remote attackers to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle FLEXCUBE Direct Banking en Oracle Financial Services Applications 12.0.1, 12.0.2 y 12.0.3 permite a atacantes remotos afectas a la confidencialidad e integridad a través de vectores desconocidos."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:54.823278Z","id":"CVE-2016-3589","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:flexcube_direct_banking:12.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CF5D05AF-04DE-44C3-B3E0-C105EF8807EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:flexcube_direct_banking:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DC13CF11-2880-41FA-9534-7874904FDD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FA84D97F-A400-4D39-B60A-63F3407E2B68"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91847","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036376","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3597","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:37.347","lastModified":"2026-06-17T00:46:02.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox en versiones anteriores a 5.0.26 permite a usuarios locales afectar la disponibilidad relacionada con Core."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:53.557848Z","id":"CVE-2016-3597","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.24","matchCriteriaId":"26E13B91-C743-420F-93AC-23A0A3F29C69"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91864","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036384","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3608","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:41.690","lastModified":"2026-06-17T00:46:02.900","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle GlassFish Server en Oracle Fusion Middleware 3.0.1 permite a atacantes remotos afectar la confidencialidad, a través de vectores relacionados con Administration."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:10:09.717912Z","id":"CVE-2016-3608","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92031","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036371","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3611","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:45.020","lastModified":"2026-06-17T00:46:04.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote attackers to affect confidentiality and integrity via vectors related to System Administration."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Retail Order Broker en Oracle Retail Applications 15.0 permite a atacantes remotos afectar la confidencialidad e integridad a través de vectores relacionados con System Administration."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:52.235451Z","id":"CVE-2016-3611","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_order_broker_cloud_service:15.0:*:*:*:*:*:*:*","matchCriteriaId":"3B9763AF-282B-40C7-B35C-4CA8C22FDC76"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91901","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036397","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3612","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:45.987","lastModified":"2026-06-17T00:46:04.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.22 allows remote attackers to affect confidentiality via vectors related to Core."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox en versiones anteriores a 5.0.22 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con Core."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:50.289049Z","id":"CVE-2016-3612","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.20","matchCriteriaId":"CCD89233-30CE-4944-9700-DE7DA76C73C2"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91860","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036384","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3614","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:48.397","lastModified":"2026-06-17T00:46:04.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.6.30 y versiones anteriores y 5.7.12 y versiones anteriores permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores relacionados con Server: Security: Encryption."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:48.695575Z","id":"CVE-2016-3614","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.30","matchCriteriaId":"E8519121-8EA3-4851-A824-13921232DB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.12","matchCriteriaId":"2E576DEB-1E39-4582-BFAA-E1D9F311242D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91992","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3615","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:49.613","lastModified":"2026-06-17T00:46:04.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.49 y versiones anteriores, 5.6.30 y versiones anteriores y 5.7.12 y versiones anteriores y MariaDB en versiones anteriores a 5.5.50, 10.0.x en versiones anteriores a 10.0.26 y 10.1.x en versiones anteriores a 10.1.15 permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores relacionados con Server: DML."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:47.029746Z","id":"CVE-2016-3615","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.50","matchCriteriaId":"75234AB4-E57D-44ED-A3FF-E9A5B8C53C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.26","matchCriteriaId":"164A66E3-C17C-4A73-9D74-597D7670A69C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.15","matchCriteriaId":"6724CBC2-7F62-4D6A-8AF4-8E69F6F99D03"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.49","matchCriteriaId":"C3890FB9-556E-49DD-9A1E-21DA45BFBE80"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.30","matchCriteriaId":"E8519121-8EA3-4851-A824-13921232DB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.12","matchCriteriaId":"2E576DEB-1E39-4582-BFAA-E1D9F311242D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1603.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1604.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1637.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3624","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3632","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91960","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1603.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1604.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1637.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5436","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:50.723","lastModified":"2026-06-17T00:49:24.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: InnoDB."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:45.622734Z","id":"CVE-2016-5436","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.12","matchCriteriaId":"64C785AD-A655-4124-BB69-8A44B49107E7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91906","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5437","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:51.693","lastModified":"2026-06-17T00:49:24.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: Log."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:43.582040Z","id":"CVE-2016-5437","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.12","matchCriteriaId":"64C785AD-A655-4124-BB69-8A44B49107E7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91917","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5439","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:52.723","lastModified":"2026-06-17T00:49:24.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Privileges."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.6.30 y versiones anteriores y 5.7.12 y versiones anteriores permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: Privileges."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:36.840064Z","id":"CVE-2016-5439","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.30","matchCriteriaId":"E8519121-8EA3-4851-A824-13921232DB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.12","matchCriteriaId":"2E576DEB-1E39-4582-BFAA-E1D9F311242D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91969","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5440","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:53.707","lastModified":"2026-06-17T00:49:24.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.5.49 y versiones anteriores, 5.6.30 y versiones anteriores y 5.7.12 y versiones anteriores y MariaDB en versiones anteriores a 5.5.50, 10.0.x en versiones anteriores a 10.0.26 y 10.1.x en versiones anteriores a 10.1.15 permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: RBR."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:35.322204Z","id":"CVE-2016-5440","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"161594FF-0DF8-43C8-B532-EBB20228023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerkvm:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0744845-0230-47E7-866A-0880832B31C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.20","versionEndExcluding":"5.5.50","matchCriteriaId":"75234AB4-E57D-44ED-A3FF-E9A5B8C53C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.26","matchCriteriaId":"164A66E3-C17C-4A73-9D74-597D7670A69C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndExcluding":"10.1.15","matchCriteriaId":"6724CBC2-7F62-4D6A-8AF4-8E69F6F99D03"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.49","matchCriteriaId":"C3890FB9-556E-49DD-9A1E-21DA45BFBE80"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.30","matchCriteriaId":"E8519121-8EA3-4851-A824-13921232DB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.12","matchCriteriaId":"2E576DEB-1E39-4582-BFAA-E1D9F311242D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1603.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1604.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1637.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3624","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3632","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91953","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1601.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1602.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1603.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1604.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1637.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5441","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:54.630","lastModified":"2026-06-17T00:49:25.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Replication."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: Replication."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:29.068315Z","id":"CVE-2016-5441","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.12","matchCriteriaId":"64C785AD-A655-4124-BB69-8A44B49107E7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91915","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5442","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:55.613","lastModified":"2026-06-17T00:49:25.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Security: Encryption."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: Security: Encryption."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:27.845577Z","id":"CVE-2016-5442","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.12","matchCriteriaId":"64C785AD-A655-4124-BB69-8A44B49107E7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91974","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5443","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:56.693","lastModified":"2026-06-17T00:49:25.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows local users to affect availability via vectors related to Server: Connection."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con Server: Connection."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:P","baseScore":1.2,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:26.628865Z","id":"CVE-2016-5443","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.12","matchCriteriaId":"64C785AD-A655-4124-BB69-8A44B49107E7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91963","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036362","source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3040-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5448","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:03.867","lastModified":"2026-06-17T00:49:26.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente ILOM en Oracle Sun Systems Products Suite 3.0, 3.1 y 3.2 permite a atacantes remotos afectar la integridad y disponibilidad a través de vectores relacionados con SNMP."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:09:55.331582Z","id":"CVE-2016-5448","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F03D9357-7755-488D-80A2-F922CA4283DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7CEFD9F-B0CC-40E5-921F-34B354B465E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F788EE61-2231-4364-869F-8E29321E4B67"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92008","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036408","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5450","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:06.037","lastModified":"2026-06-17T00:49:26.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to UIF Open UI."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel UI Framework en Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015 e IP2016 permite a atacantes remotos afectar la integridad a través de vectores relacionadods con UIF Open UI."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:22.982771Z","id":"CVE-2016-5450","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3548AC23-D3AF-4202-9F87-C9A29A56B376"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"14EF3E4D-FC8E-446B-A2FD-621A20578ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2014:*:*:*:*:*:*:*","matchCriteriaId":"3B95DDDC-735E-46DA-8975-4C6C7B8C2012"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2015:*:*:*:*:*:*:*","matchCriteriaId":"888FB996-71B2-47F4-A98F-54DF8E88B067"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2016:*:*:*:*:*:*:*","matchCriteriaId":"D39F613D-E2B6-4ECE-A3A6-3C4E7DC7503A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91981","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5452","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:08.427","lastModified":"2026-06-17T00:49:26.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality via vectors related to Verified Boot."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 11.3 permite a usuarios locales afectar la confidencialidad a través de vectores relacionados con Verified Boot."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:21.495219Z","id":"CVE-2016-5452","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91916","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036407","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5454","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:10.553","lastModified":"2026-06-17T00:49:26.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Verified Boot."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 11.3 permite a usuarios locales afectar la integridad y la disponibilidad a través de vectores relacionados con Verified Boot."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.1,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:C","baseScore":5.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:20.229452Z","id":"CVE-2016-5454","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91957","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036407","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5455","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:11.677","lastModified":"2026-06-17T00:49:26.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attackers to affect confidentiality via vectors related to Multiplexor."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Communications Messaging Server en Oracle Communications Applications 6.3, 7.0 y 8.0 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con Multiplexor."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:09:47.712956Z","id":"CVE-2016-5455","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_messaging_server:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A4CFAEC6-191E-4AA2-9106-5E93A71E6AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_messaging_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0C190673-EC92-4CD5-ADED-E3B5E5611360"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_messaging_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"FA1C04F6-ED13-4FB4-BA9B-BBB85D6007F1"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91863","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036401","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5456","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:12.663","lastModified":"2026-06-17T00:49:26.933","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Services."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel Core - Server Framework en Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015 e IP2016 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores relacionados con Services."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:N/A:N","baseScore":6.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:18.743657Z","id":"CVE-2016-5456","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"18E30DBF-BFA2-45DA-8EB5-7C636F1D0186"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C90F046-31FB-4A4B-981A-611C09468311"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:2014:*:*:*:*:*:*:*","matchCriteriaId":"A40E913F-203C-4D2D-A55C-F014ED7A7DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:2015:*:*:*:*:*:*:*","matchCriteriaId":"B013DB2D-85A0-4B07-ACAB-1274A6D5F939"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:2016:*:*:*:*:*:*:*","matchCriteriaId":"E7D10065-4F7B-4AD4-94C3-07B58FC188D7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91958","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5458","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:14.587","lastModified":"2026-06-17T00:49:27.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Communications EAGLE Application Processor component in Oracle Communications Applications 16.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to APPL."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Communications EAGLE Application Processor en Oracle Communications Applications 16.0 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores relacionados con APPL."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:17.425003Z","id":"CVE-2016-5458","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_eagle_application_processor:16.0:*:*:*:*:*:*:*","matchCriteriaId":"E9FDB6EE-EC5D-44F2-AEA0-0B605D5C6742"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91868","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036401","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5459","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:15.553","lastModified":"2026-06-17T00:49:27.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to iHelp."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel Core - Common Components en Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015 e IP2016 permite a atacantes remotos afectar la integridad a través de vectores relacionados con iHelp."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:16.212427Z","id":"CVE-2016-5459","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-common_components:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7435C5CB-DF81-4B5B-A67E-F4074D438A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-common_components:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6F60EF4C-1F2D-4675-A7A1-B7AE195ED941"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-common_components:2014:*:*:*:*:*:*:*","matchCriteriaId":"90D40908-C971-49CD-94DB-C118B2DEEEF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-common_components:2015:*:*:*:*:*:*:*","matchCriteriaId":"A5C9AFE6-CC16-42A9-882C-0917D38D7610"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-common_components:2016:*:*:*:*:*:*:*","matchCriteriaId":"4BED5738-41FE-4971-A5C2-6011C938D27B"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91985","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5461","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:17.663","lastModified":"2026-06-17T00:49:27.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Object Manager."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel Core - Server Framework en Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015 e IP2016 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores relacionados con Object Manager."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:13.752133Z","id":"CVE-2016-5461","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"18E30DBF-BFA2-45DA-8EB5-7C636F1D0186"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C90F046-31FB-4A4B-981A-611C09468311"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:2014:*:*:*:*:*:*:*","matchCriteriaId":"A40E913F-203C-4D2D-A55C-F014ED7A7DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:2015:*:*:*:*:*:*:*","matchCriteriaId":"B013DB2D-85A0-4B07-ACAB-1274A6D5F939"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_core-server_framework:2016:*:*:*:*:*:*:*","matchCriteriaId":"E7D10065-4F7B-4AD4-94C3-07B58FC188D7"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91964","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5463","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:20.037","lastModified":"2026-06-17T00:49:27.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5464."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel UI Framework en Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015 e IP2016 permite a usuarios remotos autenticados afectar la integridad a través de vectores relacionados con SWSE Server, una vulnerabilidad diferente a CVE-2016-5464."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:11.140264Z","id":"CVE-2016-5463","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3548AC23-D3AF-4202-9F87-C9A29A56B376"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"14EF3E4D-FC8E-446B-A2FD-621A20578ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2014:*:*:*:*:*:*:*","matchCriteriaId":"3B95DDDC-735E-46DA-8975-4C6C7B8C2012"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2015:*:*:*:*:*:*:*","matchCriteriaId":"888FB996-71B2-47F4-A98F-54DF8E88B067"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2016:*:*:*:*:*:*:*","matchCriteriaId":"D39F613D-E2B6-4ECE-A3A6-3C4E7DC7503A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91988","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5464","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:21.210","lastModified":"2026-06-17T00:49:27.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5463."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel UI Framework en Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015 e IP2016 permite a usuarios remotos autenticados afectar la integridad a través de vectores relacionados con SWSE Server, una vulnerabilidad diferente a CVE-2016-5463."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:09.851329Z","id":"CVE-2016-5464","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3548AC23-D3AF-4202-9F87-C9A29A56B376"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"14EF3E4D-FC8E-446B-A2FD-621A20578ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2014:*:*:*:*:*:*:*","matchCriteriaId":"3B95DDDC-735E-46DA-8975-4C6C7B8C2012"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2015:*:*:*:*:*:*:*","matchCriteriaId":"888FB996-71B2-47F4-A98F-54DF8E88B067"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2016:*:*:*:*:*:*:*","matchCriteriaId":"D39F613D-E2B6-4ECE-A3A6-3C4E7DC7503A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91994","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5467","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:24.540","lastModified":"2026-06-17T00:49:28.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to eProcurement."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise FSCM en Oracle PeopleSoft Products 9.1 y 9.2 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores relacionados con eProcurement."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:47:00.713222Z","id":"CVE-2016-5467","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_scm_eprocurement:9.1:*:*:*:*:*:*:*","matchCriteriaId":"213CF543-1D06-4538-8E4E-A3B0E199F0F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_scm_eprocurement:9.2:*:*:*:*:*:*:*","matchCriteriaId":"D9938A25-0584-4666-BAF3-42257CB94F4E"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91879","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036404","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5468","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:25.507","lastModified":"2026-06-17T00:49:28.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality and integrity via vectors related to EAI, a different vulnerability than CVE-2016-5451."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Siebel UI Framework en Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015 e IP2016 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores relacionados con EAI, una vulnerabilidad diferente a CVE-2016-5451."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:46:59.394766Z","id":"CVE-2016-5468","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3548AC23-D3AF-4202-9F87-C9A29A56B376"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"14EF3E4D-FC8E-446B-A2FD-621A20578ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2014:*:*:*:*:*:*:*","matchCriteriaId":"3B95DDDC-735E-46DA-8975-4C6C7B8C2012"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2015:*:*:*:*:*:*:*","matchCriteriaId":"888FB996-71B2-47F4-A98F-54DF8E88B067"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_ui_framework:2016:*:*:*:*:*:*:*","matchCriteriaId":"D39F613D-E2B6-4ECE-A3A6-3C4E7DC7503A"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91973","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036400","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5469","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:26.570","lastModified":"2026-06-17T00:49:28.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and CVE-2016-5471."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 11.3 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con el Kernel, una vulnerabilidad diferente a CVE-2016-3497 y CVE-2016-5471."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:46:58.209233Z","id":"CVE-2016-5469","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91938","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036407","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5470","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:27.493","lastModified":"2026-06-17T00:49:28.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality via vectors related to Application Designer."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Products 8.54 y 8.55 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con Application Designer."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:46:56.835751Z","id":"CVE-2016-5470","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91875","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036404","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5471","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:28.960","lastModified":"2026-06-17T00:49:28.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and CVE-2016-5469."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Sun Solaris 11.3 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con el Kernel, una vulnerabilidad diferente a CVE-2016-3497 y CVE-2016-5469."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T19:46:55.371203Z","id":"CVE-2016-5471","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92020","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036407","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5477","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:15:34.963","lastModified":"2026-06-17T00:49:29.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle GlassFish Server en Oracle Fusion Middleware 2.1.1 y 3.0.1 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con Administration."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:09:46.579825Z","id":"CVE-2016-5477","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E80F5AC-A2EF-4D8A-AE8F-5DD0FF9B48C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92032","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036371","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1865","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:02.877","lastModified":"2026-06-17T00:42:46.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors."},{"lang":"es","value":"El kernel en Apple iOS en versiones anteriores a 9.3.3, OS X en versiones anteriores a 10.11.6, tvOS en versiones anteriores a 9.2.2 y watchOS en versiones anteriores a 2.2.2 permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL) a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.3","matchCriteriaId":"58AFFDB5-B32E-4283-968F-BBFA4CAAC2E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.6","matchCriteriaId":"345C1D2B-0795-4041-BB43-0196DC1A37E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.2","matchCriteriaId":"DE82A10D-FF16-469F-9CC0-D97EE6B694BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.2","matchCriteriaId":"0C06D177-4027-4F79-832E-196EB0B14109"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91828","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036344","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206903","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206904","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4585","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:07.910","lastModified":"2026-06-17T00:47:50.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari."},{"lang":"es","value":"Vulnerabilidad de XSS en la implementación de WebKit Page Loading en Apple iOS en versiones anteriores a 9.3.3, Safari en versiones anteriores a 9.1.2 y tvOS en versiones anteriores a 9.2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una respuesta HTTP especificando redirección que Safari no maneja correctamente."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*","matchCriteriaId":"461EFB63-7933-488C-BB4E-7C913364F5A9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"9.1.2","matchCriteriaId":"7B608DDE-2886-440E-A78B-4B6305BE37E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.3","matchCriteriaId":"58AFFDB5-B32E-4283-968F-BBFA4CAAC2E1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.2","matchCriteriaId":"DE82A10D-FF16-469F-9CC0-D97EE6B694BA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91830","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036343","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206900","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4587","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:10.003","lastModified":"2026-06-17T00:47:50.790","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site."},{"lang":"es","value":"WebKit en Apple iOS en versiones anteriores a 9.3.3 y tvOS en versiones anteriores a 9.2.2 permite a atacantes remotos obtener información sensible de procesos de memoria no inicializados a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*","matchCriteriaId":"461EFB63-7933-488C-BB4E-7C913364F5A9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.3","matchCriteriaId":"58AFFDB5-B32E-4283-968F-BBFA4CAAC2E1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.2","matchCriteriaId":"DE82A10D-FF16-469F-9CC0-D97EE6B694BA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91830","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036344","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4590","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:13.473","lastModified":"2026-06-17T00:47:51.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site."},{"lang":"es","value":"Webkit en Apple iOS en versiones anteriores a 9.3.3 y Safari en versiones anteriores a 9.1.2 no maneja correctamente about: URLs, lo que permite a atacantes remotos eludir la Same Origin Policy a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.1","matchCriteriaId":"CC81F05D-2DAC-479D-9960-3466C94A07F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*","matchCriteriaId":"461EFB63-7933-488C-BB4E-7C913364F5A9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.2","matchCriteriaId":"94DFD373-7DC2-45F3-86F0-A005E6F7D533"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/91835","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036343","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206900","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4592","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:15.537","lastModified":"2026-06-17T00:47:51.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site."},{"lang":"es","value":"Webkit en Apple iOS en versiones anteriores a 9.3.3, Safari en versiones anteriores a 9.1.2 y tvOS en versiones anteriores a 9.2.2 permite a atacantes remotos provocar una denegación del servicio (consumo de memoria) a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*","matchCriteriaId":"8119EBD6-A1CC-4121-BADD-555437E911FE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"9.1.2","matchCriteriaId":"7B608DDE-2886-440E-A78B-4B6305BE37E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.3","matchCriteriaId":"58AFFDB5-B32E-4283-968F-BBFA4CAAC2E1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.2","matchCriteriaId":"DE82A10D-FF16-469F-9CC0-D97EE6B694BA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webkitgtk:webkitgtk\\+:*:*:*:*:*:*:*:*","versionEndExcluding":"2.10.5","matchCriteriaId":"5A0B442D-734D-49F8-A5AD-D55A787E04F4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91830","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036343","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206900","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT206900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4595","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:18.677","lastModified":"2026-06-17T00:47:51.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure."},{"lang":"es","value":"Safari Login AutoFill en Apple OS X en versiones anteriores a 10.11.6 permite a atacantes físicamente próximos descubrir contraseñas leyendo la pantalla durante el proceso de inicio de sesión."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.5","matchCriteriaId":"73712D16-E03B-4230-B253-4E96EEE61EA7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036348","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206903","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4603","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:27.380","lastModified":"2026-06-17T00:47:52.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior."},{"lang":"es","value":"Web Media en Apple iOS en versiones anteriores a 9.3.3 permite a atacantes eludir el mecanismo de protección Private Browsing y obtener información sensible de URL de vídeo aprovechando el mal comportamiento de Safari View Controller."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.2","matchCriteriaId":"94DFD373-7DC2-45F3-86F0-A005E6F7D533"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91825","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036344","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4604","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:28.397","lastModified":"2026-06-17T00:47:52.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number."},{"lang":"es","value":"Safari en Apple iOS en versiones anteriores a 9.3.3 permite a atacantes remotos suplantar la URL visualizada a través de una respuesta HTTP especificando redirección a un número de puerto TCP no valido."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.2","matchCriteriaId":"94DFD373-7DC2-45F3-86F0-A005E6F7D533"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91825","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036344","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4605","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:29.413","lastModified":"2026-06-17T00:47:52.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a crafted invitation."},{"lang":"es","value":"Calendar en Apple iOS en versiones anteriores a la 9.3.3 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y reinicio de dispositivo) a través de una invitación manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.2","matchCriteriaId":"94DFD373-7DC2-45F3-86F0-A005E6F7D533"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91825","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036344","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4628","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:48.650","lastModified":"2026-06-17T00:47:55.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via unspecified vectors."},{"lang":"es","value":"IOAcceleratoFamily en Apple iOS en versiones anteriores a 9.3.3 y watchOS en versiones anteriores a 2.2.2 permite a usuarios locales obtener información sensible del kernel de memoria o provocar una denegación de servicio (lectura fuera de rango) a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.2","matchCriteriaId":"94DFD373-7DC2-45F3-86F0-A005E6F7D533"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1","matchCriteriaId":"66612D5A-D83D-4298-8662-C82B19581349"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91832","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036344","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206904","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4635","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T02:59:56.430","lastModified":"2026-06-17T00:47:56.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FaceTime in Apple iOS before 9.3.3 and OS X before 10.11.6 allows man-in-the-middle attackers to spoof relayed-call termination, and obtain sensitive audio information in opportunistic circumstances, via unspecified vectors."},{"lang":"es","value":"FaceTime en Apple iOS en versiones anteriores a 9.3.3 y OS X en versiones anteriores a 10.11.6 permite a atacantes man-in-the-middle suplantar la retransmisión de llamada y obtener información de audio sensible en circunstancias oportunistas, a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.2","matchCriteriaId":"94DFD373-7DC2-45F3-86F0-A005E6F7D533"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.5","matchCriteriaId":"73712D16-E03B-4230-B253-4E96EEE61EA7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91829","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036344","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1037086","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206903","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1037086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4646","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T03:00:04.730","lastModified":"2026-06-17T00:47:57.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Audio in Apple OS X before 10.11.6 mishandles a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted audio file."},{"lang":"es","value":"Audio en Apple OS X en versiones anteriores a 10.11.6 no maneja correctamente un valor de tamaño, lo que permite a atacantes remotos obtener información sensible o provocar una denegación de servicio (lectura fuera de rango) a través de una archivo de audio manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.5","matchCriteriaId":"73712D16-E03B-4230-B253-4E96EEE61EA7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036348","source":"product-security@apple.com"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-439/","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-439/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4648","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T03:00:07.043","lastModified":"2026-06-17T00:47:57.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Audio in Apple OS X before 10.11.6 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors."},{"lang":"es","value":"Audio en Apple OS X en versiones anteriores a 10.11.6 permite a usuarios locales obtener información sensible de la estructura de memoria del kernel o provocar una denegación de servicio (lectura fuera de rango) a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.5","matchCriteriaId":"73712D16-E03B-4230-B253-4E96EEE61EA7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036348","source":"product-security@apple.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-496","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206903","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4649","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T03:00:08.153","lastModified":"2026-06-17T00:47:57.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors."},{"lang":"es","value":"Audio en Apple OS X en versiones anteriores a 10.11.6 permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL) a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.5","matchCriteriaId":"73712D16-E03B-4230-B253-4E96EEE61EA7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036348","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206903","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4651","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T03:00:09.137","lastModified":"2026-06-17T00:47:57.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before 9.1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/0.9 response, related to a \"cross-protocol cross-site scripting (XPXSS)\" vulnerability."},{"lang":"es","value":"Vulnerabilidad de XSS en el WebKit JavaScript bindings en Apple iOS en versiones anteriores a 9.3.3 y Safari en versiones anteriores a 9.1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una respuesta HTTP/0.9 manipulada, relacionado con una vulnerabilidad \"cross-protocol cross-site scripteng (XPXSS)\"."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.2","matchCriteriaId":"94DFD373-7DC2-45F3-86F0-A005E6F7D533"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.1","matchCriteriaId":"CC81F05D-2DAC-479D-9960-3466C94A07F7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/91835","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036343","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT206900","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/539295/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT206902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4652","sourceIdentifier":"product-security@apple.com","published":"2016-07-22T03:00:10.230","lastModified":"2026-06-17T00:47:58.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from kernel memory and consequently gain privileges, or cause a denial of service (out-of-bounds read), via unspecified vectors."},{"lang":"es","value":"CoreGraphics en Apple OS X en versiones anteriores a 10.11.6 permite a usuarios locales obtener información sensible de la memoria del kernel y por consiguiente obtener privilegios o provocar una denegación de memoria (lectura fuera de rango), a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:P","baseScore":3.3,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.5","matchCriteriaId":"73712D16-E03B-4230-B253-4E96EEE61EA7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036348","source":"product-security@apple.com"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-432/","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-432/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6204","sourceIdentifier":"cve@mitre.org","published":"2016-07-22T15:59:04.367","lastModified":"2026-06-17T00:50:37.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en el servidor web integrado en Siemens SINEMA Remote Connect Server en versiones anteriores a 1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"E244EACA-2DCA-4E24-8FC2-9E7B37057F3F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92114","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-119132.pdf","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-208-03","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-119132.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-208-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1707","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-07-23T19:59:02.543","lastModified":"2026-06-17T00:42:28.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site."},{"lang":"es","value":"ios/web/web_state/ui/crw_web_controller.mm en Google Chrome en versiones anteriores en 52.0.2743.82 en iOS no asegura que una URL no válida sea reemplazada con la URL about:blank, lo que permite a atacantes remotos suplantar la URL mostrada a través de un sitio web manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"51.0.2704.106","matchCriteriaId":"BC23C474-0857-44A5-ADAE-8AFDEB4EFECE"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92053","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036428","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2086333003","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/622183","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2086333003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/622183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5130","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-07-23T19:59:12.360","lastModified":"2026-06-17T00:48:48.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site."},{"lang":"es","value":"content/renderer/history_controller.cc en Google Chrome en versiones anteriores a 52.0.2743.82 no restringe adecuadamente los múltiples usos de un método de redireccionamiento de JavaScript, lo que permite a atacantes remotos suplantar la URL mostrada a través de un sitio web manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"51.0.2704.106","matchCriteriaId":"BC23C474-0857-44A5-ADAE-8AFDEB4EFECE"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1485.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92053","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036428","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-3041-1","source":"chrome-cve-admin@google.com"},{"url":"https://bugs.chromium.org/p/chromium/issues/detail?id=626838","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2134493002/","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2144823002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/623319","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1485.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3041-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.chromium.org/p/chromium/issues/detail?id=626838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2134493002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2144823002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/623319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5133","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-07-23T19:59:15.937","lastModified":"2026-06-17T00:48:48.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authentication login prompt or trigger incorrect credential storage by modifying the client-server data stream."},{"lang":"es","value":"Google Chrome en versiones anteriores a 52.0.2743.82 no maneja correctamente información de origen durante la autenticación del proxy, lo que permite a atacantes man-in-the-middle suplantar una autenticación del proxy de aviso de inicio de sesión o desencadenar almacenamiento de credenciales incorrectas modificando el flujo de datos cliente-servidor."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"51.0.2704.106","matchCriteriaId":"BC23C474-0857-44A5-ADAE-8AFDEB4EFECE"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1485.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92053","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036428","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-3041-1","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2067933002/","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/613626","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1485.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3041-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2067933002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/613626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5135","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-07-23T19:59:18.577","lastModified":"2026-06-17T00:48:49.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted web site, as demonstrated by a \"Content-Security-Policy: referrer origin-when-cross-origin\" header that overrides a \"<META name='referrer' content='no-referrer'>\" element."},{"lang":"es","value":"WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp en Blink, como se usa en Google Chrome en versiones anteriores a 52.0.2743.82, no considera información referente a las políticas dentro de un documento HTML durante la solicitud de precarga, lo que permite a atacantes remotos eludir el mecanismo de protección Content Security Policy (CSP) a través de un sitio web manipulado, según lo demonstrado por una cabecera \"Content-Security-Policy: referrer origin-when-cross-origin\" que anula un elemento \"\"."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"51.0.2704.106","matchCriteriaId":"BC23C474-0857-44A5-ADAE-8AFDEB4EFECE"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1485.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92053","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036428","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-3041-1","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1913983002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/605451","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1485.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3041-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1913983002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/605451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5137","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-07-23T19:59:20.593","lastModified":"2026-06-17T00:48:49.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report.  NOTE: this vulnerability is associated with a specification change after CVE-2016-1617 resolution."},{"lang":"es","value":"La función CSPSource::schemeMatches en WebKit/Source/core/frame/csp/CSPSource.cpp en la implementación Content Security Policy (CSP) en Blink, como se usa en Google Chrome en versiones anteriores a 52.0.2743.82, no aplica políticas http :80 a URLs https :443 y no aplica políticas ws :80 a URLs wss :443, lo que facilita para atacantes remotos determinar si un sitio web HSTS específico ha sido visitado leyendo un reporte CSP. NOTA: esta vulnerabilidad está asociada con un cambio en la especificación despues de la resolución CVE-2016-1617."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"51.0.2704.106","matchCriteriaId":"BC23C474-0857-44A5-ADAE-8AFDEB4EFECE"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1485.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92053","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036428","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-3041-1","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2125873003","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/625945","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1485.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3041-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2125873003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/625945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6292","sourceIdentifier":"cve@mitre.org","published":"2016-07-25T14:59:05.340","lastModified":"2026-06-17T00:50:45.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted JPEG image."},{"lang":"es","value":"La función exif_process_user_comment en ext/exif/exif.c en PHP en versiones anteriores a 5.5.38, 5.6.x en versiones anteriores a 5.6.24 y 7.x en versiones anteriores a 7.0.9 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída de aplicación) a través de una imagen JPEG manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.37","matchCriteriaId":"11DF4C58-F13C-40DC-8821-A7C704CA964C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"5BF4E8FF-A3EC-43E8-A0C1-FD38AFCB77B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"54ADECFC-3C07-43BC-B296-6C25AC7F1C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"FE192054-2FBB-4388-A52A-422E20DEA2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"F0195D48-3B42-4AC0-B9C5-436E01C63879"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"BF0E5D67-ABC1-41A5-94E1-7DD3CDB51D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"319E0573-B1AD-40B6-B4BC-8BE67ED3EFDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"1A7C00EB-87B7-4EB7-A4AC-8665D8C78467"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"21BFCF10-786A-4D1E-9C37-50A1EC6056F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"95A6D6C8-5F46-4897-A0B0-778631E8CE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F13E2D-A8F7-4B74-8D03-7905C81672C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE18933A-5FE6-41C7-B1B6-DA3E762C3FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9AE1289F-03A6-4621-B387-5F5ADAC4AE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"383697F5-D29E-475A-84F3-46B54A928889"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"786ED182-5D71-4197-9196-12AB5CF05F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.6:*:*:*:*:*:*:*","matchCriteriaId":"BF90980D-74AD-44AA-A7C5-A0B294CCE4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.7:*:*:*:*:*:*:*","matchCriteriaId":"48D6B69C-8F27-4F4C-B953-67A7F9C2FBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B53DC0C3-EA19-4465-B65A-BC7CDB10D8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.9:*:*:*:*:*:*:*","matchCriteriaId":"BEA4DFC1-6C0C-42FB-9F47-E3E1AA9E47E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.10:*:*:*:*:*:*:*","matchCriteriaId":"D904E21A-4B3B-4D96-850C-0C0315F14E6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.11:*:*:*:*:*:*:*","matchCriteriaId":"C7CEF6D7-8966-45E7-BEBB-12055F5898C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.12:*:*:*:*:*:*:*","matchCriteriaId":"171C1035-414C-4F3A-90F4-1A8ED26E3346"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.13:*:*:*:*:*:*:*","matchCriteriaId":"725BBA4E-B3BA-4AFA-A284-E0CDE3EC8FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.14:*:*:*:*:*:*:*","matchCriteriaId":"F7793408-66A2-4DE7-B5AA-E49E8A2EE043"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.15:*:*:*:*:*:*:*","matchCriteriaId":"95840EC0-512D-468D-99B0-17E8CFDD6BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.16:*:*:*:*:*:*:*","matchCriteriaId":"E1078D15-8073-4C04-82C2-3C8111E18B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.17:*:*:*:*:*:*:*","matchCriteriaId":"1B2E5E0C-8DD7-4CF8-A7E7-28ED0FD8B0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.18:*:*:*:*:*:*:*","matchCriteriaId":"3E6EE9E4-9D6E-4CCC-B116-6020DA6884BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.19:*:*:*:*:*:*:*","matchCriteriaId":"F9A23E37-8B94-440A-8014-389AC5389A19"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.20:*:*:*:*:*:*:*","matchCriteriaId":"AD5E20AF-724B-4DBD-9AED-920375666B6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.21:*:*:*:*:*:*:*","matchCriteriaId":"FD008BBB-10C9-48E2-97B8-6B86B54FD48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.22:*:*:*:*:*:*:*","matchCriteriaId":"90727984-6853-4348-B3CD-4869788117FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.23:*:*:*:*:*:*:*","matchCriteriaId":"08AA5F56-9D59-436E-BEB8-68A8A73B6D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6B90B947-7B54-47F3-9637-2F4AC44079EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"35848414-BD5D-4164-84DC-61ABBB1C4152"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1F8402-8551-4F66-A9A7-81D472AB058E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7A773E8E-48CD-4D35-A0FD-629BD9334486"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FC492340-79AF-4676-A161-079A97EC6F0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"751F51CA-9D88-4971-A6EC-8C0B72E8E22B"}]}]}],"references":[{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=41131cd41d2fd2e0c2f332a27988df75659c42e4","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/24/2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://php.net/ChangeLog-5.php","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://php.net/ChangeLog-7.php","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3631","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92078","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036430","source":"cve@mitre.org"},{"url":"https://bugs.php.net/72618","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201611-22","source":"cve@mitre.org"},{"url":"https://support.apple.com/HT207170","source":"cve@mitre.org"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=41131cd41d2fd2e0c2f332a27988df75659c42e4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2016/07/24/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://php.net/ChangeLog-7.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/72618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201611-22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3992","sourceIdentifier":"cve@mitre.org","published":"2016-07-26T17:59:01.577","lastModified":"2026-06-17T00:46:41.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"cronic before 3 allows local users to write to arbitrary files via a symlink attack on a (1) cronic.out.$$, (2) cronic.err.$$, or (3) cronic.trace.$$ file in /tmp."},{"lang":"es","value":"cronic en versiones anteriores a 3 permite a usuarios locales escribir en archivos arbitrarios a través de un ataque de enlace simbólico en un archivo (1) cronic.out.$$, (2) cronic.err.$$ o (3) cronic.trace.$$ en /tmp."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cronic_project:cronic:2:*:*:*:*:*:*:*","matchCriteriaId":"D8B9FEC9-E2C3-4986-91F2-1EBBF0BDF2FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00013.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/09/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/10/2","source":"cve@mitre.org"},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=820331","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/09/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/10/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=820331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1460","sourceIdentifier":"psirt@cisco.com","published":"2016-07-28T01:59:41.727","lastModified":"2026-06-17T00:42:01.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979."},{"lang":"es","value":"Dispositivos Cisco Wireless LAN Controller (WLC) 7.4(121.0) y 8.0(0.30220.385) permiten a atacantes remotos provocar una denegación de servicio a través de marcos de gestión inalámbricos manipulados, también conocido como Bug ID CSCun92979."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_software:7.4.121.0:*:*:*:*:*:*:*","matchCriteriaId":"83700F8C-B1DE-4C30-9988-A40D62D493A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_software:8.0.0.30220.385:*:*:*:*:*:*:*","matchCriteriaId":"EFCD7F48-067B-4073-A8B1-E1D2DFB6C7D9"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-wlc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92158","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036468","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-wlc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1462","sourceIdentifier":"psirt@cisco.com","published":"2016-07-28T01:59:42.697","lastModified":"2026-06-17T00:42:01.267","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de gestión basada en web en Cisco Prime Service Catalog (PSC) 11.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un valor manipulado, también conocido como Bug ID CSCuz63795."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_service_catalog:11.0_base:*:*:*:*:*:*:*","matchCriteriaId":"3C372575-6DFC-43E9-8782-806B7B3E7859"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-psc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92156","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036472","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-psc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1465","sourceIdentifier":"psirt@cisco.com","published":"2016-07-28T01:59:44.853","lastModified":"2026-06-17T00:42:01.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a denial of service (ESXi hypervisor crash and purple screen) via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985."},{"lang":"es","value":"Dispositivos Cisco Nexus 1000v Application Virtual Switch (AVS) en versiones anteriores a 5.2(1)SV3(1.5i) permiten a atacantes remotos provocar una denegación de servicio (caída de hipervisor ESXi y pantalla morada) a través de un paquete Cisco Discovery Protocol manipulado que desencadena un acceso a memoria fuera de rango, también conocido como Bug ID CSCuw57985."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.0\\(4\\)sv1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D2BC263A-21FC-422C-A7E4-D1095263C4F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.0\\(4\\)sv1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"2CD13D1F-E83E-4D12-86BF-0260922BF4B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.0\\(4\\)sv1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"F7FB359F-8290-475A-B58F-AD9CD96D77E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.0\\(4\\)sv1\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"09753461-A8FA-4C38-9402-FDEBC3978506"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.0\\(4\\)sv1\\(3b\\):*:*:*:*:*:*:*","matchCriteriaId":"66429608-00EF-49A9-9621-FC801542F79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.0\\(4\\)sv1\\(3c\\):*:*:*:*:*:*:*","matchCriteriaId":"15EB553C-07E2-40C5-A741-788042174763"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.0\\(4\\)sv1\\(3d\\):*:*:*:*:*:*:*","matchCriteriaId":"0959FD0A-24A2-48FB-A96D-C04FA0DF4992"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"A3C6D7B8-AD24-49FF-8CE2-CDE2EE43EDD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv1\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"1310C94C-3777-46E7-86AA-EA6A3AEE1EDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv1\\(4b\\):*:*:*:*:*:*:*","matchCriteriaId":"2E595AFD-D9C5-4DDA-A56F-127D7AE513FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv1\\(5.1\\):*:*:*:*:*:*:*","matchCriteriaId":"103597B4-C155-4809-BC90-DE52DA0A51D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv1\\(5.1a\\):*:*:*:*:*:*:*","matchCriteriaId":"6C9FB95F-8F32-40FF-B40F-FDB375ADD946"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv1\\(5.2\\):*:*:*:*:*:*:*","matchCriteriaId":"15BAAE40-EBEF-4FC3-B1D0-96EF814F0C1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv1\\(5.2b\\):*:*:*:*:*:*:*","matchCriteriaId":"E9F686E9-C88F-4CF1-8C90-1AF6D80EBAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv2\\(1.1\\):*:*:*:*:*:*:*","matchCriteriaId":"DFC33DBB-D098-408C-BCEA-7068D23AF51E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv2\\(1.1a\\):*:*:*:*:*:*:*","matchCriteriaId":"E81ABF34-25C9-4168-B9DA-AABB870DD476"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv2\\(2.1\\):*:*:*:*:*:*:*","matchCriteriaId":"5FC2ED25-A2B7-4273-93EB-7DEE6D345AC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:4.2\\(1\\)sv2\\(2.1a\\):*:*:*:*:*:*:*","matchCriteriaId":"837EBA81-8511-4189-8F68-AD1516E8D7DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:5.2\\(1\\)sv3\\(1.1\\):*:*:*:*:*:*:*","matchCriteriaId":"95F0898B-06EC-426E-98A6-753FD1FA1250"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:5.2\\(1\\)sv3\\(1.3\\):*:*:*:*:*:*:*","matchCriteriaId":"5264C81D-8FA2-4C83-A136-A5F2A298DB08"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:5.2\\(1\\)sv3\\(1.4\\):*:*:*:*:*:*:*","matchCriteriaId":"675E1BB5-E0B5-4123-819F-641DB1277EC8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_1000v:-:*:*:*:*:*:*:*","matchCriteriaId":"7E705638-8D0A-40D6-9A51-4FDB6C03F71E"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-avs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92154","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036469","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-avs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1467","sourceIdentifier":"psirt@cisco.com","published":"2016-07-28T01:59:46.150","lastModified":"2026-06-17T00:42:01.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Videoscape Session Resource Manager (VSRM) allows remote attackers to cause a denial of service (device restart) by sending a traffic flood to upstream devices, aka Bug ID CSCva01813."},{"lang":"es","value":"Cisco Videoscape Session Resource Manager (VSRM) permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) mediante el envío de una inundación de tráfico a dispositivos de distribución, también conocido como Bug ID CSCva01813."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_session_resource_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"EB48A131-DAA6-4CA1-87EF-6F3339B3F2A1"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-vsrm","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92151","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-vsrm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5005","sourceIdentifier":"secalert@redhat.com","published":"2016-07-28T16:59:01.380","lastModified":"2026-06-17T00:48:35.973","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action."},{"lang":"es","value":"Vulnerabilidad de XSS en Apache Archiva 1.3.9 y versiones anteriores permite a administradores remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro connector.sourceRepoId para admin/addProxyConnector_commit.action."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:archiva:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"F88C4882-5FEB-4EAC-9489-103BBB266638"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137870/Apache-Archiva-1.3.9-Cross-Site-Scripting.html","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Jul/38","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/538878/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91707","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036475","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/137870/Apache-Archiva-1.3.9-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Jul/38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538878/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1605","sourceIdentifier":"security@opentext.com","published":"2016-08-01T02:59:01.820","lastModified":"2026-06-17T00:42:14.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servlet ReportViewServlet en NetIQ Sentinel 7.4.x en versiones anteriores a 7.4.2 permite a atacantes remotos leer archivos arbitrarios a través de un valor PREVIEW para el archivo fileType."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netiq:sentinel:7.4:*:*:*:*:*:*:*","matchCriteriaId":"32B87F0F-59F2-480D-A5EA-5B0B091251C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netiq:sentinel:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E1AAC904-5893-41C3-A75E-2741D7CBABB6"}]}]}],"references":[{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-406","source":"security@opentext.com"},{"url":"https://www.netiq.com/support/kb/doc.php?id=7017803","source":"security@opentext.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.netiq.com/support/kb/doc.php?id=7017803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1609","sourceIdentifier":"security@opentext.com","published":"2016-08-01T02:59:06.777","lastModified":"2026-06-17T00:42:15.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of a user profile."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Novell Filr en versiones anteriores a 1.2 Security Update 3 y 2.0 en versiones anteriores a Security Update 2 permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un input manipulado, como se demuestra con un atributo manipulado de un elemento IMG en el dipositivo móvil del perfil de usuario."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:filr:*:security_update_2:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"F030D30C-EE26-498C-A0FC-C9895B920AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:filr:*:security_update_1:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"AE256C8E-7C3D-48BE-9A84-9FF00777A5CF"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Jul/119","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/92113","source":"security@opentext.com"},{"url":"https://download.novell.com/Download?buildid=3V-3ArYN85I~","source":"security@opentext.com"},{"url":"https://download.novell.com/Download?buildid=BOTiHcBFfv0~","source":"security@opentext.com"},{"url":"https://www.exploit-db.com/exploits/40161/","source":"security@opentext.com"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017787","source":"security@opentext.com"},{"url":"http://seclists.org/bugtraq/2016/Jul/119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://download.novell.com/Download?buildid=3V-3ArYN85I~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://download.novell.com/Download?buildid=BOTiHcBFfv0~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40161/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.novell.com/support/kb/doc.php?id=7017787","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3120","sourceIdentifier":"cve@mitre.org","published":"2016-08-01T02:59:12.370","lastModified":"2026-06-17T00:45:00.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request."},{"lang":"es","value":"La función validate_as_request en kdc_util.c en el Key Distribution Center (KDC) en MIT Kerberos 5 (también conocido como krb5) en versiones anteriores a 1.13.6 y 1.4.x en versiones anteriores a 1.14.3, cuando restrict_anonymous_to_tgt está activo, utiliza una estructura de datos de clientes incorrecta, lo que permite a usuarios remotos autenticados provocar una denegación de servicio (referencia al puntero NULO y caída de daemon) a través de una petición S4U2Selft."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13:*:*:*:*:*:*:*","matchCriteriaId":"169D00BD-344F-453C-BE7C-9DF0740080BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.1:*:*:*:*:*:*:*","matchCriteriaId":"765B3248-A524-4A79-858C-E787C1C1599E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.2:*:*:*:*:*:*:*","matchCriteriaId":"BF1BB0AB-2C22-49F9-9D2A-074D2F711BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.3:*:*:*:*:*:*:*","matchCriteriaId":"C8EC001E-9507-410D-836F-93002789D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.4:*:*:*:*:*:*:*","matchCriteriaId":"CC0939BF-9ACB-41A7-9B48-0FBF1176C8CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.5:*:*:*:*:*:*:*","matchCriteriaId":"0037EF80-A599-4938-889F-9276E339A8E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.13.6:*:*:*:*:*:*:*","matchCriteriaId":"1CABFE58-4811-49EC-8565-35EB7D5F6F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.14:*:*:*:*:*:*:*","matchCriteriaId":"6E30B176-1FE5-4C53-8B79-2E6D87DF05B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.14.1:*:*:*:*:*:*:*","matchCriteriaId":"E650B5A3-99CA-491B-A1FB-259EF548D92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.14.2:*:*:*:*:*:*:*","matchCriteriaId":"091F3C51-980E-482F-9882-0A555A8F74BC"}]}]}],"references":[{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=8458","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00035.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2591.html","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/krb5-1.13/","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/krb5-1.14/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92132","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036442","source":"cve@mitre.org"},{"url":"https://github.com/krb5/krb5/commit/93b4a6306a0026cf1cc31ac4bd8a49ba5d034ba7","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AWL3KYFRJIX37EAM4DKCQQIQP2WBKL35/","source":"cve@mitre.org"},{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=8458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2591.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/krb5-1.13/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/krb5-1.14/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/krb5/krb5/commit/93b4a6306a0026cf1cc31ac4bd8a49ba5d034ba7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AWL3KYFRJIX37EAM4DKCQQIQP2WBKL35/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6257","sourceIdentifier":"cve@mitre.org","published":"2016-08-02T14:59:04.490","lastModified":"2026-06-17T00:50:42.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system by leveraging proximity to the dongle, aka a \"KeyJack injection attack.\""},{"lang":"es","value":"El firmware en Lenovo Ultraslim dongles, como se usa con teclados Lenovo Liteon SK-8861, Ultraslim Wireless y Silver Silk y ratones Liteon ZTM600 y Ultraslim Wireless, no fuerza incrementar contadores AES, lo que permite a atacantes remotos inyectar entrada de teclado cifrada en el sistema mediante el aprovechamiento de la proximidad al dongle, también conocido como un \"ataque de inyección KeyJack\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:P/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:amazonbasics:firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A119ABF9-A541-4DA5-B7EF-DCF5F22620E4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:amazonbasics:usb_dongle:-:*:*:*:*:*:*:*","matchCriteriaId":"D5CE10A5-02E9-4577-B30F-A2836723ECB5"},{"vulnerable":false,"criteria":"cpe:2.3:h:amazonbasics:wireless_keyboard:-:*:*:*:*:*:*:*","matchCriteriaId":"C6A69132-07A8-45F2-B550-D9B83DF1FF53"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:km714_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"012.005.00028","matchCriteriaId":"76211860-41A1-4AAD-AF93-693035DC9B30"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:km714_dongle:-:*:*:*:*:*:*:*","matchCriteriaId":"96CBA1F6-1544-468D-8FE3-5579ABC4B116"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:km714_wireless_keyboard:-:*:*:*:*:*:*:*","matchCriteriaId":"2958F84E-0BAE-483C-83B8-350C7A0439EB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dell:km632_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D496FA18-1604-4FA8-B15C-86C64D2CFA20"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:km632_dongle:-:*:*:*:*:*:*:*","matchCriteriaId":"E1D23107-1D43-4FB6-9297-9E17733EA200"},{"vulnerable":false,"criteria":"cpe:2.3:h:dell:km632_wireless_keyboard:-:*:*:*:*:*:*:*","matchCriteriaId":"BFF322CD-4306-4BC4-8085-068CBC86ADA7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:logitech:unifying_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"012.005.00028","matchCriteriaId":"B3DDEF20-2167-4FEB-A4FA-4EAEFAD41B7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:logitech:unifying_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"024.003.00027","matchCriteriaId":"7B058A39-4BC9-4C3B-9244-331AEC028A5A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:logitech:unifying_dongle:-:*:*:*:*:*:*:*","matchCriteriaId":"4063BB55-1168-4616-8281-3ACFB327435C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:lenovo:ultraslim_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"C06788CC-0DC8-4AB8-A6F1-0D9C1EFA6493"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:ultraslim_dongle:-:*:*:*:*:*:*:*","matchCriteriaId":"6EE66F2F-D942-4653-B495-39474C2713AD"},{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:ultraslim_wireless_keyboard:-:*:*:*:*:*:*:*","matchCriteriaId":"343AB676-673B-4B10-A579-3B7C5F98C4E5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92179","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/BastilleResearch/keyjack/blob/master/doc/advisories/bastille-13.lenovo-ultraslim.public.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://support.lenovo.com/product_security/len_7267","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.bastille.net/research/vulnerabilities/keyjack","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/BastilleResearch/keyjack/blob/master/doc/advisories/bastille-13.lenovo-ultraslim.public.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.lenovo.com/product_security/len_7267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.bastille.net/research/vulnerabilities/keyjack","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5403","sourceIdentifier":"secalert@redhat.com","published":"2016-08-02T16:59:03.153","lastModified":"2026-06-17T00:49:20.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion."},{"lang":"es","value":"La función virtqueue_pop en hw/virtio/virtio.c en QEMU permite a administradores locales del SO invitado provocar una denegación de servicio (consumo de memoria y caida del proceso QUEMU) mediante la presentación de solicitudes sin esperar la finalización."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*","matchCriteriaId":"62A2AC02-A933-4E51-810E-5D040B476B7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:x86:*","matchCriteriaId":"846F21C6-3D7F-4092-9C68-D5BEAFF7916F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.0","matchCriteriaId":"EFCB21B5-E285-452B-B30E-6C9D21EF8072"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.7.0:rc0:*:*:*:*:*:*","matchCriteriaId":"FA78F261-DEB3-46D5-9998-106F6210755E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B152EDF3-3140-4343-802F-F4F1C329F5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*","matchCriteriaId":"31EC146C-A6F6-4C0D-AF87-685286262DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9DAA72A4-AC7D-4544-89D4-5B07961D5A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*","matchCriteriaId":"E8B8C725-34CF-4340-BE7B-37E58CF706D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*","matchCriteriaId":"F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D86166F9-BBF0-4650-8CCD-0F9C97104D21"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"B28F9028-AAD2-45E6-A4AA-369792B0275B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"21690BAC-2129-4A33-9B48-1F3BF30072A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1585.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1586.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1606.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1607.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1652.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1653.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1654.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1655.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1756.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1763.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1943.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92148","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036476","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-184.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358359","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1585.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1586.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1606.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1607.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1652.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1653.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1654.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1655.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1756.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1763.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1943.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-184.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6259","sourceIdentifier":"cve@mitre.org","published":"2016-08-02T16:59:09.133","lastModified":"2026-06-17T00:50:42.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check."},{"lang":"es","value":"Xen 4.5.x hasta la version 4.7.x no implementa listas blancas Supervisor Mode Access Prevencion (SMAP) en excepción 32 bits y entrega de eventos, lo que permite a kernels 32-bit PV locales del SO invitado provocar una denegación de servicio (hipervisor y caida VM) mediante la activación de un control de seguridad."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"90CCECD0-C0F9-45A8-8699-64428637EBCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F0ED340C-6746-471E-9F2D-19D62D224B7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"99BD7C4F-DE4C-4508-B20D-46A94B616C5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3374F1FB-70F9-4EBC-837B-0D42282E3E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B6F7CE9-C409-4D88-9A99-B21420633F45"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B814C381-4991-495A-B530-7543F977B346"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"14442705-D243-4250-A486-E70989946D73"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F1DD0255-9127-4C7F-9C02-42198820363E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9C1D10B8-202D-44A4-A872-88D7C11488D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5FCF191B-971A-4945-AB14-08091689BE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:6.1:*:*:*:*:*:*:*","matchCriteriaId":"082A4559-2E75-4B84-8E50-304015DB9C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:6.2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"878949E0-D656-4E0E-858A-C6AD948A2A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:6.5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"674E9825-655A-4860-8FD1-7F022090922F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*","matchCriteriaId":"405F950F-0772-41A3-8B72-B67151CC1376"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX214954","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92130","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036447","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-183.html","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://xenbits.xen.org/xsa/xsa183-4.6.patch","source":"cve@mitre.org","tags":["Mitigation","Patch"]},{"url":"http://xenbits.xen.org/xsa/xsa183-unstable.patch","source":"cve@mitre.org","tags":["Mitigation","Patch"]},{"url":"http://support.citrix.com/article/CTX214954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-183.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://xenbits.xen.org/xsa/xsa183-4.6.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch"]},{"url":"http://xenbits.xen.org/xsa/xsa183-unstable.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch"]}]}},{"cve":{"id":"CVE-2016-4833","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-08-03T01:59:00.147","lastModified":"2026-06-17T00:48:18.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Nofollow Links plugin before 1.0.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el plugin Nofollow Links en versiones anteriores a 1.0.11 para WordPress permite a atacantes remotos inyectar secuencia de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nofollow_links_project:nofollow_links:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.0.10","matchCriteriaId":"E1BCD583-498A-4D4E-82AF-38CD5597D363"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN13582657/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000125","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92077","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://wordpress.org/plugins/nofollow-links/changelog/","source":"vultures@jpcert.or.jp","tags":["Release Notes","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8580","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN13582657/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://wordpress.org/plugins/nofollow-links/changelog/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2830","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:00.140","lastModified":"2026-06-17T00:44:32.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 48.0 y Firefox ESR 45.x en versiones anteriores a 45.3 conserva la conexión de red usada para la recuperación de recursos favicon después de que la ventana del navegador asociado se cierre, lo que facilita a servidores web remotos rastrear usuarios mediante la observación de tráfico de red desde múltiples direcciones IP."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4123CC23-4443-4B13-A064-04B0B04354FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E084D09-97BE-43E1-94D1-05206E513B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.2.0:*:*:*:*:*:*:*","matchCriteriaId":"915E92FE-8049-4EA5-95B8-F3EA25F78546"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CA9E7A47-5E77-4736-920A-93283E30DC7C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"security@mozilla.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1551.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3640","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-63.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"security@mozilla.org"},{"url":"http://www.securityfocus.com/bid/92261","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1255270","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1551.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-63.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1255270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2837","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:03.673","lastModified":"2026-06-17T00:44:33.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en el ClearKey Content Decryption Module (CDM) en el Encrypted Media Extensions (EME) API en Mozilla Firefox en versiones anteriores a 48.0 y Firefox ESR 45.x en versiones anteriores a 45.3 podría permitir a atacantes remotos ejecutar código arbitrario proporcionando un vídeo malformado y aprovechando un Gecko Media Plugin (GMP) sandbox bypass."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4123CC23-4443-4B13-A064-04B0B04354FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E084D09-97BE-43E1-94D1-05206E513B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.2.0:*:*:*:*:*:*:*","matchCriteriaId":"915E92FE-8049-4EA5-95B8-F3EA25F78546"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CA9E7A47-5E77-4736-920A-93283E30DC7C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"security@mozilla.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1551.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3640","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-77.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92258","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"security@mozilla.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-673","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1274637","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1551.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-77.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-16-673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1274637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2839","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:06.033","lastModified":"2026-06-17T00:44:33.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 48.0 y Firefox ESR 45.x en versiones anteriores a 45.3 en Linux hace llamadas cairo _cairo_surface_get_extents que no interactúan adecuadamente con asignación de cabecera libav en FFmpeg 0.10, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un vídeo manipulado."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.10:*:*:*:*:*:*:*","matchCriteriaId":"16304267-C808-4B6B-9903-2DEAB40AD899"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4123CC23-4443-4B13-A064-04B0B04354FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E084D09-97BE-43E1-94D1-05206E513B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.2.0:*:*:*:*:*:*:*","matchCriteriaId":"915E92FE-8049-4EA5-95B8-F3EA25F78546"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CA9E7A47-5E77-4736-920A-93283E30DC7C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-65.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92261","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1275339","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-65.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1275339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5250","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:07.187","lastModified":"2026-06-17T00:49:03.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a la 48.0, Firefox ESR en versiones anteriores a la 45.4 y Thunderbird en versiones anteriores a la 45.4 permiten que los atacantes remotos obtengan información sensible sombre la página previamente recuperada mediante llamadas a la API Resource Timing."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"security@mozilla.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1912.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3674","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-84.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"security@mozilla.org"},{"url":"http://www.securityfocus.com/bid/92260","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1254688","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-86/","source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-88/","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1912.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-84.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1254688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-86/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-88/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5251","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:08.517","lastModified":"2026-06-17T00:49:03.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 48.0 permite a atacantes remotos suplantar la barra de direcciones a través de caracteres manipulados en el formato de un data: URL."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-66.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1255570","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-66.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1255570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5253","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:10.893","lastModified":"2026-06-17T00:49:03.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link."},{"lang":"es","value":"El Updater en Mozilla Firefox en versiones anteriores a 48.0 en Windows permite a usuarios locales escribir a archivos arbitrarios a través de vectores que involucran el parámetro de aplicación de ruta de llamada de retorno y un enlace duro."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:C/A:N","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-69.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1246944","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-69.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1246944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5260","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:16.033","lastModified":"2026-06-17T00:49:04.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 48.0 mishandles changes from 'INPUT type=\"password\"' to 'INPUT type=\"text\"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 48.0 no maneja correctamente cambios de 'INPUT type=\"password\"' a 'INPUT type=\"text\"' dentro de una sola sesión Session Manager, lo que podría permitir a atacantes descubrir contraseñas en texto plano mediante la lectura de un archivo de restauración de sesión."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-74.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1280294","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-74.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1280294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5262","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:18.207","lastModified":"2026-06-17T00:49:04.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=\"allow-scripts\" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 48.0 y Firefox ESR 45.x en versiones anteriores a 45.3 procesa atributos de controladores de eventos JavaScript de un elemento MARQUEE dentro de un elemento IFRAME aislado que carece de valor de atributo sandbox=\"allow-scripts\", lo que facilita a atacantes remotos llevar a cabo ataques XSS a través de un sitio web manipulado."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4123CC23-4443-4B13-A064-04B0B04354FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E084D09-97BE-43E1-94D1-05206E513B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.2.0:*:*:*:*:*:*:*","matchCriteriaId":"915E92FE-8049-4EA5-95B8-F3EA25F78546"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CA9E7A47-5E77-4736-920A-93283E30DC7C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"security@mozilla.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1551.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3640","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-76.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92258","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1277475","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1551.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-76.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1277475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5265","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:21.173","lastModified":"2026-06-17T00:49:05.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 48.0 y Firefox ESR 45.x en versiones anteriores a 45.3 permite a atacantes remotos asistidos por usuario eludir el Same Origin Policy, y llevar a cabo ataques Universal XSS (UXSS) o leer archivos arbitrarios, disponiendo la presencia de un documento HTML manipulado y un archivo de acceso directo manipulado en el mismo directorio local."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E3CCD459-9E6D-4731-8054-CDF8B58454A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4123CC23-4443-4B13-A064-04B0B04354FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E084D09-97BE-43E1-94D1-05206E513B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.2.0:*:*:*:*:*:*:*","matchCriteriaId":"915E92FE-8049-4EA5-95B8-F3EA25F78546"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:45.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CA9E7A47-5E77-4736-920A-93283E30DC7C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"security@mozilla.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1551.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3640","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-80.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"security@mozilla.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92258","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1278013","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1551.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-80.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1278013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5267","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:23.050","lastModified":"2026-06-17T00:49:05.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left-to-right characters in conjunction with a right-to-left character set."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 48.0 en Android permite a atacantes remotos suplantar la barra de direcciones a través de caracteres de izquierda a derecha en conjunción con un set de caracteres derecha a izquierda."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","matchCriteriaId":"8255F035-04C8-4158-B301-82101711939C"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-82.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1284372","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-82.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1284372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5268","sourceIdentifier":"security@mozilla.org","published":"2016-08-05T01:59:24.207","lastModified":"2026-06-17T00:49:05.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT flags of about: URLs that are used for error pages, which makes it easier for remote attackers to conduct spoofing attacks via a crafted URL, as demonstrated by misleading text after an about:neterror?d= substring."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 48.0 no fija adecuadamente los indicadores LINKABLE y URI_SAFE_FOR_UNTRUSTED_CONTENT de about: URLs que se usan para páginas de error, lo que facilita a atacantes remotos llevar a cabo ataques de suplantación a través de una URL manipuladas, según lo demostrado induciendo a error texto después de un about:neterror?d= substring."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"47.0.1","matchCriteriaId":"1456CC69-6E37-4C75-8D9A-172ED8A571EB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-83.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036508","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1253673","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-83.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3044-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1253673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3080","sourceIdentifier":"secalert@redhat.com","published":"2016-08-05T14:59:02.987","lastModified":"2026-06-17T00:44:55.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via the (1) RHNMD User or (2) Filesystem parameters, related to display of monitoring probes."},{"lang":"es","value":"Vulnerabilidad de XSS en spacewalk-java en Red Hat Satellite 5.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de los parámetros (1) RHNMD User o (2) Filesystem, relacionado con la visualización de sondas de monitorización."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*","matchCriteriaId":"85EA16E0-9261-45C4-840F-5366E9EAC5E1"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1484.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320942","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1484.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3097","sourceIdentifier":"secalert@redhat.com","published":"2016-08-05T14:59:05.127","lastModified":"2026-06-17T00:44:58.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via a group name, related to viewing snapshot data."},{"lang":"es","value":"Vulnerabilidad de XSS en spacewalk-java en Red Hat Satellite 5.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un nombre de grupo, relacionado con la visualización de datos snapshot."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*","matchCriteriaId":"85EA16E0-9261-45C4-840F-5366E9EAC5E1"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1484.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322747","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1484.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2016-3196","sourceIdentifier":"cve@mitre.org","published":"2016-08-05T14:59:06.547","lastModified":"2026-06-17T00:45:17.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uploaded in the report section."},{"lang":"es","value":"Vulnerabilidad de XSS en Fortinet FortiAnalyzer 5.x en versiones anteriores a 5.0.12 y 5.2.x en versiones anteriores a 5.2.6 y FortiManager 5.x en versiones anteriores a 5.0.12 y 5.2.x en versiones anteriores a 5.2.6 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del nombre de archivo de una imagen cargada en la sección del informe."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"83ADE078-F9B6-4E46-89AB-F9DE3A2EAF06"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A5DF6CBD-E8D8-40B7-9512-CD739D6FA918"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42304E1B-C9BF-4CCE-A5C7-4FAC7E4C87E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"34B83D3F-23C8-4781-887C-1876B103A4B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BC2F75CB-BC6D-434A-84C8-6290F4B6E8B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"AB152570-F07F-4706-9717-D31F5F31CDE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C2A3410C-E673-49C1-AA2C-2BD77C68DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6AFEA22C-D661-4859-86CE-329D23E3EF87"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72523D47-A6FA-48E8-B2D0-3563027CE35C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7FE6366D-0535-4681-90F7-3AB9386184A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0F5BBE82-1D71-40EE-B506-1DD1066F537C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F1A2A3F2-A908-4192-8032-F8FA3310B50A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B621447-97C3-42B4-92FF-3D5BEDE26A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4D281C46-3C6A-4ABA-B25C-1FA623F78566"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83E355-BA1A-47B3-AE43-04668C87FD8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4EBA54E4-E824-4F68-94BF-D70F5A51B40F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0C3F75D9-5719-4392-8FDE-DA1CFEE5BEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"06360B2F-EE21-4E99-9931-E4C62B1D2C25"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C4BA0949-E1B2-41F4-801C-1FF5FDD5FD8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B27A485B-71F5-485C-9F3C-691A4F1CA5A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0E098F02-C9DA-4EC9-B13C-8DFD6735615F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BF465F07-3786-4533-9B61-C8344DCB166F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D43C2347-D6F3-40A6-8E00-DD31F11A84BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A48CA4D3-FBD6-4048-8FFB-C0A874402E1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4F9636D8-7C3B-4504-9D1C-01AC471EAFAF"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-persistent-xss-vulnerability","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/4","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539069/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92203","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036550","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036551","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vulnerability-lab.com/get_content.php?id=1687","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-persistent-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539069/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vulnerability-lab.com/get_content.php?id=1687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-3640","sourceIdentifier":"cve@mitre.org","published":"2016-08-05T14:59:07.720","lastModified":"2026-06-17T00:46:07.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispatcher trace files, aka SAP Security Note 2148905."},{"lang":"es","value":"El Extended Application Services (también conocido como XS o XS Engine) en SAP HANA DB 1.00.091.00.1418659308 permite a usuarios locales obtener información sensible de contraseñas a través de vectores relacionados con contraseñas en archivos de registro de seguimiento Web Dispatcher, también conocido como SAP Security Note 2148905."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:hana_db:1.00.091.00.14186593:*:*:*:*:*:*:*","matchCriteriaId":"915F5750-3451-4FC8-8726-5FE3F453BD7C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92068","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://layersevensecurity.com/wp-content/uploads/2015/10/Layer-Seven-Security_SAP-Security-Notes_August-2015.pdf","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"https://www.onapsis.com/blog/analyzing-sap-security-notes-august-2015-edition","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.onapsis.com/research/security-advisories/sap-hana-password-disclosure","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://layersevensecurity.com/wp-content/uploads/2015/10/Layer-Seven-Security_SAP-Security-Notes_August-2015.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]},{"url":"https://www.onapsis.com/blog/analyzing-sap-security-notes-august-2015-edition","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.onapsis.com/research/security-advisories/sap-hana-password-disclosure","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5000","sourceIdentifier":"secalert@redhat.com","published":"2016-08-05T14:59:10.143","lastModified":"2026-06-17T00:48:35.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue."},{"lang":"es","value":"El ejemplo XLSX2CSV en Apache POI en versiones anteriores a 3.14 permite a atacantes remotos leer archivos arbitrarios a través de un documento OpenXML manipulado que contiene una declaración de entidad externa en relación con una referencia a entidad, relacionado con un problema XML External Entity (XXE)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:poi:*:*:*:*:*:*:*:*","versionEndIncluding":"3.13","matchCriteriaId":"8A37C616-D64C-4067-91D5-0F288E4ABCEF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21996759","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/538981/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/92100","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1037741","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/list.html?user%40poi.apache.org","source":"secalert@redhat.com"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21996759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538981/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1037741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/list.html?user%40poi.apache.org","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6145","sourceIdentifier":"cve@mitre.org","published":"2016-08-05T14:59:17.237","lastModified":"2026-06-17T00:50:31.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists and is locked when the detailed_error_on_connect option is not supported or is configured as \"False,\" which allows remote attackers to enumerate database users via a series of login attempts, aka SAP Security Note 2216869."},{"lang":"es","value":"La interfaz SQL en SAP HANA DB 1.00.091.00.1418659308 muestra diferentes mensajes de error para intentos de inicio de sesión fallidos dependiendo de si existe el nombre de usuario y está bloqueado cuando la opción detailed_error_on_connect no está apoyada o está configurada como \"falsa\", lo que permite a atacantes remotos enumerar usuarios de bases de datos a través una serie de intentos de inicio de sesión, vulnerabilidad también conocida como SAP Security Note 2216869."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:hana_db:1.00.091.00.1418659308:*:*:*:*:*:*:*","matchCriteriaId":"E325F2E6-599B-4A19-8731-4531FCB7398E"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/138444/SAP-HANA-DB-1.00.091.00.1418659308-Information-Disclosure.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Aug/92","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92346","source":"cve@mitre.org"},{"url":"https://www.onapsis.com/blog/onapsis-publishes-15-advisories-sap-hana-and-building-components","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.onapsis.com/research/security-advisories/sap-hana-user-information-disclosure","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://packetstormsecurity.com/files/138444/SAP-HANA-DB-1.00.091.00.1418659308-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Aug/92","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.onapsis.com/blog/onapsis-publishes-15-advisories-sap-hana-and-building-components","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.onapsis.com/research/security-advisories/sap-hana-user-information-disclosure","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]}]}},{"cve":{"id":"CVE-2016-6149","sourceIdentifier":"cve@mitre.org","published":"2016-08-05T14:59:22.407","lastModified":"2026-06-17T00:50:32.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941."},{"lang":"es","value":"SAP HANA SPS09 1.00.091.00.14186593 permite a usuarios locales obtener información sensible aprovechando la declaración EXPORT para exportar archivos, también conocido como SAP Security Note 2252941."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:hana_sps09:1.00.091.00.14186593:*:*:*:*:*:*:*","matchCriteriaId":"B9AD95C3-D662-4688-845F-6596EA6627CB"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/138456/SAP-HANA-SPS09-1.00.091.00.1418659308-EXPORT-Information-Disclosure.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Aug/108","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Aug/97","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92061","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.onapsis.com/blog/analyzing-sap-security-notes-january-2016","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.onapsis.com/research/security-advisories/sap-hana-information-disclosure-export","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/138456/SAP-HANA-SPS09-1.00.091.00.1418659308-EXPORT-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Aug/108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Aug/97","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.onapsis.com/blog/analyzing-sap-security-notes-january-2016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.onapsis.com/research/security-advisories/sap-hana-information-disclosure-export","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8945","sourceIdentifier":"cve@mitre.org","published":"2016-08-05T15:59:00.130","lastModified":"2026-06-17T00:35:32.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal."},{"lang":"es","value":"openshift-node en OpenShift Origin 1.1.6 y versiones anteriores almacena incorrectamente credenciales de router como envvars en la ranura cuando la opción --credentials es usada, lo que permite a usuarios locales obtener información clave privada y sensible leyendo el diario systemd."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openshift:origin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.6","matchCriteriaId":"E1DEBE0A-A7EF-4DE6-AA96-6AF8A266DD35"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/10","source":"cve@mitre.org","tags":["Mailing List","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/9","source":"cve@mitre.org","tags":["Mailing List","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91776","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/openshift/origin/issues/3951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/openshift/origin/issues/3951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-0782","sourceIdentifier":"secalert@redhat.com","published":"2016-08-05T15:59:02.473","lastModified":"2026-06-17T00:38:13.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue."},{"lang":"es","value":"La consola de administración web en Apache ActiveMQ 5.x en versiones anteriores a 5.11.4, 5.12.x en versiones anteriores a 5.12.3 y 5.13.x en versiones anteriores a 5.13.2 permite a usuarios remotos autenticados llevar a cabo ataques XSS y consecuentemente obtener información sensible de un volcado de memoria Java a través de vectores relacionados con la creación de una cola."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F58D9E69-CBF2-4FB6-B062-ED21F83CBCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"05D6EC30-88DC-4424-BF86-D9C0DA5E191C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"82ACD6BA-257F-49D0-8944-0991FB038533"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C43FD7A1-FC03-47BC-B6C6-02C0F1466762"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A7A8D571-2925-4F61-B3F0-8F4A3776F6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"47B31CD9-A3BB-427C-A631-2E8168DD1985"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B904806-6796-4947-BDF4-EEA5681147E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"61B4A1EE-7F62-4602-A102-8AD8E9FD528F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"6075BF1D-AC7C-46E3-A730-4E9A98856520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"623530FC-12E9-480B-AFA0-C19FCFFA5D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5755A41-0DBE-4F54-A1C1-4F65DCC6ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"11AADFBF-AC60-4535-892C-BE90BE858172"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"AC5143E8-B392-4954-9C0D-DD39388B669F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.8.0:*:*:*:*:*:*:*","matchCriteriaId":"F4C0A644-8667-4ABD-8BB3-46289DCD3A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"607B6541-973A-4FF5-8106-A30076CA353C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.9.1:*:*:*:*:*:*:*","matchCriteriaId":"08310F87-4C45-436F-A707-A22A4ACB1587"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.10.0:*:*:*:*:*:*:*","matchCriteriaId":"4243B47C-26B9-45BE-B66A-F1534D18A265"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.10.1:*:*:*:*:*:*:*","matchCriteriaId":"26258CBF-39D0-45FD-AC6B-3D9840CB88EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"532FC7B8-31FD-459C-B757-4D17D4E6ED63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.11.0:*:*:*:*:*:*:*","matchCriteriaId":"36710BEE-E9B8-4979-BB75-6CEF7836268B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.11.1:*:*:*:*:*:*:*","matchCriteriaId":"F15DF0DF-FDBD-4196-88DE-023CF90AA0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.11.2:*:*:*:*:*:*:*","matchCriteriaId":"0E1A027B-EDBB-4305-BCE2-5DA862F9A3A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.11.3:*:*:*:*:*:*:*","matchCriteriaId":"3D70D5C7-8728-49A5-BCCC-62919EE52AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.12.0:*:*:*:*:*:*:*","matchCriteriaId":"1DA90EA1-64F2-44DD-86A8-E35191C79446"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.12.1:*:*:*:*:*:*:*","matchCriteriaId":"8E7D827D-8180-4605-98CB-03436F916B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.12.2:*:*:*:*:*:*:*","matchCriteriaId":"7D2FC821-2FFF-4710-92CF-FEB74C1A9CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.13.0:*:*:*:*:*:*:*","matchCriteriaId":"D00022D7-5D5E-460D-8A82-20E35DB290BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.13.1:*:*:*:*:*:*:*","matchCriteriaId":"D516F01C-998C-4F06-9B76-09E591923CFE"}]}]}],"references":[{"url":"http://activemq.apache.org/security-advisories.data/CVE-2016-0782-announcement.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136215/Apache-ActiveMQ-5.13.0-Cross-Site-Scripting.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/537760/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035328","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1424","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317516","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","source":"secalert@redhat.com"},{"url":"http://activemq.apache.org/security-advisories.data/CVE-2016-0782-announcement.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/136215/Apache-ActiveMQ-5.13.0-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/537760/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1276","sourceIdentifier":"cve@mitre.org","published":"2016-08-05T15:59:04.177","lastModified":"2026-06-17T00:41:37.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways (ALGs) enabled allow remote attackers to cause a denial of service (CPU consumption, fab link failure, or flip-flop failovers) via vectors related to in-transit traffic matching ALG rules."},{"lang":"es","value":"Juniper Junos OS en versiones anteriores a 12.1X46-D50, 12.1X47 en versiones anteriores a 12.1X47-D23, 12.3X48 en versiones anteriores a 12.3X48-D25 y 15.1X49 en versiones anteriores a 15.1X49-D40 en un sistema de chasis High-End SRX-Series con una o más Application Layer Gateways (ALGs) activada permiten a atacantes remotos provocar una denegación de servicio (consumo de CPU, fallo de enlace fab o conmutaciones por error flip-flop) a través de vectores relacionados con tráfico in-transit que coincide con reglas ALG."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*","matchCriteriaId":"92F31F7F-02E0-4E63-A600-DF8AB4E3BAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*","matchCriteriaId":"A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*","matchCriteriaId":"4FD4237A-C257-4D8A-ABC4-9B2160530A4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*","matchCriteriaId":"5A449C87-C5C3-48FE-9E46-64ED5DD5F193"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*","matchCriteriaId":"F4B6215F-76BF-473F-B325-0975B0EB101E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*","matchCriteriaId":"A1C4A10C-49A3-4103-9E56-F881113BC5D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*","matchCriteriaId":"50E7FD07-A309-48EC-A520-C7F0FA35865C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*","matchCriteriaId":"F868948A-04D7-473B-971F-721302653633"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*","matchCriteriaId":"830A9EBA-88F1-4277-B98F-75AC52A60824"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*","matchCriteriaId":"ABBEDB3F-5FD1-4290-A80A-7EAD9B9C38C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*","matchCriteriaId":"181C0D30-4476-48EE-A4A4-3B2461F4AC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*","matchCriteriaId":"63F559A2-2744-4771-9420-C70AA87496A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*","matchCriteriaId":"040A6307-236E-4FAA-9A74-676F1DB0CF17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*","matchCriteriaId":"E288F54B-AEA3-412F-85A4-EBDFE74DB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*","matchCriteriaId":"18468579-0195-4DDE-BAA5-4BE4068F3A69"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*","matchCriteriaId":"0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*","matchCriteriaId":"870244F3-1C05-4F10-A205-5189BB860F46"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10751","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91764","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036305","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-5392","sourceIdentifier":"secalert@redhat.com","published":"2016-08-05T15:59:08.380","lastModified":"2026-06-17T00:49:19.663","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The API server in Kubernetes, as used in Red Hat OpenShift Enterprise 3.2, in a multi tenant environment allows remote authenticated users with knowledge of other project names to obtain sensitive project and user information via vectors related to the watch-cache list."},{"lang":"es","value":"El servidor API en Kubernetes, como es utilizado en Red Hat OpenShift Enterprise 3.2, en un entorno de múltiples usuarios permite a usuarios remotos autenticados con conocimiento de nombres de otros proyectos obtener información sensible de proyectos y usuarios a través de vectores relacionados con la lista watch-cache."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"F33CEF04-05FA-444C-BB14-F3E3434AF61F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91793","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1427","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356195","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://www.securityfocus.com/bid/91793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2016-6186","sourceIdentifier":"cve@mitre.org","published":"2016-08-05T15:59:09.503","lastModified":"2026-06-17T00:50:36.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors involving unsafe usage of Element.innerHTML."},{"lang":"es","value":"Vulnerabilidad de XSS en la función dismissChangeRelatedObjectPopup en contrib/admin/static/admin/js/admin/RelatedObjectLookups.js en Django en versiones anteriores a 1.8.14, 1.9.x en versiones anteriores a 1.9.8 y 1.10.x en versiones anteriores a 1.10rc1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectors relacionados con el uso no seguro de Element.innerHTML."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.13","matchCriteriaId":"08E370D6-9EA2-48B6-AA81-B98D982679FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9:*:*:*:*:*:*:*","matchCriteriaId":"29C40BAC-6DF3-4EA2-A65A-86462DDD8723"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"832F9FA9-5FC8-4DB6-AD39-C3D1C21C4568"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6B754401-8503-4553-853F-4F6BCD2D2FF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"019C26C7-EF1F-45BB-934E-521E2E64452E"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A18691A7-E4D0-48A4-81A7-89846E991AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"7C06EBD9-381E-4018-BFDC-E23EA18097B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7D134048-B64F-45AE-B4A2-26E516CCF37B"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"0F39B83A-C10B-4B88-9491-2FB8B07D6EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"64A4030E-F51F-4944-BCE7-E27CD32EC7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.10:alpha1:*:*:*:*:*:*","matchCriteriaId":"36ECEDD6-A60B-4DE1-881B-899641489BAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.10:beta1:*:*:*:*:*:*","matchCriteriaId":"035DDCD9-7679-4106-BCDA-89D67195D5E8"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/137965/Django-3.3.0-Script-Insertion.html","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1594.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1595.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1596.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Jul/53","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.debian.org/security/2016/dsa-3622","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538947/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92058","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036338","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3039-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vulnerability-lab.com/get_content.php?id=1869","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/django/django/commit/d03bf6fe4e9bf5b07de62c1a271c4b41a7d3d158","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/django/django/commit/f68e5a99164867ab0e071a936470958ed867479d","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMLLFAUT4J4IP4P2KI4NOVWRMHA22WUJ/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KHHPN6MISX5I6UTXQHYLPTLEEUE6WDXW/","source":"cve@mitre.org"},{"url":"https://www.djangoproject.com/weblog/2016/jul/18/security-releases/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/40129/","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/137965/Django-3.3.0-Script-Insertion.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1596.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Jul/53","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.debian.org/security/2016/dsa-3622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/538947/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3039-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vulnerability-lab.com/get_content.php?id=1869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/django/django/commit/d03bf6fe4e9bf5b07de62c1a271c4b41a7d3d158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/django/django/commit/f68e5a99164867ab0e071a936470958ed867479d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMLLFAUT4J4IP4P2KI4NOVWRMHA22WUJ/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KHHPN6MISX5I6UTXQHYLPTLEEUE6WDXW/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.djangoproject.com/weblog/2016/jul/18/security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/40129/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3827","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:16.643","lastModified":"2026-06-17T00:46:24.663","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28816956."},{"lang":"es","value":"codecs/hevcdec/SoftHEVC.cpp en libstagefright en mediaserver en Android 6.0.1 en versiones anteriores a 2016-08-01 no maneja adecuadamente errores del decodificador, lo que permite a atacantes remotos provocar una denegación de servicio (colgado de dispositivo o reinicio) a través de un archivo multimedia manipulado, también conocido como error interno 28816956."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-172"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92221","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/a4567c66f4764442c6cb7b5c1858810194480fb5","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/a4567c66f4764442c6cb7b5c1858810194480fb5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3828","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:18.083","lastModified":"2026-06-17T00:46:24.767","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28835995."},{"lang":"es","value":"decoder/ih264d_api.c en mediaserver en Android 6.x en versiones anteriores a 2016-08-01 no maneja adecuadamente unidades PPS y SPS NAL no válidas, lo que permite a atacantes remotos provocar una denegación de servicio (colgado de dispositivo o reinicio) a través de un archivo multimedia manipulado, también conocido como error interno 28835995."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-172"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92221","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/external/libavc/+/7554755536019e439433c515eeb44e701fb3bfb2","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/libavc/+/7554755536019e439433c515eeb44e701fb3bfb2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3829","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:19.307","lastModified":"2026-06-17T00:46:24.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 29023649."},{"lang":"es","value":"El decodificador ih264d en mediaserver en Android 6.x en versiones anteriores a 2016-08-01 no inicializa ciertos miembros de la estructura, lo que permite a atacantes remotos provocar una denegación de servicio (colgado de dispositivo o reinicio) a través de un archivo multimedia manipulado, también conocido como error interno 29023649."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-172"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92221","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/external/libavc/+/326fe991a4b7971e8aeaf4ac775491dd8abd85bb","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/libavc/+/326fe991a4b7971e8aeaf4ac775491dd8abd85bb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3830","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:20.403","lastModified":"2026-06-17T00:46:24.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service (device hang or reboot) via crafted ADTS data, aka internal bug 29153599."},{"lang":"es","value":"codecs/aacdec/SoftAAC2.cpp en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-08-01 permite a atacantes remotos provocar una denegación de servicio (colgado de dispositivo o reinicio) a través de datos ADTS manipulados, también conocido como error interno 29153599."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92221","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/8e438e153f661e9df8db0ac41d587e940352df06","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/8e438e153f661e9df8db0ac41d587e940352df06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3834","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:24.820","lastModified":"2026-06-17T00:46:25.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The camera APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allow attackers to bypass intended access restrictions and obtain sensitive information about ANW buffer addresses via a crafted application, aka internal bug 28466701."},{"lang":"es","value":"La cámara APIs en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-08-01 permite a atacantes eludir restricciones destinadas al acceso y obtener información sensible sobre direcciones de búfer ANW a través de una aplicación manipulada, también conocido como error interno 28466701."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92238","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/1f24c730ab6ca5aff1e3137b340b8aeaeda4bdbc","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/1f24c730ab6ca5aff1e3137b340b8aeaeda4bdbc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3835","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:25.823","lastModified":"2026-06-17T00:46:25.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 28920116."},{"lang":"es","value":"La característica sesión segura en el componente mm-video-v4l2 venc en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-08-01 no maneja adecuadamente punteros dinámicos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno 28920116."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92233","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/hardware/qcom/media/+/7558d03e6498e970b761aa44fff6b2c659202d95","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/hardware/qcom/media/+/7558d03e6498e970b761aa44fff6b2c659202d95","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3836","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:27.297","lastModified":"2026-06-17T00:46:25.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, aka internal bug 28592402."},{"lang":"es","value":"El servicio SurfaceFlinger en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-08-01 permite a atacantes obtener información sensible a través de una aplicación manipulada, relacionado con la falta de un constructor por defecto en include/ui/FrameStats.h, también conocido como error interno 28592402."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92224","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/native/+/3bcf0caa8cca9143443814b36676b3bae33a4368","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/native/+/3bcf0caa8cca9143443814b36676b3bae33a4368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3837","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:28.250","lastModified":"2026-06-17T00:46:25.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"service/jni/com_android_server_wifi_WifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application that provides a MAC address with too few characters, aka internal bug 28164077."},{"lang":"es","value":"service/jni/com_android_server_wifi_WifiNative.cpp en Wi-Fi en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-08-01 permite a atacantes obtener información sensible a través de una aplicación manipulada que muestra una dirección MAC con muy pocos caracteres, también conocido como error interno 28164077."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92235","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/a209ff12ba9617c10550678ff93d01fb72a33399","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/a209ff12ba9617c10550678ff93d01fb72a33399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3838","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:29.237","lastModified":"2026-06-17T00:46:25.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Android 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of locked-screen 911 functionality) via a crafted application that uses the app-pinning feature, aka internal bug 28761672."},{"lang":"es","value":"Android 6.x en versiones anteriores a 2016-08-01 permite a atacantes provocar una denegación de servicio (pérdida de funcionalidad de pantalla de bloqueo 911) a través de una aplicación manipulada que utiliza la característica app-pinning, también conocido como error interno 28761672."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92244","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/468651c86a8adb7aa56c708d2348e99022088af3","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/468651c86a8adb7aa56c708d2348e99022088af3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3839","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:30.317","lastModified":"2026-06-17T00:46:25.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of Bluetooth 911 functionality) via a crafted application that sends a signal to a Bluetooth process, aka internal bug 28885210."},{"lang":"es","value":"Bluetooth en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-08-01 permite a atacantes provocar una denegación de servicio (pérdida de funcionalidad de Bluetooth 911) a través de una aplicación manipulada que manda una señal a un proceso Bluetooth, también conocido como error interno 28885210."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92242","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/system/bt/+/472271b153c5dc53c28beac55480a8d8434b2d5c","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/system/bt/+/472271b153c5dc53c28beac55480a8d8434b2d5c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3852","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:44.070","lastModified":"2026-06-17T00:46:27.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The MediaTek Wi-Fi driver in Android before 2016-08-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29141147 and MediaTek internal bug ALPS02751738."},{"lang":"es","value":"El controlador Wi-Fi de MediaTek en Android en versiones anteriores a 2016-08-05 en dispositivos Android One permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 29141147 y error interno de MediaTek ALPS02751738."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92253","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3853","sourceIdentifier":"security@android.com","published":"2016-08-05T20:59:44.997","lastModified":"2026-06-17T00:46:27.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26803208."},{"lang":"es","value":"Servicios Google Play en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus permite a usuarios locales eludir el mecanismo de protección Factory Reset Protection y eliminar datos a través de vectores no especificados, también conocido como error interno 26803208."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92255","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9892","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:35.717","lastModified":"2026-06-17T00:19:10.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly initialize a timestamp data structure, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28770164 and Qualcomm internal bug CR568717."},{"lang":"es","value":"La función snd_compr_tstamp en sound/core/compress_offload.c en el kernel de Linux hasta la versión 4.7, como se usa en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 5 y 7 (2013), no inicializa adecuadamente una estructura de datos de fecha y hora, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28770164 y error interno de Qualcomm CR568717."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"6AF8F457-8A21-4907-BB5E-6193D0DAD885"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=591b1f455c32206704cbcf426bb30911c260c33e","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=591b1f455c32206704cbcf426bb30911c260c33e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2014-9893","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:37.090","lastModified":"2026-06-17T00:19:10.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine the size of Gamut LUT data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28747914 and Qualcomm internal bug CR542223."},{"lang":"es","value":"drivers/video/msm/mdss/mdss_mdp_pp.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 5 no determina adecuadamente el tamaño de datos Gamut LUT, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28747914 y error interno de Qualcomm CR542223."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=bfc6eee5e30a0c20bc37495233506f4f0cc4991d","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=bfc6eee5e30a0c20bc37495233506f4f0cc4991d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2014-9894","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:38.187","lastModified":"2026-06-17T00:19:10.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not ensure that certain name strings end in a '\\0' character, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28749708 and Qualcomm internal bug CR545736."},{"lang":"es","value":"drivers/misc/qseecom.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 7 (2013) no asegura que ciertas cadenas de nombre acaben en un carácter '\\0', lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28749708 y error interno de Qualcomm CR545736."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=83214431cd02674c70402b160b16b7427e28737f","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=83214431cd02674c70402b160b16b7427e28737f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2014-9895","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:39.373","lastModified":"2026-06-17T00:19:10.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly initialize certain data structures, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug 28750150 and Qualcomm internal bug CR570757, a different vulnerability than CVE-2014-1739."},{"lang":"es","value":"drivers/media/media-device.c en el kernel de Linux en versiones anteriores a 3.11, como se usa en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 5 y 7 (2013), no incializa adecuadamente ciertas estructuras de datos, lo que permite a usuarios locales obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28750150 y error interno de Qualcomm CR570757, una vulnerabilidad diferente a CVE-2014-1739."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.10.102","matchCriteriaId":"091768B7-383B-4580-B7D3-3BEBDD10D063"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c88e739b1fad662240e99ecbd0bdaac871717987","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://github.com/torvalds/linux/commit/c88e739b1fad662240e99ecbd0bdaac871717987","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=cc4b26575602e492efd986e9a6ffc4278cee53b5","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c88e739b1fad662240e99ecbd0bdaac871717987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/c88e739b1fad662240e99ecbd0bdaac871717987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=cc4b26575602e492efd986e9a6ffc4278cee53b5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2014-9896","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:40.437","lastModified":"2026-06-17T00:19:10.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/char/adsprpc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate parameters and return values, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28767593 and Qualcomm internal bug CR551795."},{"lang":"es","value":"drivers/char/adsprpc.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 5 y 7 (2013) no valida adecuadamente parámetros y valores de retorno, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28767593 y error interno de Qualcomm CR551795."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=89f2bcf1ac860b0b380e579e9a8764013f263a7d","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=89f2bcf1ac860b0b380e579e9a8764013f263a7d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2014-9897","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:41.513","lastModified":"2026-06-17T00:19:10.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain user-space data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28769856 and Qualcomm internal bug CR563752."},{"lang":"es","value":"sound/soc/msm/qdsp6v2/msm-lsm-client.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 5 no valida ciertos datos de espacio de usuario, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28769856 y error interno de Qualcomm CR563752."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=46135d80765cb70a914f02a6e7b6abe64679ec86","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=46135d80765cb70a914f02a6e7b6abe64679ec86","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2014-9898","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:42.687","lastModified":"2026-06-17T00:19:10.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate input parameters, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28814690 and Qualcomm internal bug CR554575."},{"lang":"es","value":"arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 5 y 7 (2013) no valida adecuadamente parámetros de entrada, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28814690 y error interno de Qualcomm CR554575."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=80be0e249c906704085d13d4ae446f73913fc225","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=80be0e249c906704085d13d4ae446f73913fc225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2014-9899","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:43.890","lastModified":"2026-06-17T00:19:10.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations before copying data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28803909 and Qualcomm internal bug CR547910."},{"lang":"es","value":"drivers/usb/host/ehci-msm2.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 5 omite ciertos cálculos mínimos antes de copiar datos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28803909 y error interno de Qualcomm CR547910."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=8756624acb1e090b45baf07b2a8d0ebde114000e","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=8756624acb1e090b45baf07b2a8d0ebde114000e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2014-9900","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:44.983","lastModified":"2026-06-17T00:19:11.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug 28803952 and Qualcomm internal bug CR570754."},{"lang":"es","value":"La función ethtool_get_wol en net/core/ethtool.c en el kernel de Linux hasta la versión 4.7, como se usa en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 5 y 7 (2013), no inicializa una cierta estructura de datos, lo que permite a usuarios locales obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28803952 y error interno de Qualcomm CR570754."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"6AF8F457-8A21-4907-BB5E-6193D0DAD885"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=63c317dbee97983004dffdd9f742a20d17150071","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=63c317dbee97983004dffdd9f742a20d17150071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2015-8944","sourceIdentifier":"security@android.com","published":"2016-08-06T10:59:54.077","lastModified":"2026-06-17T00:35:32.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug 28814213 and Qualcomm internal bug CR786116. NOTE: the permissions may be intentional in most non-Android contexts."},{"lang":"es","value":"La función ioresources_init en kernel/resource.c en el kernel de Linux hasta la versión 4.7, como se usa en Android en versiones anteriores a 2016-08-05 en dispositivos Nexus 6 y 7 (2013), usa permisos débiles para /proc/iomem, lo que permite a usuarios locales obtener información sensible leyendo este archivo, también conocido como error interno de Android 28814213 y error interno de Qualcomm CR786116. NOTA: los permisos pueden ser intencionales en la mayoría de contextos distintos de Android."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"6AF8F457-8A21-4907-BB5E-6193D0DAD885"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/kernel-hardening/2016/04/06/22","source":"security@android.com","tags":["Mailing List","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92222","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=e758417e7c31b975c862aa55d0ceef28f3cc9104","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/kernel-hardening/2016/04/06/22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=e758417e7c31b975c862aa55d0ceef28f3cc9104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-5400","sourceIdentifier":"secalert@redhat.com","published":"2016-08-06T20:59:02.720","lastModified":"2026-06-17T00:49:20.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the airspy_probe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows local users to cause a denial of service (memory consumption) via a crafted USB device that emulates many VFL_TYPE_SDR or VFL_TYPE_SUBDEV devices and performs many connect and disconnect operations."},{"lang":"es","value":"Pérdida de memoria en la función airspy_probe en drivers/media/usb/airspy/airspy.c en el controlador USB airspy en el kernel de Linux en versiones anteriores a 4.7 permite a usuarios locales provocar una denegación de servicio (consumo de memoria) a través de un dispositivo USB manipulado que emula muchos dispositivos VFL_TYPE_SDR o VFL_TYPE_SUBDEV y realiza muchas operaciones de conexión y desconexión."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.6","matchCriteriaId":"52847A0D-725D-40BB-B852-8937D886C0E1"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa93d1fee85c890a34f2510a310e55ee76a27848","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/25/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92104","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036432","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358184","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/aa93d1fee85c890a34f2510a310e55ee76a27848","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa93d1fee85c890a34f2510a310e55ee76a27848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/25/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/aa93d1fee85c890a34f2510a310e55ee76a27848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-5412","sourceIdentifier":"secalert@redhat.com","published":"2016-08-06T20:59:04.143","lastModified":"2026-06-17T00:49:21.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite loop) by making a H_CEDE hypercall during the existence of a suspended transaction."},{"lang":"es","value":"arch/powerpc/kvm/book3s_hv_rmhandlers.S en el kernel de Linux hasta la versión 4.7 en plataformas PowerPC, cuando se encuentra habilitada CONFIG_KVM_BOOK3S_64_HV, permite a usuarios invitados del SO provocar una denegación de servicio (bucle infinito del SO anfitrión) haciendo una hiperllamada H_CEDE durante la existencia de una transacción suspendida."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:C","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"6AF8F457-8A21-4907-BB5E-6193D0DAD885"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=93d17397e4e2182fdaad503e2f9da46202c0f1c3","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f024ee098476a3e620232e4a78cfac505f121245","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/28/2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349916","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/93d17397e4e2182fdaad503e2f9da46202c0f1c3","source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/f024ee098476a3e620232e4a78cfac505f121245","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=93d17397e4e2182fdaad503e2f9da46202c0f1c3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f024ee098476a3e620232e4a78cfac505f121245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/28/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/93d17397e4e2182fdaad503e2f9da46202c0f1c3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/f024ee098476a3e620232e4a78cfac505f121245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5696","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T20:59:05.690","lastModified":"2026-06-17T00:49:53.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack."},{"lang":"es","value":"net/ipv4/tcp_input.c en el kernel de Linux en versiones anteriores a 4.7 no determina adecuadamente la tasa de segmentos de desafío ACK, lo que facilita a atacantes remotos secuestrar sesiones TCP a través de un ataque ciego en ventana."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"87AE59F3-F47B-424D-B5EB-40768018206D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"45DC1391-1EFC-49D7-9DD5-D9D9C5DFE746"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.6","matchCriteriaId":"52847A0D-725D-40BB-B852-8937D886C0E1"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=75ff39ccc1bd5d3c455b6822ab09e533c551f758","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1631.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1632.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1633.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1657.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1664.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1814.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1815.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1939.html","source":"cve@mitre.org"},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/12/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.prnewswire.com/news-releases/mitnick-attack-reappears-at-geekpwn-macau-contest-300270779.html","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/91704","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036625","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3071-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3071-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3072-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3072-2","source":"cve@mitre.org"},{"url":"https://bto.bluecoat.com/security-advisory/sa131","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354708","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/Gnoxter/mountain_goat","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/75ff39ccc1bd5d3c455b6822ab09e533c551f758","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10167","source":"cve@mitre.org"},{"url":"https://security.paloaltonetworks.com/CVE-2016-5696","source":"cve@mitre.org"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1461-security-advisory-23","source":"cve@mitre.org"},{"url":"https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_cao.pdf","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=75ff39ccc1bd5d3c455b6822ab09e533c551f758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1631.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1632.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1633.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1657.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1814.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1815.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1939.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/12/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.prnewswire.com/news-releases/mitnick-attack-reappears-at-geekpwn-macau-contest-300270779.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/91704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3071-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3071-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3072-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3072-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/Gnoxter/mountain_goat","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/torvalds/linux/commit/75ff39ccc1bd5d3c455b6822ab09e533c551f758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.paloaltonetworks.com/CVE-2016-5696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1461-security-advisory-23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_cao.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]}]}},{"cve":{"id":"CVE-2016-6136","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T20:59:06.800","lastModified":"2026-06-17T00:50:30.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call auditing by changing a certain string, aka a \"double fetch\" vulnerability."},{"lang":"es","value":"Condición de carrera en la función audit_log_single_execve_arg en kernel/auditsc.c en el kernel de Linux hasta la versión 4.7 permite a usuarios locales eludir restricciones de set de caracteres intencionados o interrumpir la auditoria del sistema de llamada cambiando una cierta cadena, también conocido como una vulnerabilidad de \"doble recuperación\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"6AF8F457-8A21-4907-BB5E-6193D0DAD885"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=43761473c254b45883a64441dd0bc85a42f3645c","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0307.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/538835/30/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91558","source":"cve@mitre.org"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=120681","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353533","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/linux-audit/audit-kernel/issues/18","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/torvalds/linux/commit/43761473c254b45883a64441dd0bc85a42f3645c","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://source.android.com/security/bulletin/2016-11-01.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=43761473c254b45883a64441dd0bc85a42f3645c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/538835/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=120681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/linux-audit/audit-kernel/issues/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/torvalds/linux/commit/43761473c254b45883a64441dd0bc85a42f3645c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://source.android.com/security/bulletin/2016-11-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6156","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T20:59:08.050","lastModified":"2026-06-17T00:50:33.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ec_device_ioctl_xcmd function in drivers/platform/chrome/cros_ec_dev.c in the Linux kernel before 4.7 allows local users to cause a denial of service (out-of-bounds array access) by changing a certain size value, aka a \"double fetch\" vulnerability."},{"lang":"es","value":"Condición de carrera en la función ec_device_ioctl_xcmd en drivers/platform/chrome/cros_ec_dev.c en el kernel de Linux en versiones anteriores a 4.7 permite a usuarios locales provocar una denegación de servicio (acceso al array fuera de rango) cambiando un cierto valor de tamaño, también conocido como una vulnerabilidad de \"doble recuperación\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.6","matchCriteriaId":"52847A0D-725D-40BB-B852-8937D886C0E1"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096cdc6f52225835ff503f987a0d68ef770bb78e","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://seclists.org/bugtraq/2016/Jul/20","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91553","source":"cve@mitre.org"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=120131","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353490","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/096cdc6f52225835ff503f987a0d68ef770bb78e","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096cdc6f52225835ff503f987a0d68ef770bb78e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://seclists.org/bugtraq/2016/Jul/20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=120131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/096cdc6f52225835ff503f987a0d68ef770bb78e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-6197","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T20:59:12.067","lastModified":"2026-06-17T00:50:37.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink."},{"lang":"es","value":"fs/overlayfs/dir.c en la implementación del sistema de archivos OverlayFS en el kernel de Linux en versiones anteriores a 4.6 no verifica adecuadamente la dentry superior antes de proceder con el procesamiento de desconexión y cambio de nombre de llamadas al sistema, lo que permite a usuarios locales provocar una denegación del servicio (caída de sistema) a través de una llamada al sistema cambiada de nombre que especifica un self-hardlink."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.7","matchCriteriaId":"02606D90-EB6B-45DE-B022-6E5783BD64FA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"4BA58099-26F7-4B01-B9FC-275F012FE9C6"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=11f3710417d026ea2f4fcf362d866342c5274185","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1847.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1875.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/11/8","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91709","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036273","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355650","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/11f3710417d026ea2f4fcf362d866342c5274185","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=11f3710417d026ea2f4fcf362d866342c5274185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1847.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1875.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/11/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3070-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/11f3710417d026ea2f4fcf362d866342c5274185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-6198","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T20:59:13.457","lastModified":"2026-06-17T00:50:37.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a rename system call, related to fs/namei.c and fs/open.c."},{"lang":"es","value":"La capa del sistema de archivos en el kernel de Linux en versiones anteriores a 4.5.5 procede con operaciones de cambio de nombre después de que un archivo OverlayFS es cambiado de nombre a un self-hardlink, lo que permite a usuarios locales provocar una denegación de servicio (caída de sistema) a través de una llamada al sistema, relacionado con fs/namei.c y fs/open.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.4","matchCriteriaId":"1C36E5B8-129B-488B-B732-83E71CF311DD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"45DC1391-1EFC-49D7-9DD5-D9D9C5DFE746"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54d5ca871e72f2bb172ec9323497f01cd5091ec7","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9409e22acdfc9153f88d9b1ed2bd2a5b34d2d3ca","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1847.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1875.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/11/8","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91709","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036273","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355654","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/54d5ca871e72f2bb172ec9323497f01cd5091ec7","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/torvalds/linux/commit/9409e22acdfc9153f88d9b1ed2bd2a5b34d2d3ca","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54d5ca871e72f2bb172ec9323497f01cd5091ec7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9409e22acdfc9153f88d9b1ed2bd2a5b34d2d3ca","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1847.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1875.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/11/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/torvalds/linux/commit/54d5ca871e72f2bb172ec9323497f01cd5091ec7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/torvalds/linux/commit/9409e22acdfc9153f88d9b1ed2bd2a5b34d2d3ca","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-6480","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T20:59:14.487","lastModified":"2026-06-17T00:51:14.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a \"double fetch\" vulnerability."},{"lang":"es","value":"Condición de carrera en la función ioctl_send_fib en drivers/scsi/aacraid/commctrl.c en el kernel de Linux hasta la versión 4.7 permite a usuarios locales provocar una denegación de servicio (acceso fuera de rango o caída de sistema) cambiando un cierto valor de tamaño, también conocido como una vulnerabilidad de \"doble recuperación\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"6AF8F457-8A21-4907-BB5E-6193D0DAD885"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00049.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00001.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0817.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/539074/30/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92214","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362466","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0817.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/539074/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6503","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:00.150","lastModified":"2026-06-17T00:51:16.900","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"Los disectores CORBA IDL en Wireshark 2.x en versiones anteriores a 2.0.5 en plataformas Windows 64-bit no interactúa adecuadamente con opciones del compilador de Visual C++, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/92162","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-39.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12495","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=581a17af40b84ef0c9e7f41ed0795af345b61ce1","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/40196/","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/92162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-39.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=581a17af40b84ef0c9e7f41ed0795af345b61ce1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40196/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6504","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:01.477","lastModified":"2026-06-17T00:51:17.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-ncp2222.inc en el disector NDS en Wireshark 1.12.x en versiones anteriores a 1.12.13 no mantiene adecuadamente una estructura de datos ptvc, lo que permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.12:*:*:*:*:*:*:*","matchCriteriaId":"BF3CE922-633D-4FEA-80F6-0FF3BF13AFC7"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92164","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-40.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12576","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9eacbb4d48df647648127b9258f9e5aeeb0c7d99","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/40194/","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-40.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9eacbb4d48df647648127b9258f9e5aeeb0c7d99","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40194/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6505","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:02.633","lastModified":"2026-06-17T00:51:17.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-packetbb.c en el disector PacketBB en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 permite a atacantes remotos provocar una denegación de servicio (error de división por cero y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-369"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.12:*:*:*:*:*:*:*","matchCriteriaId":"BF3CE922-633D-4FEA-80F6-0FF3BF13AFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92163","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-41.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12577","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=94e97e45cf614c7bb8fe90c23df52910246b2c95","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/40197/","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-41.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=94e97e45cf614c7bb8fe90c23df52910246b2c95","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40197/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6506","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:04.087","lastModified":"2026-06-17T00:51:17.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-wsp.c en el disector WSP en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.12:*:*:*:*:*:*:*","matchCriteriaId":"BF3CE922-633D-4FEA-80F6-0FF3BF13AFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-42.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12594","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a9d5256890c9189c7461bfce6ed6edce5d861499","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-42.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a9d5256890c9189c7461bfce6ed6edce5d861499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6507","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:05.447","lastModified":"2026-06-17T00:51:17.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-mmse.c en el disector MMSE en Wireshark 1.12.x en versiones anteriores a 1.12.13 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.12:*:*:*:*:*:*:*","matchCriteriaId":"BF3CE922-633D-4FEA-80F6-0FF3BF13AFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-43.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12624","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5a10743258bd016c07ebf6479137fda3d172a0f","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-43.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5a10743258bd016c07ebf6479137fda3d172a0f","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6508","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:06.620","lastModified":"2026-06-17T00:51:17.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (large loop) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-rlc.c en el disector RLC en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 utiliza un tipo de datos de entero incorrecto, lo que permite a atacantes remotos provocar una denegación de servicio (bucle grande) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.12:*:*:*:*:*:*:*","matchCriteriaId":"BF3CE922-633D-4FEA-80F6-0FF3BF13AFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-44.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12660","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6cf9616df68a4db7e436bb77392586ff9ad84feb","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-44.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6cf9616df68a4db7e436bb77392586ff9ad84feb","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6509","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:07.947","lastModified":"2026-06-17T00:51:17.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-ldss.c en el disector LDSS en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 no maneja adecuadamente conversaciones, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.12:*:*:*:*:*:*:*","matchCriteriaId":"BF3CE922-633D-4FEA-80F6-0FF3BF13AFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-45.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12662","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5a469ddc893f7c1912d0e15cc73bd3011e6cc2fb","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-45.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5a469ddc893f7c1912d0e15cc73bd3011e6cc2fb","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6510","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:09.353","lastModified":"2026-06-17T00:51:17.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet."},{"lang":"es","value":"Error por un paso en epan/dissectors/packet-rlc.c en el disector RLC en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer basado en pila y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.12:*:*:*:*:*:*:*","matchCriteriaId":"BF3CE922-633D-4FEA-80F6-0FF3BF13AFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-46.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12664","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47a5fa850b388fcf4ea762073806f01b459820fe","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-46.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47a5fa850b388fcf4ea762073806f01b459820fe","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6511","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:10.933","lastModified":"2026-06-17T00:51:17.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet."},{"lang":"es","value":"epan/proto.c en Wireshark 1.12.x en versiones anteriores a 1.12.13 y 2.x en versiones anteriores a 2.0.5 permite a atacantes remotos provocar una denegación de servicio (bucle grande de disector OpenFlow) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.12:*:*:*:*:*:*:*","matchCriteriaId":"BF3CE922-633D-4FEA-80F6-0FF3BF13AFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-47.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12659","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=56706427f53cc64793870bf072c2c06248ae88f3","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2016/dsa-3648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=56706427f53cc64793870bf072c2c06248ae88f3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6512","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:12.337","lastModified":"2026-06-17T00:51:18.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors."},{"lang":"es","value":"epan/dissectors/packet-wap.c in Wireshark 2.x en versiones anteriores a 2.0.5 omite una comprobación de desbordamiento en la función tvb_get_guintvar, lo que permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un paquete manipulado, relacionado con los disertores MMSE, WAP, WBXML y WSP."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/92174","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-48.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12661","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2193bea3212d74e2a907152055e27d409b59485e","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/40195/","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/92174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-48.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2193bea3212d74e2a907152055e27d409b59485e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40195/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6513","sourceIdentifier":"cve@mitre.org","published":"2016-08-06T23:59:13.557","lastModified":"2026-06-17T00:51:18.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-wbxml.c en el disector WBXML en Wireshark 2.x en versiones anteriores a 2.0.5 no restringe la profundidad de repercusión, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securitytracker.com/id/1036480","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-49.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12663","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=347f071f1b9180563c28b0f3d0627b91eb456c72","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/07/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securitytracker.com/id/1036480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2016-49.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=347f071f1b9180563c28b0f3d0627b91eb456c72","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8935","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T10:59:01.320","lastModified":"2026-06-17T00:35:31.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function."},{"lang":"es","value":"La función sapi_header_op en main/SAPI en PHP en versiones anteriores a 5.4.38, 5.5.x en versiones anteriores a 5.5.22 y 5.6 en versiones anteriores a 5.6.6 apoya el plegado de linea en de uso sin considerar la compatibilidad del navegador, lo que permite a atacantes remotos llevar a cabo ataques XSS contra Internet Explorer mediante el aprovechamiento de (1) %0A%20 o (2) %0D%0A%20 no manejado adecuadamente en la función de cabecera."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.37","matchCriteriaId":"E4E665F6-A16B-446F-8048-5E8630967F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F6D9B19-E64D-4BED-9194-17460CE19E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"3D25E591-448C-4E3B-8557-6E48F7571796"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"6DA18F3F-B4B5-40C3-BF19-67C1F0C1787D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"3AF783C9-26E7-4E02-BD41-77B9783667E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"EF49701D-ECE4-4CEB-BDAB-24C09C8AD4B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"7AEDF6F7-001D-4A35-A26F-417991AD377F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"4031DB99-B4B4-41EC-B3C1-543D92C575A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D5450EA7-A398-49D2-AA8E-7C95B074BAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04FE0E4E-BC94-4DC9-BE9B-DC57B952B2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"BB8E09D8-9CBE-4279-88B7-24A214A5A537"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"2D41ECCE-887D-49A2-9BB3-B559495AC55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"79B418BC-27F4-4443-A0F7-FF4ADA568C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"8EEBDF62-BA1B-4438-9AEA-8B56AA5713E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F644EA6C-50C6-4A1C-A4AC-287AA9477B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD47F30-74F5-48E8-8657-C2373FE2BD22"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0C09527B-6B47-41F8-BDE6-01C47E452286"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2E454D87-23CB-4D7F-90FE-942EE54D661F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1031E646-F2CF-4A3E-8E6A-5D4BC950BEDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"130E50C1-D209-4CFF-9399-69D561340FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C1F29948-9417-460B-8B04-D91AE4E8B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"A37D00C1-4F41-4400-9CE4-8E8BAA3E4142"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"093D08B7-CC3C-4616-8697-F15B253A7D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"E9CD8FEE-DE7B-47CB-9985-4092BFA071D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"A30B2D9E-F289-43C9-BFBC-1CEF284A417E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"FE41CFDF-8ECD-41C1-94A7-5AFD42C5DDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"6AEAC9BA-AF82-4345-839C-D339DCB962A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"1EFE682F-52E3-48EC-A993-F522FC29712F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"AC63A449-5D92-4F5F-8186-B58FFFBA54FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"F18236F6-2065-4A6A-93E7-FD90E650C689"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DEFBA84A-A4E4-438B-B9B5-8549809DCECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"146D3DC9-50F4-430B-B321-68ECE78879A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"5BF4E8FF-A3EC-43E8-A0C1-FD38AFCB77B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"54ADECFC-3C07-43BC-B296-6C25AC7F1C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"FE192054-2FBB-4388-A52A-422E20DEA2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"F0195D48-3B42-4AC0-B9C5-436E01C63879"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"BF0E5D67-ABC1-41A5-94E1-7DD3CDB51D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"319E0573-B1AD-40B6-B4BC-8BE67ED3EFDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"1A7C00EB-87B7-4EB7-A4AC-8665D8C78467"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"21BFCF10-786A-4D1E-9C37-50A1EC6056F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"95A6D6C8-5F46-4897-A0B0-778631E8CE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F13E2D-A8F7-4B74-8D03-7905C81672C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE18933A-5FE6-41C7-B1B6-DA3E762C3FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9AE1289F-03A6-4621-B387-5F5ADAC4AE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"383697F5-D29E-475A-84F3-46B54A928889"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"786ED182-5D71-4197-9196-12AB5CF05F85"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/20/3","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://bugs.php.net/bug.php?id=68978","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/php/php-src/commit/996faf964bba1aec06b153b370a7f20d3dd2bb8b?w=1","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/20/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://bugs.php.net/bug.php?id=68978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/php/php-src/commit/996faf964bba1aec06b153b370a7f20d3dd2bb8b?w=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-5351","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:03.157","lastModified":"2026-06-17T00:49:15.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/crypt/airpdcap.c en el disector IEEE 802.11 en Wireshark 1.12.x en versiones anteriores a 1.12.12 y 2.x en versiones anteriores a 2.0.4 no maneja correctamente la falta de una EAPOL_RSN_KEY, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3615","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91140","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11585","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/9b0b20b8d5f8c9f7839d58ff6c5900f7e19283b4","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-30.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/9b0b20b8d5f8c9f7839d58ff6c5900f7e19283b4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-30.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5352","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:04.657","lastModified":"2026-06-17T00:49:15.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/crypt/airpdcap.c en el disector IEEE 802.11 en Wireshark 2.x en versiones anteriores a 2.0.4 no maneja correctamente ciertos valores de longitud, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91140","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12175","source":"cve@mitre.org","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/wireshark/wireshark/commit/b6d838eebf4456192360654092e5587c5207f185","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-31.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/wireshark/wireshark/commit/b6d838eebf4456192360654092e5587c5207f185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5353","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:06.113","lastModified":"2026-06-17T00:49:16.093","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-umts_fp.c en el disector UMTS FP en Wireshark 1.12.x en versiones anteriores a 1.12.12 y 2.x en versiones anteriores a 2.0.4 no maneja correctamente el valor reservado C/T, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3615","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91140","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12191","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/7d7190695ce2ff269fdffb04e87139995cde21f4","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-32.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/7d7190695ce2ff269fdffb04e87139995cde21f4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5354","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:08.190","lastModified":"2026-06-17T00:49:16.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"El subsistema de USB en Wireshark 1.12.x en versiones anteriores a 1.12.12 y 2.x en versiones anteriores a 2.0.4 no maneja correctamente tipos de clase, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3615","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91140","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12356","source":"cve@mitre.org","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/wireshark/wireshark/commit/2cb5985bf47bdc8bea78d28483ed224abdd33dc6","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-33.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/wireshark/wireshark/commit/2cb5985bf47bdc8bea78d28483ed224abdd33dc6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-33.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5355","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:09.503","lastModified":"2026-06-17T00:49:16.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file."},{"lang":"es","value":"wiretap/toshiba.c en el analizador de archivo Toshiba en Wireshark 1.12.x en versiones anteriores a 1.12.12 y 2.x en versiones anteriores a 2.0.4 no maneja correctamente procesamiento sin signo de entero sscanf, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3615","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91140","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12394","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/3270dfac43da861c714df76513456b46765ff47f","source":"cve@mitre.org"},{"url":"https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-34.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/3270dfac43da861c714df76513456b46765ff47f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5356","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:10.830","lastModified":"2026-06-17T00:49:16.473","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file."},{"lang":"es","value":"wiretap/cosine.c en el analizador de archivo CoSine en Wireshark 1.12.x en versiones anteriores a 1.12.12 y 2.x en versiones anteriores a 2.0.4 no maneja correctamente procesamiento sin signo de entero sscanf, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3615","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91140","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12395","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/a66628e425db725df1ac52a3c573a03357060ddd","source":"cve@mitre.org"},{"url":"https://github.com/wireshark/wireshark/commit/f5ec0afb766f19519ea9623152cca3bbe2229500","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-35.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/a66628e425db725df1ac52a3c573a03357060ddd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/wireshark/wireshark/commit/f5ec0afb766f19519ea9623152cca3bbe2229500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-35.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5357","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:12.127","lastModified":"2026-06-17T00:49:16.607","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file."},{"lang":"es","value":"wiretap/netscreen.c en el analizador de archivo NetScreen en Wireshark 1.12.x en versiones anteriores a 1.12.12 y 2.x en versiones anteriores a 2.0.4 no maneja correctamente procesamiento sin signo de entero sscanf, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3615","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91140","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12396","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/11edc83b98a61e890d7bb01855389d40e984ea82","source":"cve@mitre.org"},{"url":"https://github.com/wireshark/wireshark/commit/6a140eca7b78b230f1f90a739a32257476513c78","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-36.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/11edc83b98a61e890d7bb01855389d40e984ea82","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/wireshark/wireshark/commit/6a140eca7b78b230f1f90a739a32257476513c78","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5358","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:13.270","lastModified":"2026-06-17T00:49:16.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-pktap.c en el disector Ethernet en Wireshark 2.x en versiones anteriores a 2.0.4 no maneja correctamente el tipo de datos de paquetes de cabecera, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91140","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12440","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/2c13e97d656c1c0ac4d76eb9d307664aae0e0cf7","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-37.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/wireshark/wireshark/commit/2c13e97d656c1c0ac4d76eb9d307664aae0e0cf7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-37.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5359","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:14.550","lastModified":"2026-06-17T00:49:16.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-wbxml.c en el disector WBXML en Wireshark 1.12.x en versiones anteriores a 1.12.12 no maneja correctamente offsets, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de entero y bucle infinito) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E2F85560-F43E-46C5-9CD1-1A1D66E21580"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"2518D86A-623D-431E-9574-32B677D5FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*","matchCriteriaId":"FEA2B085-01D2-4707-A9F7-6545E4D6D99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"FE4BBF1A-4303-456C-AD19-F5BCF6FDD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"AD3D5FFB-1A09-4A06-8E83-DF72E39E1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"94DC7821-59C4-4BD7-BDCA-D0319B209010"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*","matchCriteriaId":"89D31D86-1402-472B-8318-245A0CC034AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*","matchCriteriaId":"8281E6C3-7A2B-41E1-99A4-A423FEE11064"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3615","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91140","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12408","source":"cve@mitre.org","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/wireshark/wireshark/commit/b8e0d416898bb975a02c1b55883342edc5b4c9c0","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-38.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","VDB Entry"]},{"url":"https://github.com/wireshark/wireshark/commit/b8e0d416898bb975a02c1b55883342edc5b4c9c0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-38.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6634","sourceIdentifier":"cve@mitre.org","published":"2016-08-07T16:59:15.770","lastModified":"2026-06-17T00:51:30.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la página de configuración de red en WordPress en versiones anteriores a 4.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.4","matchCriteriaId":"8EAA1EC6-E3AC-48C9-85FE-F43535053480"}]}]}],"references":[{"url":"http://codex.wordpress.org/Version_4.5","source":"cve@mitre.org","tags":["Patch","Release Notes"]},{"url":"http://www.debian.org/security/2016/dsa-3681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92390","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://core.trac.wordpress.org/query?status=closed&milestone=4.5","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://wpvulndb.com/vulnerabilities/8474","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://codex.wordpress.org/Version_4.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Release Notes"]},{"url":"http://www.debian.org/security/2016/dsa-3681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://core.trac.wordpress.org/query?status=closed&milestone=4.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://wpvulndb.com/vulnerabilities/8474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1474","sourceIdentifier":"psirt@cisco.com","published":"2016-08-08T00:59:07.687","lastModified":"2026-06-17T00:42:02.487","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a \"cross-frame scripting (XFS)\" issue, aka Bug ID CSCuw65846, a different vulnerability than CVE-2015-6434."},{"lang":"es","value":"Cisco Prime Infrastructure 2.2(2) no restingue adecuadamente uso de elementos IFRAME, lo que facilita a atacantes remotos llevar a cabo ataques clickjacking y otros ataques no especificados a través de un sitio web manipulado, relacionado con un problema \"cross-frame scripting (XFS)\", también conocido como Bug ID CSCuw65846, una vulnerabilidad diferente a CVE-2015-6434."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_infrastructure:2.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"7830BF63-55ED-4D8B-B380-1E78E338EA2D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-cpi","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92278","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036530","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-cpi","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0280","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-08T01:59:01.133","lastModified":"2026-06-17T00:37:14.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server Framework and InfoSphere Information Server Business Glossary 9.1 before 9.1.2.0, Information Server Framework and InfoSphere Information Governance Catalog 11.3 before 11.3.1.2, and Information Server Framework and InfoSphere Information Governance Catalog 11.5 before 11.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM Information Server Framework 8.5, Information Server Framework e InfoSphere Information Server Business Glossary 8.7 en versiones anteriores a FP2, Information Server Framework e InfoSphere Information Server Business Glossary 9.1 en versiones anteriores a 9.1.2.0, Information Server Framework e InfoSphere Information Governance Catalog 11.3 en versiones anteriores a 11.3.1.2 e Information Server Framework e InfoSphere Information Governance Catalog 11.5 en versiones anteriores a 11.5.0.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:information_server_framework:8.5:*:*:*:*:*:*:*","matchCriteriaId":"489746B9-4ADC-4D48-A4BE-C338B176C7D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:information_server_framework:8.7:*:*:*:*:*:*:*","matchCriteriaId":"C15AAD33-AA7B-40F6-8204-3A7AA106E2C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:information_server_framework:9.1:*:*:*:*:*:*:*","matchCriteriaId":"B9B32735-314E-486F-A7C5-708026F1DBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:information_server_framework:11.3:*:*:*:*:*:*:*","matchCriteriaId":"1AB0E464-3A84-454F-82B4-275AB6CC571A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:information_server_framework:11.5:*:*:*:*:*:*:*","matchCriteriaId":"14478F5F-E04B-4E8C-97F9-D02DDD42FCB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_information_governance_catalog:11.3:*:*:*:*:*:*:*","matchCriteriaId":"3FF21EA1-F1C5-458F-9188-6848D02B216A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_information_governance_catalog:11.5:*:*:*:*:*:*:*","matchCriteriaId":"A6C5AB71-99BF-4A38-94D7-4C166515DC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_information_server_business_glossary:8.7:*:*:*:*:*:*:*","matchCriteriaId":"FF694C98-C8DE-4D9A-A1A9-A3813A32DC11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_information_server_business_glossary:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1B4ECB37-02D4-4DD1-83B8-0EEAE09B950A"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55452","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981766","source":"psirt@us.ibm.com","tags":["Mitigation","Patch","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92133","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036418","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR55452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21981766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0361","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-08T01:59:03.837","lastModified":"2026-06-17T00:37:23.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords."},{"lang":"es","value":"IBM General Parallel File System (GPFS) 3.5 en versiones anteriores a 3.5.0.29 efix 6 y 4.1.1 en versiones anteriores a 4.1.1.4 efix 9, cuando se utiliza Spectrum Scale GUI con DB2 en Linux, UNIX y Windows, permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados, como se demuestra descubriendo contraseñas ADMIN."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:general_parallel_file_system:3.5:*:*:*:*:*:*:*","matchCriteriaId":"7F13ADEA-CFB7-4302-B7F2-74EF70F08FC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4D08020F-C3F5-4175-B671-73AA12E8F571"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2F32AE31-9C7C-4FFC-A4FB-9C6D13D02E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E8638C2C-434E-4716-BB4F-F759FFFAD008"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3061EBC4-981B-4C1E-B4B6-05CE75AC835C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"3BE5DA93-B2EB-438C-B698-75E5F116C02C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BDD19B4F-5738-4CB1-99FC-F40FDA8388AE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986595","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90550","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036455","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/90550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2912","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-08T01:59:08.210","lastModified":"2026-06-17T00:44:39.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en el Document Builder en IBM Rational Publishing Engine (también conocido como RPENG) 2.0.1 en versiones anteriores a ifix002 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"08963269-CCD9-4874-9D8B-53D9B8E6B95B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988263","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92335","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2914","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-08T01:59:09.320","lastModified":"2026-06-17T00:44:39.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension."},{"lang":"es","value":"Vulnerabilidad de carga de archivos sin restricción en el Document Builder en IBM Rational Publishing Engine (también conocido como RPENG) 2.0.1 en versiones anteriores a ifix002 permite a usuarios remotos autenticados ejecutar código arbitrario especificando una extensión de archivo no esperada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"08963269-CCD9-4874-9D8B-53D9B8E6B95B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988263","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92334","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2925","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-08T01:59:10.430","lastModified":"2026-06-17T00:44:40.457","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1 CF21, and 8.5.0 before CF10 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM WebSphere Portal 6.1.0.x hasta la versión 6.1.0.6 CF27, 6.1.5.x hasta la versión 6.1.5.3 CF27, 7.x hasta la versión 7.0.0.2 CF30, 8.0.0.x hasta la versión 8.0.0.1 CF21 y 8.5.0 en versiones anteriores a CF10 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5DB29F4-59AB-439C-91C4-CDF677676C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6CA922-11EF-4315-A09A-B4A8937E4CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"526738D7-1AF8-4A8F-B833-BA0E35973A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"13D6BE9C-16FD-4FB4-8A87-56B42C246316"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5B50CEA-AFC4-4B45-9954-519965237FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0902AC0F-EA4D-4E65-A70A-15DE9B904B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D808F95D-C6BD-43EB-B16C-66449977BCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6ECEE98-B276-4ED6-AA5A-109EA57E9925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E4FF84B-A17F-464B-A718-67C44D2C69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI62749","source":"psirt@us.ibm.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986461","source":"psirt@us.ibm.com","tags":["Mitigation","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92180","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036454","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI62749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2989","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-08T01:59:12.773","lastModified":"2026-06-17T00:44:46.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in the Connections Portlets component 5.x before 5.0.2 for IBM WebSphere Portal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en el componente Connections Portlets 5.x en versiones anteriores a 5.0.2 para IBM WebSphere Portal permite a atacantes remotos redireccionar usuarios a sitios web arbitrarios y llevar a cabo ataques phishing a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections_portlets:5.0:*:*:*:*:websphere_portal:*:*","matchCriteriaId":"8E69F794-1E1C-4A03-B376-02E0F1A794E5"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986393","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92344","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036498","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3054","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-08T01:59:13.960","lastModified":"2026-06-17T00:44:53.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM FileNet Workplace 4.0.2 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios subiendo un archivo."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7229A80-BEA8-4472-AE89-F5AD331BAD30"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987129","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92332","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3059","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-08T01:59:15.447","lastModified":"2026-06-17T00:44:53.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM Spectrum Protect for Databases) 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server (aka IBM Spectrum Protect Snapshot) 3.1 before 3.1.1.7 and 3.2 before 3.2.1.9 allow local users to discover a cleartext SQL Server password by reading the Task List in the MMC GUI."},{"lang":"es","value":"IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (también conocido como IBM Spectrum Protect for Databases) 6.3 en versiones anteriores a 6.3.1.7 y 6.4 en versiones anteriores a 6.4.1.9 y Tivoli Storage FlashCopy Manager for Microsoft SQL Server (también conocido como IBM Spectrum Protect Snapshot) 3.1 en versiones anteriores a 3.1.1.7 y 3.2 en versiones anteriores a 3.2.1.9 permite a usuarios locales descubrir una contraseña en texto plano SQL Server leyendo el Task List en el MMC GUI."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_flashcopy_manager_for_sql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0.0","versionEndIncluding":"3.1.1.6","matchCriteriaId":"A33E5812-43FF-47E8-9D16-73D5281BF2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_flashcopy_manager_for_sql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0.0","versionEndIncluding":"3.2.1.8","matchCriteriaId":"FE63FEE3-0DC9-488F-B9CA-EB8EB014AB05"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0.0","versionEndIncluding":"6.3.1.8","matchCriteriaId":"7A25CCD1-E25F-499B-ABEF-18FBA5A52766"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0.0","versionEndIncluding":"6.4.1.8","matchCriteriaId":"348F7202-46C1-493A-90CD-A08187CA00F9"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987333","source":"psirt@us.ibm.com","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036488","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-5331","sourceIdentifier":"cve@mitre.org","published":"2016-08-08T01:59:17.477","lastModified":"2026-06-17T00:49:13.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en VMware vCenter Server 6.0 en versiones anteriores a U2 y ESXi 6.0 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de separación de respuestas HTTP a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-93"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:*:update_1b:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"168EE5FE-3C7E-435C-BCCF-9FA54C430715"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:6.0:*:*:*:*:*:*:*","matchCriteriaId":"CC77ADEA-F0B8-4E5D-B965-39397F823075"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/138211/VMware-vSphere-Hypervisor-ESXi-HTTP-Response-Injection.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2016/Aug/38","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/539128/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92324","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036543","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036544","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036545","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0010.html","source":"cve@mitre.org","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138211/VMware-vSphere-Hypervisor-ESXi-HTTP-Response-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2016/Aug/38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/539128/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5878","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-08T01:59:18.587","lastModified":"2026-06-17T00:50:12.710","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en IBM FileNet Workplace 4.0.2 en versiones anteriores a 4.0.2.14 permite a usuarios remotos autenticados redirigir usuarios a sitios web arbitrarios y llevar a cabo ataques phishing a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1777E00D-F3A8-4F1E-AC08-023192EEAED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0669E5B1-25CD-4799-81C6-81F7D6C66F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCCC4086-2A13-42E8-A49F-2D9ABDF66A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B3CFF11C-ABF5-4B98-96FD-FFF3F1A34945"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"FE9679C4-74C1-4C66-A7BD-C2EF3E1CE468"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B3914004-6A8B-4CC5-817F-489375BA79AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DA121075-BFF4-4E4A-9A40-06F781C53F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"49C23741-5A3B-43D6-8523-F0AAAF8B16BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"70863AB4-7E04-430B-9591-2ACE85BD3DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"6BFCA212-FE6C-4D02-8B73-09E4829CF161"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"868FB17A-BB34-4B42-ADD4-DD40C2FCEE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"3B86E0D0-1EB5-4DEA-88B8-E46FAD87511E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"4E16D97D-5528-4493-994A-EFFEB8B2D94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_workplace:4.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"2D790B3C-2A95-4A56-969A-BAA7037D7DE7"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987721","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92279","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4168","sourceIdentifier":"psirt@adobe.com","published":"2016-08-09T20:59:00.140","lastModified":"2026-06-17T00:47:02.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Adobe Experience Manager 5.6.1, 6.0 y 6.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3235CB90-42C5-4280-8F1E-44D081842CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0791D620-1EE8-44C8-92D7-3790B546C62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D8996F27-91F0-42ED-963A-D46C91EC5ECF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92377","source":"psirt@adobe.com"},{"url":"http://www.securitytracker.com/id/1036563","source":"psirt@adobe.com"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-27.html","source":"psirt@adobe.com","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4169","sourceIdentifier":"psirt@adobe.com","published":"2016-08-09T20:59:01.360","lastModified":"2026-06-17T00:47:02.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecified vectors."},{"lang":"es","value":"Adobe Experience Manager 6.0, 6.1 y 6.2 permiten a atacantes obtener información de eventos de registro de auditoría sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0791D620-1EE8-44C8-92D7-3790B546C62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D8996F27-91F0-42ED-963A-D46C91EC5ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E0056F65-B0CA-4939-815D-560687E16710"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92382","source":"psirt@adobe.com"},{"url":"http://www.securitytracker.com/id/1036563","source":"psirt@adobe.com"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-27.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4170","sourceIdentifier":"psirt@adobe.com","published":"2016-08-09T20:59:02.657","lastModified":"2026-06-17T00:47:02.233","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Adobe Experience Manager 5.6.1, 6.0, 6.1 y 6.2 permite a atacantes remotos inyectar secuencia de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3235CB90-42C5-4280-8F1E-44D081842CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0791D620-1EE8-44C8-92D7-3790B546C62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D8996F27-91F0-42ED-963A-D46C91EC5ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E0056F65-B0CA-4939-815D-560687E16710"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92378","source":"psirt@adobe.com"},{"url":"http://www.securitytracker.com/id/1036563","source":"psirt@adobe.com"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-27.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4253","sourceIdentifier":"psirt@adobe.com","published":"2016-08-09T20:59:04.110","lastModified":"2026-06-17T00:47:13.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Backup functionality in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"La funcionalidad Backup en Adobe Experience Manager 5.6.1, 6.0, 6.1 y 6.2 permite a atacantes obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3235CB90-42C5-4280-8F1E-44D081842CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0791D620-1EE8-44C8-92D7-3790B546C62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D8996F27-91F0-42ED-963A-D46C91EC5ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:experience_manager:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E0056F65-B0CA-4939-815D-560687E16710"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92380","source":"psirt@adobe.com"},{"url":"http://www.securitytracker.com/id/1036563","source":"psirt@adobe.com"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-27.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb16-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3299","sourceIdentifier":"secure@microsoft.com","published":"2016-08-09T21:59:09.177","lastModified":"2026-06-17T00:45:27.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to hijack network traffic or bypass intended Enhanced Protected Mode (EPM) or application container protection mechanisms, and consequently render untrusted content in a browser, by leveraging how NetBIOS validates responses, aka \"NetBIOS Spoofing Vulnerability.\""},{"lang":"es","value":"Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold y 1511 permiten a atacantes remotos secuestrar tráfico de red o eludir Enhanced Protected Mode (EPM) intencionado o mecanismos de protección de contenedor de aplicaciones y consecuentemente hacer contenido no fiable en un buscador, aprovechando cómo NetBIOS valida respuestas, también conocida como \"NetBIOS Spoofing Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","matchCriteriaId":"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*","matchCriteriaId":"7519928D-0FF2-4584-8058-4C7764CD5671"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92387","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-077","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3315","sourceIdentifier":"secure@microsoft.com","published":"2016-08-09T21:59:21.677","lastModified":"2026-06-17T00:45:28.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka \"Microsoft OneNote Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016 y 2016 para Mac permiten a atacantes remotos obtener información sensible a través de un archivo OneNote manipulado, también conocida como \"Microsoft OneNote Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"83434795-4772-48E2-B604-9AAC6ECDE0B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"18AE1481-1E92-42F9-9E2E-C9C19353E580"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"FE03F7A7-90F4-4D41-9529-B36937CD94D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote:2013:sp1:*:*:rt:*:*:*","matchCriteriaId":"BBB1E19F-6870-429A-AB66-D7BBF3845AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote:2016:*:*:*:*:*:*:*","matchCriteriaId":"80F1EA3D-FD2D-4CB2-A93A-DFAD3187AFC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote_for_mac:2016:*:*:*:*:*:*:*","matchCriteriaId":"91F0608A-554C-489C-859F-49A8F895D27A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92294","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036559","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3320","sourceIdentifier":"secure@microsoft.com","published":"2016-08-09T21:59:27.520","lastModified":"2026-06-17T00:45:29.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or (2) physical access to install a crafted boot manager, aka \"Secure Boot Security Feature Bypass.\""},{"lang":"es","value":"Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 permiten a atacantes eludir el mecanismo de protección Secure Boot aprovechando el acceso (1) administrativo o (2) físico para instalar un gestor boot manipulado, también conocida como \"Secure Boot Security Feature Bypass\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*","matchCriteriaId":"772E9557-A371-4664-AE2D-4135AAEB89AA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92304","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036573","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-100","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVB6Y2TVKSOBTIIBRUAJUIH3LQHMHCAG/","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVB6Y2TVKSOBTIIBRUAJUIH3LQHMHCAG/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3326","sourceIdentifier":"secure@microsoft.com","published":"2016-08-09T21:59:30.833","lastModified":"2026-06-17T00:45:29.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka \"Microsoft Browser Information Disclosure Vulnerability,\" a different vulnerability than CVE-2016-3327."},{"lang":"es","value":"Microsoft Internet Explorer 9 hasta la versión 11 y Edge permiten a atacantes remotos obtener información sensible a través de una página web manipulada, también conocida como \"Microsoft Browser Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2016-3327."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*","matchCriteriaId":"8BD5B232-95EA-4F8E-8C7D-7976877AD243"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*","matchCriteriaId":"15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92287","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036562","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3327","sourceIdentifier":"secure@microsoft.com","published":"2016-08-09T21:59:32.053","lastModified":"2026-06-17T00:45:30.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka \"Microsoft Browser Information Disclosure Vulnerability,\" a different vulnerability than CVE-2016-3326."},{"lang":"es","value":"Microsoft Internet Explorer 9 hasta la versión 11 y Edge permiten a atacantes remotos obtener información sensible a través de una página web manipulada, también conocida como \"Microsoft Browser Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2016-3326."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*","matchCriteriaId":"8BD5B232-95EA-4F8E-8C7D-7976877AD243"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*","matchCriteriaId":"15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92284","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036562","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3329","sourceIdentifier":"secure@microsoft.com","published":"2016-08-09T21:59:33.287","lastModified":"2026-06-17T00:45:30.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka \"Internet Explorer Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 9 hasta la versión 11 y Edge permiten a atacantes remotos determinar la existencia de archivos a través de una página web manipulada, también conocida como \"Internet Explorer Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*","matchCriteriaId":"15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92286","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036562","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6132","sourceIdentifier":"cve@mitre.org","published":"2016-08-12T15:59:00.130","lastModified":"2026-06-17T00:50:30.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file."},{"lang":"es","value":"La función gdImageCreateFromTgaCtx en GD Graphics Library (también conocida como libgd) en versiones anteriores a 2.2.3 permite a atacantes remotos causar una denegación de servicio (lectura fuera de límites) a través de un archivo TGA manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2","matchCriteriaId":"CABE614C-FFD3-4B02-B5DF-658185F8D874"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3619","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/30/10","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/30/6","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91520","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3060-1","source":"cve@mitre.org"},{"url":"https://github.com/libgd/libgd/issues/247","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://libgd.github.io/release-2.2.3.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-09","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/30/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/30/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3060-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/libgd/libgd/issues/247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://libgd.github.io/release-2.2.3.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6161","sourceIdentifier":"security@debian.org","published":"2016-08-12T15:59:02.290","lastModified":"2026-06-17T00:50:33.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image."},{"lang":"es","value":"La función de salida en gd_gif_out.c en GD Graphics Library (también conocida como libgd) permite a atacantes remotos causar una denegación de servicio (lectura fuera de límites) a través de una imagen manipulada."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2","matchCriteriaId":"CABE614C-FFD3-4B02-B5DF-658185F8D874"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3619","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/05/6","source":"security@debian.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/05/7","source":"security@debian.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3030-1","source":"security@debian.org"},{"url":"https://github.com/libgd/libgd/issues/209","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/05/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/05/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/libgd/libgd/issues/209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6207","sourceIdentifier":"cve@mitre.org","published":"2016-08-12T15:59:03.730","lastModified":"2026-06-17T00:50:38.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors."},{"lang":"es","value":"Desbordamiento de entero en la función _gdContributionsAlloc en gd_interpolation.c en GD Graphics Library (también conocida como libgd) en versiones anteriores a 2.2.3 permite a atacantes remotos causar una denegación de servicio (escritura de memoria fuera de límites o consumo de memoria) a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-190"},{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2","matchCriteriaId":"CABE614C-FFD3-4B02-B5DF-658185F8D874"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.38","matchCriteriaId":"8F79D472-7AF7-4954-8C63-7C063613ADC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.6.24","matchCriteriaId":"AE57AD0E-537B-4A24-B296-589BFD241DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"E03A748C-D25C-4E3F-B636-F6E45A9A92CC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/138174/LibGD-2.2.2-Integer-Overflow-Denial-Of-Service.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3630","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/539100/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92080","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036535","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3060-1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugs.php.net/bug.php?id=72558","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://libgd.github.io/release-2.2.3.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://secunia.com/secunia_research/2016-9/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201612-09","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/138174/LibGD-2.2.2-Integer-Overflow-Denial-Of-Service.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/539100/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3060-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugs.php.net/bug.php?id=72558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://libgd.github.io/release-2.2.3.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://secunia.com/secunia_research/2016-9/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201612-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6214","sourceIdentifier":"cve@mitre.org","published":"2016-08-12T15:59:04.980","lastModified":"2026-06-17T00:50:38.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file."},{"lang":"es","value":"gd_tga.c en GD Graphics Library (también conocida como libgd) en versiones anteriores a 2.2.3 permite a atacantes remotos causar una denegación de servicio (lectura fuera de límites) a través de un archivo TGA manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2","matchCriteriaId":"CABE614C-FFD3-4B02-B5DF-658185F8D874"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3619","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/12","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3060-1","source":"cve@mitre.org"},{"url":"https://github.com/libgd/libgd/commit/10ef1dca63d62433fda13309b4a228782db823f7","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libgd/libgd/issues/247#issuecomment-232084241","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://libgd.github.io/release-2.2.3.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3060-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/libgd/libgd/commit/10ef1dca63d62433fda13309b4a228782db823f7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libgd/libgd/issues/247#issuecomment-232084241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://libgd.github.io/release-2.2.3.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5845","sourceIdentifier":"cve@mitre.org","published":"2016-08-13T01:59:07.650","lastModified":"2026-06-17T00:50:08.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service (program crash) via an invalid file name in an archive file, aka SAP Security Note 2312905."},{"lang":"es","value":"SAP SAPCAR no comprueba el valor de retorno de operaciones de archivos cuando se extraen archivos, lo que permite a atacantes remotos provocar una denegación de servicio (caída del programa) a través de un nombre de archivo inválido en un archivo histórico, también conocido como SAP Security Note 2312905."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapcar:-:*:*:*:*:*:*:*","matchCriteriaId":"508C338F-B7E9-4BD6-8CCF-C81A981996FE"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/138284/SAP-CAR-Archive-Tool-Denial-Of-Service-Security-Bypass.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/46","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539180/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92406","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40230/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.onapsis.com/blog/denial-service-attacks-sap-security-notes-august-2016","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/138284/SAP-CAR-Archive-Tool-Denial-Of-Service-Security-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/46","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/539180/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40230/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.onapsis.com/blog/denial-service-attacks-sap-security-notes-august-2016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/252.html\">CWE-252: Unchecked Return Value</a>"}},{"cve":{"id":"CVE-2016-5847","sourceIdentifier":"cve@mitre.org","published":"2016-08-13T01:59:08.637","lastModified":"2026-06-17T00:50:08.347","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384."},{"lang":"es","value":"SAP SAPCAR permite a usuarios locales cambiar los permisos de archivos arbitrarios y consecuentemente obtener privilegios a través de un ataque de enlace duro en archivos extraídos de un archivo, posiblemente relacionado con SAP Security Note 2327384."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.0,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapcar_archive_tool:-:*:*:*:*:*:*:*","matchCriteriaId":"23074AD9-58E5-47F2-A695-F1CCDB245EC6"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/138284/SAP-CAR-Archive-Tool-Denial-Of-Service-Security-Bypass.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/46","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/539180/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92406","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/40230/","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/138284/SAP-CAR-Archive-Tool-Denial-Of-Service-Security-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/46","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/539180/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/40230/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3089","sourceIdentifier":"secalert@redhat.com","published":"2016-08-19T21:59:04.477","lastModified":"2026-06-17T00:44:56.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter."},{"lang":"es","value":"Vulnerabilidad de XSS en el panel SWF en Apache OpenMeetings en versiones anteriores a 3.1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro swf."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:openmeetings:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.1","matchCriteriaId":"E738AD66-3F16-4B61-BEEC-01F457D6D03D"}]}]}],"references":[{"url":"http://openmeetings.apache.org/security.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138313/Apache-OpenMeetings-3.1.0-Cross-Site-Scripting.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/539192/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/92442","source":"secalert@redhat.com"},{"url":"https://www.apache.org/dist/openmeetings/3.1.2/CHANGELOG","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://openmeetings.apache.org/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/138313/Apache-OpenMeetings-3.1.0-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/539192/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.apache.org/dist/openmeetings/3.1.2/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2016-3193","sourceIdentifier":"cve@mitre.org","published":"2016-08-19T21:59:05.463","lastModified":"2026-06-17T00:45:16.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 and FortiAnalyzer 5.x before 5.0.13, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la aplicación web del dispositivo en Fortinet FortiManager 5.x en versiones anteriores a 5.0.12, 5.2.x en versiones anteriores a 5.2.6 y 5.4.x en versiones anteriores a 5.4.1 y FortiAnalyzer 5.x en versiones anteriores a 5.0.13, 5.2.x en versiones anteriores a 5.2.6 y 5.4.x en versiones anteriores a 5.4.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"833C89CE-43F0-4F6E-8A4F-504EA5F16319"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C96F78B0-2F6E-4A28-B0B8-CCE3638DCCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68D3536B-652C-4642-9FF9-5A7CFDBB7DD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"83ADE078-F9B6-4E46-89AB-F9DE3A2EAF06"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A5DF6CBD-E8D8-40B7-9512-CD739D6FA918"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42304E1B-C9BF-4CCE-A5C7-4FAC7E4C87E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"34B83D3F-23C8-4781-887C-1876B103A4B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BC2F75CB-BC6D-434A-84C8-6290F4B6E8B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"AB152570-F07F-4706-9717-D31F5F31CDE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C2A3410C-E673-49C1-AA2C-2BD77C68DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6AFEA22C-D661-4859-86CE-329D23E3EF87"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7D9B23B1-A527-49B6-A6CB-CFFCF278B70E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72523D47-A6FA-48E8-B2D0-3563027CE35C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7FE6366D-0535-4681-90F7-3AB9386184A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0F5BBE82-1D71-40EE-B506-1DD1066F537C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F1A2A3F2-A908-4192-8032-F8FA3310B50A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B621447-97C3-42B4-92FF-3D5BEDE26A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4D281C46-3C6A-4ABA-B25C-1FA623F78566"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C235585-4228-43B3-B2BB-06563B67F9E7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83E355-BA1A-47B3-AE43-04668C87FD8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"378DE593-6514-4111-95DF-C881E163E6D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BEAD4CF6-6654-4BCC-8EC4-5B11AF81C123"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0C3F75D9-5719-4392-8FDE-DA1CFEE5BEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"06360B2F-EE21-4E99-9931-E4C62B1D2C25"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8FEC6473-536E-4ADB-9BD1-8A75846A039E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"799DA4F4-F5DD-4D56-ACC0-C28891C27A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8AD6F2AF-F98F-4113-94D8-1F3D26702D82"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"647BBA50-058A-4D8D-884A-83A818B90622"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C4BA0949-E1B2-41F4-801C-1FF5FDD5FD8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"042001D0-4E10-488F-AB01-AFEB23D78C01"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"728F1AAE-6156-443B-A5DA-990538432389"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B27A485B-71F5-485C-9F3C-691A4F1CA5A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0E098F02-C9DA-4EC9-B13C-8DFD6735615F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BF465F07-3786-4533-9B61-C8344DCB166F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D43C2347-D6F3-40A6-8E00-DD31F11A84BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A48CA4D3-FBD6-4048-8FFB-C0A874402E1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4F9636D8-7C3B-4504-9D1C-01AC471EAFAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EC123643-C9EE-40BF-B6F5-CE942F0A474E"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-persistent-xss-vulnerability-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92458","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036550","source":"cve@mitre.org"},{"url":"http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-persistent-xss-vulnerability-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3194","sourceIdentifier":"cve@mitre.org","published":"2016-08-19T21:59:06.430","lastModified":"2026-06-17T00:45:16.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la página de dirección de agregado en Fortinet FortiManager 5.x en versiones anteriores a 5.0.12 y 5.2.x en versiones anteriores a 5.2.6 y FortiAnalyzer 5.x en versiones anteriores a 5.0.13 y 5.2.x en versiones anteriores a 5.2.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"833C89CE-43F0-4F6E-8A4F-504EA5F16319"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C96F78B0-2F6E-4A28-B0B8-CCE3638DCCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68D3536B-652C-4642-9FF9-5A7CFDBB7DD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"83ADE078-F9B6-4E46-89AB-F9DE3A2EAF06"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A5DF6CBD-E8D8-40B7-9512-CD739D6FA918"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42304E1B-C9BF-4CCE-A5C7-4FAC7E4C87E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"34B83D3F-23C8-4781-887C-1876B103A4B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BC2F75CB-BC6D-434A-84C8-6290F4B6E8B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"AB152570-F07F-4706-9717-D31F5F31CDE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C2A3410C-E673-49C1-AA2C-2BD77C68DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6AFEA22C-D661-4859-86CE-329D23E3EF87"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7D9B23B1-A527-49B6-A6CB-CFFCF278B70E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72523D47-A6FA-48E8-B2D0-3563027CE35C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7FE6366D-0535-4681-90F7-3AB9386184A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0F5BBE82-1D71-40EE-B506-1DD1066F537C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F1A2A3F2-A908-4192-8032-F8FA3310B50A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B621447-97C3-42B4-92FF-3D5BEDE26A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4D281C46-3C6A-4ABA-B25C-1FA623F78566"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83E355-BA1A-47B3-AE43-04668C87FD8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"378DE593-6514-4111-95DF-C881E163E6D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BEAD4CF6-6654-4BCC-8EC4-5B11AF81C123"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0C3F75D9-5719-4392-8FDE-DA1CFEE5BEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"06360B2F-EE21-4E99-9931-E4C62B1D2C25"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8FEC6473-536E-4ADB-9BD1-8A75846A039E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"799DA4F4-F5DD-4D56-ACC0-C28891C27A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8AD6F2AF-F98F-4113-94D8-1F3D26702D82"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"647BBA50-058A-4D8D-884A-83A818B90622"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C4BA0949-E1B2-41F4-801C-1FF5FDD5FD8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"042001D0-4E10-488F-AB01-AFEB23D78C01"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"728F1AAE-6156-443B-A5DA-990538432389"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B27A485B-71F5-485C-9F3C-691A4F1CA5A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0E098F02-C9DA-4EC9-B13C-8DFD6735615F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BF465F07-3786-4533-9B61-C8344DCB166F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D43C2347-D6F3-40A6-8E00-DD31F11A84BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A48CA4D3-FBD6-4048-8FFB-C0A874402E1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4F9636D8-7C3B-4504-9D1C-01AC471EAFAF"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-xss-vulnerability","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92456","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036550","source":"cve@mitre.org"},{"url":"http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3195","sourceIdentifier":"cve@mitre.org","published":"2016-08-19T21:59:07.430","lastModified":"2026-06-17T00:45:16.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web-UI en Fortinet FortiManager 5.x en versiones anteriores a 5.0.12 y 5.2.x en versiones anteriores a 5.2.6 y FortiAnalyzer 5.x en versiones anteriores a 5.0.13 y 5.2.x en versiones anteriores a 5.2.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"833C89CE-43F0-4F6E-8A4F-504EA5F16319"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C96F78B0-2F6E-4A28-B0B8-CCE3638DCCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68D3536B-652C-4642-9FF9-5A7CFDBB7DD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"83ADE078-F9B6-4E46-89AB-F9DE3A2EAF06"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A5DF6CBD-E8D8-40B7-9512-CD739D6FA918"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42304E1B-C9BF-4CCE-A5C7-4FAC7E4C87E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"34B83D3F-23C8-4781-887C-1876B103A4B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BC2F75CB-BC6D-434A-84C8-6290F4B6E8B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"AB152570-F07F-4706-9717-D31F5F31CDE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C2A3410C-E673-49C1-AA2C-2BD77C68DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6AFEA22C-D661-4859-86CE-329D23E3EF87"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7D9B23B1-A527-49B6-A6CB-CFFCF278B70E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72523D47-A6FA-48E8-B2D0-3563027CE35C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7FE6366D-0535-4681-90F7-3AB9386184A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0F5BBE82-1D71-40EE-B506-1DD1066F537C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F1A2A3F2-A908-4192-8032-F8FA3310B50A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B621447-97C3-42B4-92FF-3D5BEDE26A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4D281C46-3C6A-4ABA-B25C-1FA623F78566"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83E355-BA1A-47B3-AE43-04668C87FD8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"378DE593-6514-4111-95DF-C881E163E6D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BEAD4CF6-6654-4BCC-8EC4-5B11AF81C123"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0C3F75D9-5719-4392-8FDE-DA1CFEE5BEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"06360B2F-EE21-4E99-9931-E4C62B1D2C25"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8FEC6473-536E-4ADB-9BD1-8A75846A039E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"799DA4F4-F5DD-4D56-ACC0-C28891C27A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8AD6F2AF-F98F-4113-94D8-1F3D26702D82"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"647BBA50-058A-4D8D-884A-83A818B90622"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C4BA0949-E1B2-41F4-801C-1FF5FDD5FD8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"042001D0-4E10-488F-AB01-AFEB23D78C01"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"728F1AAE-6156-443B-A5DA-990538432389"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B27A485B-71F5-485C-9F3C-691A4F1CA5A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0E098F02-C9DA-4EC9-B13C-8DFD6735615F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BF465F07-3786-4533-9B61-C8344DCB166F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D43C2347-D6F3-40A6-8E00-DD31F11A84BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A48CA4D3-FBD6-4048-8FFB-C0A874402E1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4F9636D8-7C3B-4504-9D1C-01AC471EAFAF"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-client-side-xss-vulnerability","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92453","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036550","source":"cve@mitre.org"},{"url":"http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-client-side-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4451","sourceIdentifier":"secalert@redhat.com","published":"2016-08-19T21:59:08.337","lastModified":"2026-06-17T00:47:35.170","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization and location restrictions and read or modify data for an arbitrary organization by leveraging knowledge of the id of that organization."},{"lang":"es","value":"Las APIs (1) Organization y (2) Locations en Foreman en versiones anteriores a 1.11.3 y 1.12.x en versiones anteriores a 1.12.0-RC1 permiten a usuarios remotos autenticados con filtros ilimitados eludir restricciones de organización y localización y leer o modificar datos de una organización arbitraria aprovechando el conocimiento de la id de esa organización."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","versionEndIncluding":"1.11.2","matchCriteriaId":"8B913B1D-1FAB-4865-9E87-69B22C3B91B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"C2D1166A-4EAE-40B2-8F85-1FA23C3949E2"}]}]}],"references":[{"url":"http://projects.theforeman.org/issues/15182","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://projects.theforeman.org/projects/foreman/repository/revisions/1144040f444b4bf4aae81940a150b26b23b4623c","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0336","source":"secalert@redhat.com"},{"url":"https://theforeman.org/security.html#2016-4451","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://projects.theforeman.org/issues/15182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://projects.theforeman.org/projects/foreman/repository/revisions/1144040f444b4bf4aae81940a150b26b23b4623c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://theforeman.org/security.html#2016-4451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4995","sourceIdentifier":"secalert@redhat.com","published":"2016-08-19T21:59:10.430","lastModified":"2026-06-17T00:48:34.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information via a URL with a hostname."},{"lang":"es","value":"Foreman en versiones anteriores a 1.11.4 y 1.12.x en versiones anteriores a 1.12.1 no restringe correctamente el acceso para previsualizar las plantillas de provisionamiento, lo que permite a usuarios remotos autenticados con permisos para ver algunos anfitriones obtener información de configuración de anfitrión sensible a través de una URL con un nombre de anfitrión."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","versionStartIncluding":"1.11.0","versionEndExcluding":"1.11.4","matchCriteriaId":"E2E79D62-B04D-4328-8905-FC0501476A7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","versionStartIncluding":"1.12.0","versionEndExcluding":"1.12.1","matchCriteriaId":"B5B32915-2453-4928-8EDC-FA35B382BA47"}]}]}],"references":[{"url":"http://projects.theforeman.org/issues/15490","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://projects.theforeman.org/projects/foreman/repository/revisions/c3c186de12be15e55d9582e54659f765304a1073","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0336","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://theforeman.org/security.html#2016-4995","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://projects.theforeman.org/issues/15490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://projects.theforeman.org/projects/foreman/repository/revisions/c3c186de12be15e55d9582e54659f765304a1073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://theforeman.org/security.html#2016-4995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5390","sourceIdentifier":"secalert@redhat.com","published":"2016-08-19T21:59:11.387","lastModified":"2026-06-17T00:49:19.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission containing a filter to obtain sensitive network interface information via a request to API routes beneath \"hosts,\" as demonstrated by a GET request to api/v2/hosts/secrethost/interfaces."},{"lang":"es","value":"Foreman en versiones anteriores a 1.11.4 y 1.12.x en versiones anteriores a 1.12.1 permiten a usuarios remotos autenticados con el permiso view_hosts que contiene un filtro obtener información sensible de la interfaz de red a través de una petición a rutas API por debajo de \"hosts\", según lo demostrado por una petición GET para api/v2/hosts/secrethost/interfaces."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","versionStartIncluding":"1.11.0","versionEndExcluding":"1.11.4","matchCriteriaId":"E2E79D62-B04D-4328-8905-FC0501476A7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","versionStartIncluding":"1.12.0","versionEndExcluding":"1.12.1","matchCriteriaId":"B5B32915-2453-4928-8EDC-FA35B382BA47"}]}]}],"references":[{"url":"http://projects.theforeman.org/issues/15653","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91770","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355728","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://theforeman.org/security.html#2016-5390","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://projects.theforeman.org/issues/15653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://theforeman.org/security.html#2016-5390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6319","sourceIdentifier":"secalert@redhat.com","published":"2016-08-19T21:59:14.277","lastModified":"2026-06-17T00:50:49.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter."},{"lang":"es","value":"Vulnerabilidad de XSS en app/helpers/form_helper.rb en Foreman en versiones anteriores a 1.12.2, como se utiliza en Remote Execution y posiblemente otros plugins, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro de etiqueta."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12.1","matchCriteriaId":"A05803BC-E1D8-4EC0-8054-AA76B42D2D2B"}]}]}],"references":[{"url":"http://projects.theforeman.org/issues/16019","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://projects.theforeman.org/issues/16024","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92429","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0336","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365815","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/theforeman/foreman/commit/0f35fe14acf0d0d3b55e9337bc5e2b9640ff2372","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://theforeman.org/security.html#2016-6319","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://projects.theforeman.org/issues/16019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://projects.theforeman.org/issues/16024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/theforeman/foreman/commit/0f35fe14acf0d0d3b55e9337bc5e2b9640ff2372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://theforeman.org/security.html#2016-6319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6320","sourceIdentifier":"secalert@redhat.com","published":"2016-08-19T21:59:15.290","lastModified":"2026-06-17T00:50:49.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form."},{"lang":"es","value":"Vulnerabilidad de XSS en app/assets/javascripts/host_edit_interfaces.js en Foreman en versiones anteriores a 1.12.2 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del identificador de dispositivo de interfaz de red en el formulario de interfaz del anfitrión."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12.1","matchCriteriaId":"A05803BC-E1D8-4EC0-8054-AA76B42D2D2B"}]}]}],"references":[{"url":"http://projects.theforeman.org/issues/16022","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92431","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHBA-2016:1885","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365785","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://github.com/theforeman/foreman/pull/3714/commits/850c38451c7bbde75521b796d16aca26e4d240a0","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://theforeman.org/security.html#2016-6320","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://projects.theforeman.org/issues/16022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHBA-2016:1885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/theforeman/foreman/pull/3714/commits/850c38451c7bbde75521b796d16aca26e4d240a0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://theforeman.org/security.html#2016-6320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1476","sourceIdentifier":"psirt@cisco.com","published":"2016-08-22T10:59:02.073","lastModified":"2026-06-17T00:42:02.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024."},{"lang":"es","value":"Vulnerabilidad de XSS en dispositivos Cisco IP Phone 8800 con software 11.0 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros manipulados, también conocido como Bug ID CSCuz03024."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8800_series_firmware:11.0_base:*:*:*:*:*:*:*","matchCriteriaId":"7E4B119E-96BB-4E0A-BC27-C5599B8FF8DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8800:-:*:*:*:*:*:*:*","matchCriteriaId":"C1BBEA07-3154-4270-B865-D4AD26EB3B42"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-ip-phone-8800","source":"psirt@cisco.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92404","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036595","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-ip-phone-8800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1485","sourceIdentifier":"psirt@cisco.com","published":"2016-08-22T10:59:04.480","lastModified":"2026-06-17T00:42:03.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Identity Services Engine 1.3(0.876) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros manipulados, también conocido como Bug ID CSCva46497."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:identity_services_engine_software:1.3\\(0.876\\):*:*:*:*:*:*:*","matchCriteriaId":"0F0C8A13-77BB-4D48-99C1-6C16D6A13FA5"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-ise","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92518","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036647","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-ise","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4376","sourceIdentifier":"cve@mitre.org","published":"2016-08-22T10:59:05.683","lastModified":"2026-06-17T00:47:27.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE FOS before 7.4.1d and 8.x before 8.0.1 on StoreFabric B switches allows remote attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"HPE FOS en versiones anteriores a 7.4.1d y 8.x en versiones anteriores a 8.0.1 en interruptores StoreFabric B permite a atacantes remotos obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.1","matchCriteriaId":"1708153E-FD12-4E9B-8818-FFF178D82820"},{"vulnerable":true,"criteria":"cpe:2.3:o:broadcom:fabric_operating_system:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A234DD0C-6C62-4A5E-B093-14F54710C2F1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:storefabric_b_series_switch:-:*:*:*:*:*:*:*","matchCriteriaId":"FBCD6AFC-7D41-430D-9AA0-581D9DD1BDDD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92480","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05236212","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05236212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6359","sourceIdentifier":"psirt@cisco.com","published":"2016-08-22T10:59:09.043","lastModified":"2026-06-17T00:50:53.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817."},{"lang":"es","value":"Vulnerabilidad XSS en Cisco Transport Gateway Installation Software 4.1(4.0) en dispositivos Smart Call Home Transport Gateway permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un valor manipulado, también conocido como Bug IDs CSCva40650 y CSCva40817."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:transport_gateway_installation_software:4.1\\(4.0\\):*:*:*:*:*:*:*","matchCriteriaId":"F707B2E2-9C28-46EA-AF5E-177B8A614E6A"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-sch","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92516","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-sch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6361","sourceIdentifier":"psirt@cisco.com","published":"2016-08-22T10:59:10.043","lastModified":"2026-06-17T00:50:53.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Aggregated MAC Protocol Data Unit (AMPDU) implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device reload) via a crafted AMPDU header, aka Bug ID CSCuz56288."},{"lang":"es","value":"La implementación de Aggregated MAC Protocol Data Unit (AMPDU) en dispositivos Cisco Aironet 1800, 2800 y 3800 con software en versiones anteriores a 8.2.121.0 y 8.3.x en versiones anteriores 8.3.102.0 permite a atacantes remotos causar una denegación de servicios (reinicio de dispositivo) a través de una cabecera AMPDU manipulado, también conocido como Bug ID CSCuz56288."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.1\\(15.14\\):*:*:*:*:*:*:*","matchCriteriaId":"56A62387-63C1-465E-B7C9-8AE336CC1C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.1\\(112.3\\):*:*:*:*:*:*:*","matchCriteriaId":"2C399834-8DC2-4B81-B258-0F2DA7408277"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.1\\(112.4\\):*:*:*:*:*:*:*","matchCriteriaId":"CEF360BC-B2C5-4DF4-8751-C1129A263243"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.1\\(131.0\\):*:*:*:*:*:*:*","matchCriteriaId":"BEEB3E5A-354E-41DA-971C-03F7915FA947"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.2\\(100.0\\):*:*:*:*:*:*:*","matchCriteriaId":"97863857-2CC6-4717-A59F-92F3B6604FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.2\\(102.43\\):*:*:*:*:*:*:*","matchCriteriaId":"3CD7A011-854F-41A9-9C24-BF3769B1797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B28C49B5-1B3D-4228-AE6A-83EC30D69515"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-aap","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92508","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036648","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-aap","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6363","sourceIdentifier":"psirt@cisco.com","published":"2016-08-22T10:59:12.137","lastModified":"2026-06-17T00:50:53.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The rate-limit feature in the 802.11 protocol implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device reload) via crafted 802.11 frames, aka Bug ID CSCva06192."},{"lang":"es","value":"La función de la velocidad límite en el protocolo de implementación 802.11 en dispositivos Cisco Aironet 1800, 2800 y 3800 con software en versiones anteriores a 8.2.121.0 y 8.3.x en versiones anteriores a 8.3.102.0 permite a atacantes remotos causar una denegación de servicio (reinicio del dispositivo) a través de marcos 802.11 manipulados, también conocido como Bug ID CSCva06192."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.1\\(15.14\\):*:*:*:*:*:*:*","matchCriteriaId":"56A62387-63C1-465E-B7C9-8AE336CC1C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.1\\(112.3\\):*:*:*:*:*:*:*","matchCriteriaId":"2C399834-8DC2-4B81-B258-0F2DA7408277"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.1\\(112.4\\):*:*:*:*:*:*:*","matchCriteriaId":"CEF360BC-B2C5-4DF4-8751-C1129A263243"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.1\\(131.0\\):*:*:*:*:*:*:*","matchCriteriaId":"BEEB3E5A-354E-41DA-971C-03F7915FA947"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.2\\(100.0\\):*:*:*:*:*:*:*","matchCriteriaId":"97863857-2CC6-4717-A59F-92F3B6604FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.2\\(102.43\\):*:*:*:*:*:*:*","matchCriteriaId":"3CD7A011-854F-41A9-9C24-BF3769B1797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_access_point_software:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B28C49B5-1B3D-4228-AE6A-83EC30D69515"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-aap2","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92511","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036645","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-aap2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-1477","sourceIdentifier":"psirt@cisco.com","published":"2016-08-23T02:10:20.237","lastModified":"2026-06-17T00:42:02.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891."},{"lang":"es","value":"Cisco Connected Streaming Analytics 1.1.1 permite a usuarios remotos autenticados descubrir una contraseña de servicio de notificación leyendo páginas administrativas, también conocido como Bug ID CSCuz92891."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:connected_streaming_analytics:1.1.1_base:*:*:*:*:*:*:*","matchCriteriaId":"16B4505B-BBED-42E3-97C3-03361AE33AB8"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-csa","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92398","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-csa","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6365","sourceIdentifier":"psirt@cisco.com","published":"2016-08-23T02:11:04.960","lastModified":"2026-06-17T00:50:54.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCur25508 and CSCur25518."},{"lang":"es","value":"Vulnerabilidad XSS en Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1 y 5.4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros no especificados, también conocido como Bug IDs CSCur25508 y CSCur25518."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"8AA27341-2B4C-4FBE-B9BC-7005CDBA3FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"456DC3D1-4FEE-4C05-8AFD-E28E6E12F4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"30E233C0-7547-479D-BC2B-A9F75106ADF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6208D84A-C7EE-4F9D-82B2-C3BD657A6B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9FC04411-7DDF-4E11-A22C-1013396AC47B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"27EA38C1-A34F-430A-92F7-1D299F78B449"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-firepowermc","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92510","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-firepowermc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6231","sourceIdentifier":"cve@mitre.org","published":"2016-08-25T18:59:01.457","lastModified":"2026-06-17T00:50:39.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate."},{"lang":"es","value":"Kaspersky Safe Browser iOS en versiones anteriores a 1.7.0 no verifica certificados X.509 de servidores SSL lo que permite a atacantes man-in-the-middle obtener información sensible a través de un certificado manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:safe_browser:*:*:*:*:*:iphone_os:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"D7952D56-BBEF-4503-94CC-AD40EC37395E"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2016/Aug/30","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/539071/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92200","source":"cve@mitre.org"},{"url":"https://support.kaspersky.com/vulnerability.aspx?el=12430#280716","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/539071/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.kaspersky.com/vulnerability.aspx?el=12430#280716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-4655","sourceIdentifier":"product-security@apple.com","published":"2016-08-25T21:59:00.133","lastModified":"2026-06-17T00:47:58.357","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app."},{"lang":"es","value":"El kernel en Apple iOS en versiones anteriores a 9.3.5 permite a atacantes obtener información sensible de la memoria a través de una aplicación manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-29T17:46:51.449914Z","id":"CVE-2016-4655","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-05-24","cisaActionDue":"2022-06-14","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Apple iOS Information Disclosure Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.5","matchCriteriaId":"3389C472-39DB-4457-824C-73C622D7BF46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:10.0:*:*:*:*:*:*:*","matchCriteriaId":"20329890-6D3B-49F1-8778-1970928B1538"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Aug/msg00000.html","source":"product-security@apple.com","tags":["Broken Link","Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00005.html","source":"product-security@apple.com","tags":["Broken Link","Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92651","source":"product-security@apple.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92965","source":"product-security@apple.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036694","source":"product-security@apple.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://blog.lookout.com/blog/2016/08/25/trident-pegasus/","source":"product-security@apple.com","tags":["Broken Link"]},{"url":"https://support.apple.com/HT207107","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207145","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/44836/","source":"product-security@apple.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://blog.lookout.com/blog/2016/08/25/trident-pegasus/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://support.apple.com/HT207107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/44836/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4655","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2016-1497","sourceIdentifier":"cve@mitre.org","published":"2016-08-26T14:59:00.133","lastModified":"2026-06-17T00:42:04.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors."},{"lang":"es","value":"La utilidad Configuration en sistemas F5 BIG-IP 11.0.x, 11.1.x, 11.2.x en versiones anteriores a11.2.1 HF16, 11.3.x, 11.4.x en versiones anteriores a 11.4.1 HF10, 11.5.x en versiones anteriores a 11.5.4 HF2, 1.6.x en versiones anteriores a 11.6.1 y 12.0.0 en versiones anteriores a HF1 permite a administradores remotos leer registros de acceso Access Policy Manager (APM) a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E5E8E654-DA20-45F9-A25E-44D1E31F64C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C8FCFDA-703B-42DC-91FF-00066E88E49D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA49611-A8E4-454E-98AD-B64C0202838F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FF7FCC81-2F1D-4EF5-956B-085FB7FEFAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"200A9CE9-E56D-4EFA-AC8A-954F945DDDBB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4C2FFC93-7053-441C-AD96-ED57F97E9A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"792625FF-276B-4972-8915-4571C9E26BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE20D0B7-E96B-448E-B80D-0D596248B410"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2DD53088-3BD4-4AF9-8934-4905231A75E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C4CB61D3-DF59-4EE0-A0F0-5899850496B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FF646EF0-56C8-492E-A78D-B00ECAA8D851"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0D42B922-A5F7-41FC-A361-BA0E065B5B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"13E6D2CA-CC4F-4317-A842-4DF0693B0CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AB017D7A-3290-4EF5-9647-B488771A5F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4F316C54-FAE4-48D8-9E40-ED358C30BF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AC0F5FD3-45E7-4D55-A3AC-6572FC0682D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"56BAC4C7-AB42-4BBD-98B5-0AE8B032CCC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5CDEC701-DAB3-4D92-AA67-B886E6693E46"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DD575B3E-FBA9-443A-9B52-49766DBE40C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8F3BF3A-DC42-45F4-99C0-DF71DB1A9E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"002333F5-2864-434F-AC94-9C644098F95C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FB630A86-FB84-4199-9E4D-38EB620806CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"ABF47456-CCA0-4817-9AEF-631DC152174E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FB5F9107-549C-40EF-B355-C7E93A979CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B1A1C200-30B2-4B38-BC74-D11E54530A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1C0312FC-8178-46DE-B4EE-00F2895073BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BC6C5628-14FF-4D75-B62E-D4B2707C1E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C9E574F6-34B6-45A6-911D-E5347DA22F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCF94129-8779-4D68-8DD4-B828CA633746"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"BA2E88AA-0523-48D0-8664-6AFDBCB6C940"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CFA77C6B-72DB-4D57-87CF-11F2C7EDB828"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"094BD2B6-E269-4647-A77C-B584805B6203"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"45C31572-6C40-4621-AB57-6768DE0D59A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4617DC7B-07BA-4805-9789-CFDBA8535214"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A635FEC4-4F52-4971-A67D-47E68108E4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC69B41E-C22D-48D2-8609-60C018F1F48D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"270EEBF6-46FA-48FC-BEC9-9C0838A86BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"93310708-E1FE-445A-BB1F-7D1F553AEC65"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1AD2C1D2-103E-4B0F-84AA-999F01E695F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"855E91A4-0A0C-4E5C-8019-FB513A793803"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FCCC2092-E109-4FF6-9B85-6C9434269851"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"8923BB93-96C1-417B-9172-4A81E731EBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"274E34BF-82A5-4D9E-BC72-202193A47A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"475F0EF8-42CB-4099-9C4A-390F946C4924"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"62B0A70A-D101-443E-A543-5EC35E23D66F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"524B2D05-508C-47FF-94A0-6CC42060E638"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9AA7DCB7-D01E-492A-A810-01B15F03A783"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E7F8D9A5-0C91-4458-8554-13947FD8B116"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B171AA24-6500-43D8-9167-BA9BA57682E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"84452450-77FA-4708-9C86-5464D541C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A49B1D82-3EC2-4E20-8FF5-58248905E964"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7E4CC3E0-F9B8-433F-A2B0-2306144F9B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B8993275-E17E-4A69-8D95-A8229E0E88D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0594DBC5-8470-416C-A5EA-E04F5AB2C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B50BF19F-71B4-47C0-A96E-6EB90FCC6AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BD3A3BA6-6F60-45CA-8F52-687B671B077A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"202B6870-718C-4F8D-9BAB-7ED6385BF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EC6A3691-ADC4-44BC-8A11-D855B13EF128"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D7863D-B064-4D7A-A66B-C3D3523425FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C72FF118-E7A5-42DE-A9A0-703E71615045"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"45A53EC8-8E16-42DC-9FD8-58493C5D1EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DDB299B4-5893-4D91-8E5B-09BDFDB86FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9EA336A-8055-4DA8-8F79-07C4ADE83E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"624EFAEB-15C2-422F-BAD1-D0BC37878349"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"76C1525D-46DE-4362-BBAD-095BBF718990"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"259C05BB-6349-4005-9372-21623DC5002D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E5D27D4A-BD5C-4FA9-AA72-F7956298DE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"12F86EB5-D581-4103-A802-44D968BA8D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"36F383ED-8CB5-400D-BFDB-BD5B8CD8C7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6203A11-82C3-4ABA-94E9-085BFF1A0E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"06224D59-35F8-4168-80C5-CF5B17E99050"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2FF5A5F6-4BA3-4276-8679-B5560EACF2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"974C5213-99F7-4E8A-AC6A-8759697F19C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E288D50B-7EFA-4FC8-938B-EE3765FFA24D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0E3D8A24-0B8D-432B-8F06-D0E1642E7C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A4489382-0668-4CFB-BA89-D54762937CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9850D0AA-B173-47B2-9B69-75E6D1FAF490"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"281D0B5B-27DF-4E8A-AFC9-D09468F8ECDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"40994EB4-4D31-4697-964D-1F0B09864DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B40837-EC2B-41FB-ACC3-806054EAF28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA2FA6B-3930-432F-8FB5-E73604CEFE42"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3251DB7F-0436-48D5-AF7B-F812237DB926"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8600FF27-4407-4755-A1E3-5648D9ACCB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D3A84AF1-A18E-4AFD-B85E-49CE46A548D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BA54B88F-4A16-4F40-8A3B-B107F0CA2334"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"17C28542-51A4-4464-ADF9-C6376F829F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"584853F9-644F-40B2-A28F-1CE9B51F84F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DFE665CF-A633-474E-9519-D20E3D3958CF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8FA5C323-7247-42B5-AF3E-F7E8A18932CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF199950-9564-4CF2-BC74-F9E1C28AC377"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A613D29A-9C7F-49A5-98E4-8477A1FF7C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"867B2CA9-DAE5-4070-B8E6-F624C59F5054"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"52CD200C-1D14-471F-93C1-027CC676C26C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1850CE-D20D-4677-8CF2-1DB3A4EB33F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0A70B1E2-0B3D-4DE9-8ED9-777F73D0B750"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A7D226F1-6513-4233-BE20-58D7AB24978F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B33B2082-E040-4799-A260-BA687ED8614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A85766A4-2181-4719-ADCF-4FEA0031DB80"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2E93EE3-DB73-468E-87CA-4D277F283648"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"ADB01A61-1924-417F-8A75-9FDF8F14F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B70D2BD5-8E3F-4B57-84EF-3AF40F6378F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D0EDB8E9-E6FB-406E-B1D3-C620F114804C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9FDC1C0F-A00A-456C-AB51-CD139B15CB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7507BDFF-5B52-4A06-9F8C-2B6F3958162A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6E0141FA-44E9-460E-B175-29A7FA251301"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8DD27EF7-3329-4009-959F-D2E4D5935E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3755740D-F1DC-4910-ADDD-9D491515201C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EA244A7D-F65D-4114-81C8-CE811959EA10"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5EA9F72C-8344-4370-B511-31BEC8BA63E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"96CF015E-C74B-4215-9103-8087BC1D12AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"CFE4DB00-433D-414A-A1CE-E507B9BB809B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B276E4DF-69FC-4158-B93A-781A45605034"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"532AAF54-64EF-4852-B4F1-D5E660463704"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C14D0DD3-E6A9-43C8-85D7-6DBB16E30DD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2B59396A-EAFF-41D4-874F-4CA91D901807"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4C9C14C5-B23C-4CE3-8FF0-52741CBB602E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7FBA20ED-08F5-4C35-991A-0DBC6BEAECC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D94751C-A340-4DE7-821A-5143FA0011E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA52816-C4B7-4B1E-A950-EE9B571CB06B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F2AA5127-5314-4026-905D-937B7B62473F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:*","matchCriteriaId":"09E42DAA-700D-487C-9238-F7F3D75A8C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1B6EA0C0-9C26-4A87-98F1-5B317D606ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4D379372-A226-4230-B1F3-04C696518BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"22FAC35D-2803-49B0-9382-F14594B88FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3C72257B-FF99-4707-A0E3-316D538B1CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"18CFA52E-F9D7-40C3-9DB5-CDD5767E1F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CB8D3B87-B8F5-490A-B1D9-04F2EE93EEA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"23FF9627-E561-4CF7-A685-6E33D2F6C98C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"53531CA7-5E47-4C46-BDA5-3B4710085078"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A085285-329B-4EF0-ABFB-238655E9E82D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1591F627-3C86-4904-9236-6936D533ED75"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3136A8D1-3D0D-46B3-9A3A-737074864F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"96673865-3D37-4562-831E-3ACE9DFB471E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92671","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036631","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/31/sol31925518.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/31/sol31925518.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5663","sourceIdentifier":"cret@cert.org","published":"2016-08-26T19:59:13.273","lastModified":"2026-06-17T00:49:50.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (1) code, (2) error, or (3) error_description parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en oauth_callback.php en accesorios Accellion Kiteworks en versiones anteriores a kw2016.03.00 permiten a atacantes remotos inyectar secuencias de comandos web y HTML arbitrarios a través de (1) el código, (2) el error o (3) el parámetro error_description."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accellion:kiteworks_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"kw2016.03.00","matchCriteriaId":"638858AC-D8A8-4596-A52C-96D8D5B549F0"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/305607","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/92662","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/305607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/92662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5664","sourceIdentifier":"cret@cert.org","published":"2016-08-26T19:59:14.257","lastModified":"2026-06-17T00:49:50.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en accesorios Accellion Kiteworks en versiones anteriores a kw2016.03.00 permite a atacantes remotos leer archivos a través de una URI manipulada."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accellion:kiteworks_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"kw2016.03.00","matchCriteriaId":"638858AC-D8A8-4596-A52C-96D8D5B549F0"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/305607","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/92662","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/305607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/92662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5399","sourceIdentifier":"cve@mitre.org","published":"2016-08-26T20:59:00.133","lastModified":"2026-06-17T00:29:04.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via a comment."},{"lang":"es","value":"Vulnerabilidad de XSS en PHPVibe en versiones anteriores a 4.21 permite a usuarios remotos autenticados inyectar secuencias de comandos web y HTML arbitrarios a través de un comentario."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpvibe:phpvibe:*:*:*:*:*:*:*:*","versionEndIncluding":"4.20","matchCriteriaId":"753C6F51-F445-41F6-B5BF-8CACCEF46C01"}]}]}],"references":[{"url":"https://packetstormsecurity.com/files/132715/phpVibe-Stored-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/37659","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://packetstormsecurity.com/files/132715/phpVibe-Stored-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/37659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-5721","sourceIdentifier":"cve@mitre.org","published":"2016-08-29T17:59:00.140","lastModified":"2026-06-17T00:49:55.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidades de XSS en Zimbra Collaboration en versiones anteriores a 8.7.0 permite a atacantes remotos inyectar secuencia de comandos web o HTML a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zimbra:zimbra_collaboration_server:*:*:*:*:*:*:*:*","versionEndIncluding":"8.6.0","matchCriteriaId":"E147FF08-D707-42C9-916D-6F0C03CA0526"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92682","source":"cve@mitre.org"},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0292","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-30T17:59:00.143","lastModified":"2026-06-17T00:37:16.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report."},{"lang":"es","value":"WebReports en IBM BigFix Platform (anteriormente Tivoli Endpoint Manager) 9.x en versiones anteriores a 9.5.2 permite a usuarios locales descubrir la contraseña del sistema de texto plano mediante la lectura del informe."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix:9.0:*:*:*:*:*:*:*","matchCriteriaId":"D06B7D3E-1DA7-47B2-940D-F6D197F1FD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix:9.1:*:*:*:*:*:*:*","matchCriteriaId":"ACB5C15D-DD13-4248-BB32-BB45FA718969"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix:9.2:*:*:*:*:*:*:*","matchCriteriaId":"A01DFE18-E823-4BB7-92E0-1EB96F31BF3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix:9.5:*:*:*:*:*:*:*","matchCriteriaId":"0BA20334-0155-4613-BEDB-B52DC863381A"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985907","source":"psirt@us.ibm.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0397","sourceIdentifier":"psirt@us.ibm.com","published":"2016-08-30T17:59:01.317","lastModified":"2026-06-17T00:37:27.420","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic."},{"lang":"es","value":"WebReports en IBM BigFix Platform (anteriormente Tivoli Endpoint Manager) 9.x en versiones anteriores a 9.5.2 permite a atacantes remotos obtener información sensible escuchando la red para tráfico HTTP."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_webreports:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B356383-58CE-45C7-A40B-9C9FEB584016"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_webreports:9.1:*:*:*:*:*:*:*","matchCriteriaId":"B41C4DF0-8889-4613-A5E1-1979B6EEF5F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_webreports:9.2:*:*:*:*:*:*:*","matchCriteriaId":"AB9F5030-51CF-42DD-8BA9-0A8DB6CD2873"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_webreports:9.5:*:*:*:*:*:*:*","matchCriteriaId":"BD4C5B7B-24B3-412D-9027-44B5E6F6AFBE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985907","source":"psirt@us.ibm.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92467","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5332","sourceIdentifier":"cve@mitre.org","published":"2016-08-31T01:59:16.357","lastModified":"2026-06-17T00:49:13.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en VMware vRealize Log Insight 2.x y 3.x en versiones anteriores a 3.6.0 permite a atacantes remotos leer archivos arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:2.0:*:*:*:*:*:*:*","matchCriteriaId":"ECA721D3-A31B-4B0C-A9B3-0729E5A486E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3981C264-6EBB-496E-BE5A-1670FABAFAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:2.5:*:*:*:*:*:*:*","matchCriteriaId":"B59B01D4-7ED4-4A20-958D-BC5AB8CD5604"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:3.0:*:*:*:*:*:*:*","matchCriteriaId":"35562FBD-9183-45E8-8E3F-3E24CCFDD759"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vrealize_log_insight:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C9F7C79B-09A9-42F3-AD1A-0BACE2FB5D17"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92448","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036619","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0011.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2016-0011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7118","sourceIdentifier":"cve@mitre.org","published":"2016-08-31T14:59:00.130","lastModified":"2026-06-17T00:52:37.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"fs/fcntl.c in the \"aufs 3.2.x+setfl-debian\" patch in the linux-image package 3.2.0-4 (kernel 3.2.81-1) in Debian wheezy mishandles F_SETFL fcntl calls on directories, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via standard filesystem operations, as demonstrated by scp from an AUFS filesystem."},{"lang":"es","value":"fs/fcntl.c en el parche \"aufs 3.2.x+setfl-debian\" en el paquete linux-image 3.2.0-4 (kernel 3.2.81-1) en Debian silbante no maneja adecuadamente llamadas F_SETFL fcntl en directorios, lo que permite a usuarios locales provocar una denegación de servicio (referencia a puntero NULL y caída de sistema) a través de operaciones de sistema de archivos estándares, como se demuestra por scp desde un sistema de archivos AUFS."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]}],"references":[{"url":"http://seclists.org/oss-sec/2016/q3/395","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/08/31/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92697","source":"cve@mitre.org"},{"url":"http://seclists.org/oss-sec/2016/q3/395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/08/31/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7119","sourceIdentifier":"cve@mitre.org","published":"2016-08-31T14:59:01.190","lastModified":"2026-06-17T00:52:37.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element."},{"lang":"es","value":"Vulnerabilidad de XSS en la sección de biografía del perfil del usuario en DotNetNuke (DNN) en versiones anteriores a 8.0.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un atributo onclick manipulado en un elemento IMG."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*","versionEndIncluding":"08.00.04","matchCriteriaId":"FCF7E797-9516-4D93-9DD8-83AF417C7193"}]}]}],"references":[{"url":"http://www.dnnsoftware.com/community/security/security-center","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92719","source":"cve@mitre.org"},{"url":"http://www.dnnsoftware.com/community/security/security-center","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0293","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-01T01:59:01.177","lastModified":"2026-06-17T00:37:16.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM BigFix Platform (anteriormente Tivoli Endpoint Manager) 9.x en versiones anteriores a 9.1.8 y 9.2.x en versiones anteriores a 9.2.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un archivo .beswrpt modificado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"33D2F8B3-CCDD-4C4D-8790-4468A15D32AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3E47D31B-7665-416E-9220-7DC02B4BC298"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BF7890CF-0008-48BA-8A04-FCFFC0C1B01B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4442C0AA-DE96-4040-B907-2B10167B18AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AB5419C4-A2C6-417E-8EE4-A797579A2B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FF8C1B44-1283-441B-9AAB-B95C7DC80255"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.6:*:*:*:*:*:*:*","matchCriteriaId":"35FE1605-0746-4A94-A643-5187CBEAE596"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5F6565DE-ACFA-41E7-8761-1C1BC8A301BF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DBF00DCA-80E9-4F8E-A0D6-9806206ECF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D9726F3-7DCE-4811-ADA3-CC517BD56123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.0.7:*:*:*:*:*:*:*","matchCriteriaId":"8172EA9A-41B1-4FC3-9BF8-A6A2744AA8BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.0.8:*:*:*:*:*:*:*","matchCriteriaId":"24A0AD9E-5753-48A5-B049-791564328E6D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"44A36BD8-D35C-4FDE-9CFC-455728F61F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6EC36F04-C3B1-4DBD-B28B-4C4BBBB139E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B82EAE1E-3994-45CA-9988-7561A67652E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.6:*:*:*:*:*:*:*","matchCriteriaId":"200C85DF-E535-4A36-A601-9A6CF79141C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:bigfix_platform:9.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D37ED6B1-BB21-4DC5-8DDD-909FEE674001"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985743","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92593","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21985743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3064","sourceIdentifier":"cve@mitre.org","published":"2016-09-01T01:59:05.727","lastModified":"2026-06-17T00:44:54.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors."},{"lang":"es","value":"NetApp Clustered Data ONTAP en versiones anteriores a 8.2.4P4 y 8.3.x en versiones anteriores a 8.3.2P2 permite a usuarios remotos autenticados obtener información de cluster y usuario sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*","versionEndIncluding":"8.2.4","matchCriteriaId":"7BAEC311-32DE-4B1E-B3A5-EC40BC8C25E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:8.3:*:*:*:*:*:*:*","matchCriteriaId":"70A0EA35-0A5A-4610-958E-4CE41DDA0DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FD92543B-9A32-4285-85D1-1925C3F4DEB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"104D9174-045F-457A-8C35-84B62ABD11DD"}]}]}],"references":[{"url":"http://kb.netapp.com/support/index?page=content&id=9010099","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92686","source":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20160830-0002/","source":"cve@mitre.org"},{"url":"http://kb.netapp.com/support/index?page=content&id=9010099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160830-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2954","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-01T10:59:01.343","lastModified":"2026-06-17T00:44:43.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2956 and CVE-2016-3008."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-2956 y CVE-2016-3008."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988990","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92543","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2956","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-01T10:59:02.607","lastModified":"2026-06-17T00:44:43.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-3008."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-2954 y CVE-2016-3008."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988990","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92542","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2995","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-01T10:59:03.920","lastModified":"2026-06-17T00:44:47.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2997, CVE-2016-3005, and CVE-2016-3010."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 4.0 hasta la versión CR4, 4.5 hasta la versión CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-2997, CVE-2016-3005 y CVE-2016-3010."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1786E8E0-3A05-4845-8184-BC980C8FDF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"548B3376-1304-4289-A9A8-1B967C0425FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929","source":"psirt@us.ibm.com","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988991","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92576","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2997","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-01T10:59:05.123","lastModified":"2026-06-17T00:44:47.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-3005, and CVE-2016-3010."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 4.0 hasta la versión CR4, 4.5 hasta la versión CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-2995, CVE-2016-3005 y CVE-2016-3010."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1786E8E0-3A05-4845-8184-BC980C8FDF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"548B3376-1304-4289-A9A8-1B967C0425FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929","source":"psirt@us.ibm.com","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988991","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92580","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3005","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-01T10:59:07.123","lastModified":"2026-06-17T00:44:48.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3010."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 4.0 hasta la versión CR4, 4.5 hasta la versión CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-2995, CVE-2016-2997 y CVE-2016-3010."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1786E8E0-3A05-4845-8184-BC980C8FDF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"548B3376-1304-4289-A9A8-1B967C0425FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929","source":"psirt@us.ibm.com","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988991","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92581","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3008","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-01T10:59:08.217","lastModified":"2026-06-17T00:44:48.710","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-2954 y CVE-2016-2956."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988990","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92541","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3010","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-01T10:59:09.343","lastModified":"2026-06-17T00:44:48.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3005."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 4.0 hasta la versión CR4, 4.5 hasta la versión CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-2995, CVE-2016-2997 y CVE-2016-3005."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1786E8E0-3A05-4845-8184-BC980C8FDF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"548B3376-1304-4289-A9A8-1B967C0425FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929","source":"psirt@us.ibm.com","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988991","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92583","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5047","sourceIdentifier":"cve@mitre.org","published":"2016-09-01T10:59:10.407","lastModified":"2026-06-17T00:48:40.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a denial of service via unspecified vectors."},{"lang":"es","value":"NetApp OnCommand System Manager 8.3.x en versiones anteriores a 8.3.2P5 permite a usuarios remotos autenticados provocar una denegación de servicio a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_system_manager:8.3:*:*:*:*:*:*:*","matchCriteriaId":"E3226271-92EB-416E-A36A-C6526AE7CCBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_system_manager:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"85294494-B452-4ABC-9334-34092375F044"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_system_manager:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"9FDBEA8C-CF86-48D0-8C69-26FB1E89DED2"}]}]}],"references":[{"url":"http://kb.netapp.com/support/index?page=content&id=9010100","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92685","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.netapp.com/advisory/ntap-20160830-0001/","source":"cve@mitre.org"},{"url":"http://kb.netapp.com/support/index?page=content&id=9010100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.netapp.com/advisory/ntap-20160830-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6298","sourceIdentifier":"secalert@redhat.com","published":"2016-09-01T23:59:01.160","lastModified":"2026-06-17T00:50:46.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA)."},{"lang":"es","value":"La clase _Rsa15 en la implementación de algoritmo RSA 1.5 en jwa.py en jwcrypto en versiones anteriores a 0.3.2 carece del mecanismo de protección Random Filling, lo que facilita a atacantes remotos obtener datos en texto plano a través de un Million Message Attack (MMA)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:latchset:jwcrypto:*:*:*:*:*:*:*:*","versionEndExcluding":"0.3.2","matchCriteriaId":"3D621897-7527-4674-BC69-A6C1C2D76D49"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92729","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/latchset/jwcrypto/commit/eb5be5bd94c8cae1d7f3ba9801377084d8e5a7ba","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://github.com/latchset/jwcrypto/issues/65","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/latchset/jwcrypto/pull/66","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/latchset/jwcrypto/releases/tag/v0.3.2","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/latchset/jwcrypto/commit/eb5be5bd94c8cae1d7f3ba9801377084d8e5a7ba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://github.com/latchset/jwcrypto/issues/65","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/latchset/jwcrypto/pull/66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/latchset/jwcrypto/releases/tag/v0.3.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1471","sourceIdentifier":"psirt@cisco.com","published":"2016-09-02T00:59:01.310","lastModified":"2026-06-17T00:42:02.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de administración basada en web en dispositivos Cisco Small Business 220 con firmware en versiones anteriores a 1.0.1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocido como Bug ID CSCuz76232."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:small_business_220_series_smart_plus_switches:1.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"E3F433C9-9092-4620-BCF7-18EB38A8E76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:small_business_220_series_smart_plus_switches:1.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"78A643B7-E2C8-47AE-BBE0-781487D73FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:small_business_220_series_smart_plus_switches:1.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"0F29DEE9-78E3-4906-8CB1-3A08EC64D24C"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92713","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036723","source":"psirt@cisco.com"},{"url":"http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_xss.pdf","source":"psirt@cisco.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_xss.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6376","sourceIdentifier":"psirt@cisco.com","published":"2016-09-02T00:59:04.420","lastModified":"2026-06-17T00:50:55.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device restart) via a malformed wIPS packet, aka Bug ID CSCuz40263."},{"lang":"es","value":"La funcionalidad Adaptive Wireless Intrusion Prevention System (wIPS) en dispositivos Cisco Wireless LAN Controller (WLC) en versiones anteriores a 8.0.140.0, 8.1.x y 8.2.x en versiones anteriores a 8.2.121.0 y 8.3.x en versiones anteriores a 8.3.102.0 permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) a través de un paquete wIPS mal formado, también conocido como Bug ID CSCuz40263."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.0_base:*:*:*:*:*:*:*","matchCriteriaId":"6F0A0F12-B56E-40E2-9B0F-3E0B8D881D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.1.59.24:*:*:*:*:*:*:*","matchCriteriaId":"3534E61A-C158-433A-90FE-59E4A42EF32C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.1.105.0:*:*:*:*:*:*:*","matchCriteriaId":"EBB4E162-13BA-4516-8AFD-55FADCEF0782"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.1.111.0:*:*:*:*:*:*:*","matchCriteriaId":"A753D16D-353A-4F5E-8ECF-601C95348ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.2.78.0:*:*:*:*:*:*:*","matchCriteriaId":"110F5DFF-A9E0-413B-955D-30665BEAB927"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.2.116.21:*:*:*:*:*:*:*","matchCriteriaId":"7D1EA287-F44B-4BDE-A158-E1309667ED17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.2.150.6:*:*:*:*:*:*:*","matchCriteriaId":"881D0464-B1CC-45C4-8190-A6F673BE163D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.2.150.10:*:*:*:*:*:*:*","matchCriteriaId":"DB5C7A08-B6F1-42C5-A9AA-85AD72435565"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.2.171.5:*:*:*:*:*:*:*","matchCriteriaId":"BFCC4233-D996-47EC-95E3-44FC57A9D1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.2.171.6:*:*:*:*:*:*:*","matchCriteriaId":"123A2479-7B8D-49F2-96B2-02D4FACC7C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.2.185.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB1A868-6A21-4960-9333-526DDA1DC9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.2.193.5:*:*:*:*:*:*:*","matchCriteriaId":"DC702CB9-636D-4E8F-AFE1-3C5F4117804A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.2.195.10:*:*:*:*:*:*:*","matchCriteriaId":"C02A7416-71BF-4D9B-9864-2C2A6DC2E7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:3.6.0e:*:*:*:*:*:*:*","matchCriteriaId":"2BF5116E-5836-4A18-A88D-9319CF77D27D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.0.108:*:*:*:*:*:*:*","matchCriteriaId":"BD3152F9-98E9-4832-B9E5-9D4ADBC90C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.0.155.0:*:*:*:*:*:*:*","matchCriteriaId":"1545A5BB-2591-4908-87E5-90F5598F02E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.0.155.5:*:*:*:*:*:*:*","matchCriteriaId":"68ED4705-3249-476C-8DA8-B64D1BC76045"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.0.179.8:*:*:*:*:*:*:*","matchCriteriaId":"34773C93-534F-4D9F-A4B3-DDC4DBDFFF03"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.0.179.11:*:*:*:*:*:*:*","matchCriteriaId":"DF9B72F9-CFE2-404B-BACB-3A044D18E4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.0.196:*:*:*:*:*:*:*","matchCriteriaId":"BBF42FC4-A4C0-455B-AFA4-B3A643B0FB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.0.206.0:*:*:*:*:*:*:*","matchCriteriaId":"F5D69C71-CB3D-4BE6-AFF5-B54979A56023"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.0.217.0:*:*:*:*:*:*:*","matchCriteriaId":"A8AE1B28-FAC3-4BD8-BE46-B898C0D09F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.0.219.0:*:*:*:*:*:*:*","matchCriteriaId":"7FEBFADB-421B-4C9C-96CC-C0504A64D837"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.1.171.0:*:*:*:*:*:*:*","matchCriteriaId":"8A087365-E3F3-472C-B2B0-0834C3DE91E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.1.181.0:*:*:*:*:*:*:*","matchCriteriaId":"098D285E-819C-4AAB-B608-5A59BDC3F04A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.1.185.0:*:*:*:*:*:*:*","matchCriteriaId":"56414527-AC9C-4D54-9340-10753574418D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.1_base:*:*:*:*:*:*:*","matchCriteriaId":"8CF0A001-1250-4242-AB0E-67BF4BED503B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2.61.0:*:*:*:*:*:*:*","matchCriteriaId":"30328F81-F682-4193-AC10-32B85CCB5EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2.99.0:*:*:*:*:*:*:*","matchCriteriaId":"CC05DA06-1D47-4165-95B0-FF5ECB5BC683"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2.112.0:*:*:*:*:*:*:*","matchCriteriaId":"B65DE2D5-E5AF-4661-B433-A844296F2016"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2.117.0:*:*:*:*:*:*:*","matchCriteriaId":"07F0E902-9A98-4D24-99DB-2C448AC1FEED"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2.130.0:*:*:*:*:*:*:*","matchCriteriaId":"FDEA437E-1787-4D2A-B59A-442F84AA2F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2.173.0:*:*:*:*:*:*:*","matchCriteriaId":"46495838-CD45-479A-A8A6-33C50955E1AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2.174.0:*:*:*:*:*:*:*","matchCriteriaId":"FC216EBE-9059-43FD-8C5E-D1DE702D2132"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2.176.0:*:*:*:*:*:*:*","matchCriteriaId":"14ED3DE7-25B0-43E1-97EE-95F60F51ABFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2.182.0:*:*:*:*:*:*:*","matchCriteriaId":"5528AEAB-88D8-4C19-91E5-4E5E51438307"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:4.2_base:*:*:*:*:*:*:*","matchCriteriaId":"E6B7F42E-80D7-4324-A617-EEEA1C94D874"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:5.0.148.0:*:*:*:*:*:*:*","matchCriteriaId":"5047BC1D-F6C1-4C53-839C-F4E6C463FC66"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:5.0.148.2:*:*:*:*:*:*:*","matchCriteriaId":"6704FB3A-CD36-4720-A342-481376F5E837"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:5.1.151.0:*:*:*:*:*:*:*","matchCriteriaId":"87154527-1843-4F47-BBCE-C03C057D13B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:5.1.152.0:*:*:*:*:*:*:*","matchCriteriaId":"25D30DB3-D173-4AF7-B668-0B8502CA9C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:5.1.160.0:*:*:*:*:*:*:*","matchCriteriaId":"94E2EFBD-7C05-4CB4-9FAD-6ABC54614D2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:5.2.157.0:*:*:*:*:*:*:*","matchCriteriaId":"906F9233-7DEF-4742-9AF3-50B6C231A9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:5.2.169.0:*:*:*:*:*:*:*","matchCriteriaId":"9BE9F19D-1701-40BC-A374-111B5F38BE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:6.0_base:*:*:*:*:*:*:*","matchCriteriaId":"6BD7A5C2-6354-449D-B715-2E9FFDD2E6FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.0_base:*:*:*:*:*:*:*","matchCriteriaId":"3A1B0325-D287-4286-B7E9-DB148881D9E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.1_base:*:*:*:*:*:*:*","matchCriteriaId":"D547FB25-6486-4A77-99E6-C8F8EA9D5407"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.2_base:*:*:*:*:*:*:*","matchCriteriaId":"8FE090AB-88B8-4A42-9CED-FF54B2C812E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.3.101.0:*:*:*:*:*:*:*","matchCriteriaId":"1538A4DA-6D77-4289-B47C-9BE2C7BDC036"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.3.103.8:*:*:*:*:*:*:*","matchCriteriaId":"04FDC2A1-F522-440B-9C5E-18729C0C34E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.3.112:*:*:*:*:*:*:*","matchCriteriaId":"DE292FF9-9674-4251-9EF3-AD4A4F9CCC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.3_base:*:*:*:*:*:*:*","matchCriteriaId":"B0782064-881F-4ADB-880A-E005AFFE5ADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8C1E6716-BBDC-43FB-8016-10281E360049"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.4.100:*:*:*:*:*:*:*","matchCriteriaId":"E98435C2-EAD9-45BE-AE9A-CD1499F4239F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.4.100.60:*:*:*:*:*:*:*","matchCriteriaId":"75473B22-A59F-471A-9DB8-8FA9FD504DC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.4.110.0:*:*:*:*:*:*:*","matchCriteriaId":"12FD9D8F-2E52-4CA9-94BD-65F8B1FF26C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.4.121.0:*:*:*:*:*:*:*","matchCriteriaId":"05AEADF2-9986-432A-8416-1D138C8C94D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.4_base:*:*:*:*:*:*:*","matchCriteriaId":"246EDF05-FF4B-47FB-9A72-6417F239F0EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.5.102.0:*:*:*:*:*:*:*","matchCriteriaId":"E2FE2157-DE6C-4002-A209-091457BFA7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.5.102.11:*:*:*:*:*:*:*","matchCriteriaId":"B3CB2EE4-565E-4EC0-978C-80738C5F8307"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.5_base:*:*:*:*:*:*:*","matchCriteriaId":"ED69F11C-153E-442B-8F7C-57961A25AAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.6.1.62:*:*:*:*:*:*:*","matchCriteriaId":"C3D30E7A-4B2C-4A1E-B52C-C209757829F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.6.100.0:*:*:*:*:*:*:*","matchCriteriaId":"FB33D00D-7DCB-4150-9907-1365066F3767"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.6.110.0:*:*:*:*:*:*:*","matchCriteriaId":"9051AFDE-A519-4701-9AD5-CBA7AEE46B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.6.120.0:*:*:*:*:*:*:*","matchCriteriaId":"354D3747-A6AB-41AA-8DD4-C17C0461EF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:7.6.130.0:*:*:*:*:*:*:*","matchCriteriaId":"1FE75C02-0E3E-4BA3-8E86-2FEA9EEB7E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E6EA1478-B988-4DD7-A937-FB91FB0DEDB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.0.0.30220.385:*:*:*:*:*:*:*","matchCriteriaId":"B467125C-5491-4066-A35A-891B78AD0A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.0.72.140:*:*:*:*:*:*:*","matchCriteriaId":"13FACACE-CF96-474D-BA3E-F289BD96CF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.0.100:*:*:*:*:*:*:*","matchCriteriaId":"0E439FF8-91DE-43E9-BE65-59BCEC52F3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"1B798E5A-E108-4465-BD2B-A2F4ADFDB363"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.0.120.0:*:*:*:*:*:*:*","matchCriteriaId":"97971195-3E04-4AC1-95BC-479CE2CAB389"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.0.121.0:*:*:*:*:*:*:*","matchCriteriaId":"031A8A69-4E46-4EE5-B0A8-0A74E7C66A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00858F6-C0AD-4822-9990-E0126AB43EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.1.104.37:*:*:*:*:*:*:*","matchCriteriaId":"B6528ED0-853F-4475-AAD7-7F9B5E0DFE3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.1.111.0:*:*:*:*:*:*:*","matchCriteriaId":"6B83E372-CFD8-4DDD-80F7-E3128D0C5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.1.122.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D5A815-BA48-43A5-8CD4-2E580B2CB0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller:8.1.130.0:*:*:*:*:*:*:*","matchCriteriaId":"BA6129F0-5195-41AC-AFF3-50518B1ADB9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_6.0:182.0:*:*:*:*:*:*:*","matchCriteriaId":"55746AD1-5C44-4144-BBE3-53F4D654E57A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_6.0:188.0:*:*:*:*:*:*:*","matchCriteriaId":"A74E0159-DA37-4AC2-8AA3-D6FA83F0DFF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_6.0:196.0:*:*:*:*:*:*:*","matchCriteriaId":"B297FCF3-6FC4-4C0E-89A9-A760FF9A58CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_6.0:199.4:*:*:*:*:*:*:*","matchCriteriaId":"F40022CC-A0AB-47EA-B089-9A3E66E49727"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_6.0:202.0:*:*:*:*:*:*:*","matchCriteriaId":"ED3D92BC-3052-4B3E-8152-ACFC8B507D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.0:98.0:*:*:*:*:*:*:*","matchCriteriaId":"5AEC6779-072A-43F2-AD75-9056D783B99D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.0:98.218:*:*:*:*:*:*:*","matchCriteriaId":"88D96498-EF62-4B8E-AB8A-E326A306D473"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.0:116.0:*:*:*:*:*:*:*","matchCriteriaId":"9BA2A940-A36F-4903-9A9D-DB0269D01C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.0:220.0:*:*:*:*:*:*:*","matchCriteriaId":"171F7669-64D7-4E1E-9766-86B5A1085B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.0:240.0:*:*:*:*:*:*:*","matchCriteriaId":"FCCD4C58-E8A6-470C-8324-CAD6F149C87F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.0:250.0:*:*:*:*:*:*:*","matchCriteriaId":"97458DAB-1E88-4552-92D0-2C14B074E8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.0:252.0:*:*:*:*:*:*:*","matchCriteriaId":"2FB2040D-5969-48D8-89FE-53C30B1483A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.1:91.0:*:*:*:*:*:*:*","matchCriteriaId":"6075E464-5D78-492A-B85F-1C053E9B8CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.2:103.0:*:*:*:*:*:*:*","matchCriteriaId":"38F12EF1-A79E-446F-8A31-E188FF1C6B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.4:1.19:*:*:*:*:*:*:*","matchCriteriaId":"225D1199-74C7-4AAB-A434-F03DE0D57539"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.4:1.54:*:*:*:*:*:*:*","matchCriteriaId":"25A6025A-6BE3-4BCF-A884-2EE630752459"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_7.4:140.0:*:*:*:*:*:*:*","matchCriteriaId":"B13ACDA7-F6C8-42E9-8748-14730F4D06D2"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-2","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92716","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036720","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4848","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-09-02T01:59:00.133","lastModified":"2026-06-17T00:48:19.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en ClipBucket en versiones anteriores a 2.8.1 RC2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clip-bucket:clipbucket:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.1","matchCriteriaId":"390B6C4D-3129-4684-9C0B-02D601FA8875"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN28386124/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000140","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92537","source":"vultures@jpcert.or.jp"},{"url":"https://github.com/arslancb/clipbucket/commit/ff5e37d3e1098a7ce2b9fe60389b14514932dd93","source":"vultures@jpcert.or.jp","tags":["Issue Tracking","Patch"]},{"url":"http://jvn.jp/en/jp/JVN28386124/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/arslancb/clipbucket/commit/ff5e37d3e1098a7ce2b9fe60389b14514932dd93","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-4851","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-09-02T01:59:01.320","lastModified":"2026-06-17T00:48:19.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el chat simple Let´s PHP! en versiones anteriores a 2016-08-15 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:let\\'s_php\\!:simple_chat:-:*:*:*:*:*:*:*","matchCriteriaId":"54BC416E-9ACB-4083-858F-25DF64D77733"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN42262137/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000152","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92597","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN42262137/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0772","sourceIdentifier":"secalert@redhat.com","published":"2016-09-02T14:59:00.127","lastModified":"2026-06-17T00:38:11.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\""},{"lang":"es","value":"La librería smtplib en CPython (también conocido como Python) en versiones anteriores a 2.7.12, 3.x en versiones anteriores a 3.4.5 y 3.5.x en versiones anteriores a 3.5.2 no devuelve un error cuando StartTLS falla, lo que podría permitir a atacantes man-in-the-middle eludir las protecciones TLS mediante el aprovechamiento de una posición de red entre el cliente y el registro para bloquear el comando StartTLS, también conocido como un \"ataque de decapado StartTLS\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-693"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"AE44C8E0-6B74-46F8-A648-DEAF6576A960"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"FF1E2B75-A884-4E41-92D0-371ED1B224C9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.0:*:*:*:*:*:*:*","matchCriteriaId":"FC0C702F-59E0-40AB-BA95-8F0803AB0550"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3190C547-7230-476C-A43F-641FE7B891EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B370D065-D08F-46B3-8B7B-8477A77F8E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2B547525-E0DB-4D64-8ED1-AF3F1B6FF65F"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19064C18-1CD7-4F10-8065-4B900BB31F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B1997CB6-FD72-4B13-915A-7500AA06F4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"06A1811C-4E97-4226-8335-ADF0827A03B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BF2C50D1-187B-4E98-BA02-008D0ED4C220"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B511BDFA-D1DC-4E50-9A08-66DA05947A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0708E98D-5C84-47DC-89E5-8BB7CFFB12A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6595C4F3-5683-4889-AD30-83840F6A58D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"027FD902-9B08-4EDF-9F83-314FBF0583ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"89FB9D30-8559-4F57-9D20-DC603765B346"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"957FCB4A-32D0-4449-8995-80144CC713B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C17A0E8D-7611-42F7-896E-F2B3BC25643D"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"875ABC97-2783-41DA-AB9F-9E6F0870B74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5262D28D-204C-41E8-BC4D-27372E366295"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"121225D0-C5DA-4F26-93B8-3D56BC1D38B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"52DD66F7-FE7B-4C1C-B07B-F9E4CEEA7AFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6C2C18A1-F202-4E48-8E29-F250AD1A6737"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5EE1602B-6ECB-492B-BFEB-21AF40EE4A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"64662850-7460-46C2-852E-E047874F9660"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D6658A8-E57E-4743-95D5-074F990D0D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F6C65BBA-4DC7-4F2F-90B1-75C6F3C68FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0D0DBAEE-599A-44EB-A1E4-94CEBB406CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4CE28365-977E-47F2-8E2C-635D287149C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"57429DD4-C97C-46BC-9D22-941153183DCF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.11","matchCriteriaId":"C8EE5C8A-6D3B-4CDF-99DA-A2D4FA1EA31C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1626.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1627.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1628.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1629.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1630.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/14/9","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91225","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303647","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-5","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-2","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"https://hg.python.org/cpython/rev/b3ce713fb9be","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://hg.python.org/cpython/rev/d590114c2394","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201701-18","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1627.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1630.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/14/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://hg.python.org/cpython/rev/b3ce713fb9be","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://hg.python.org/cpython/rev/d590114c2394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-18","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4952","sourceIdentifier":"secalert@redhat.com","published":"2016-09-02T14:59:01.330","lastModified":"2026-06-17T00:48:29.093","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command."},{"lang":"es","value":"QEMU (también conocido como Quick Emulator), cuando está construido con soporte de emulación bus VMWARE PVSCSI paravirtual SCSI, permite a administradores locales del SO invitado provocar una denegación de servicio (acceso al array fuera de rango) a través de vectores relacionados con el comando (1) PVSCSI_CMD_SETUP_RINGS o (2) PVSCSI_CMD_SETUP_MSG_RING SCSI."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"3CF78B06-34D3-4BF8-883B-7B9643BBA7CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/23/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/23/4","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334384","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03774.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/23/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/23/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03774.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5105","sourceIdentifier":"secalert@redhat.com","published":"2016-09-02T14:59:02.503","lastModified":"2026-06-17T00:48:46.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command."},{"lang":"es","value":"La función megasas_dcmd_cfg_read en hw/scsi/megasas.c en QEMU, cuando está construido con el soporte de emulación MegaRAID SAS 8708EM2 Host Bus Adapter, utiliza una variable sin inicializar, lo que permite a administradores locales invitados leer memoria de anfitrión a través de vectores que implican un comando MegaRAID Firmware Interface (MFI)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"3CF78B06-34D3-4BF8-883B-7B9643BBA7CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/25/5","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/7","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339583","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04419.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/25/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04419.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5106","sourceIdentifier":"secalert@redhat.com","published":"2016-09-02T14:59:03.597","lastModified":"2026-06-17T00:48:46.360","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command."},{"lang":"es","value":"La función megasas_dcmd_set_properties en hw/scsi/megasas.c en QEMU, cuando está construido con soporte de emulación MegaRAID SAS 8708EM2 Host Bus Adapter, permite a administradores locales invitados provocar una denegación de servicio (acceso a escritura fuera de rango) a través de vectores que implican un comando MegaRAID Firmware Interface (MFI)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"3CF78B06-34D3-4BF8-883B-7B9643BBA7CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/25/6","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/8","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339578","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04340.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/25/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04340.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5107","sourceIdentifier":"secalert@redhat.com","published":"2016-09-02T14:59:04.877","lastModified":"2026-06-17T00:48:46.483","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors."},{"lang":"es","value":"La función megasas_lookup_frame en QEMU, cuando está construido con soporte de emulación MegaRAID SAS 8708EM2 Host Bus Adapter, permite a administradores locales del SO invitado provocar una denegación de servicio (lectura fuera de límites y caída) a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"3CF78B06-34D3-4BF8-883B-7B9643BBA7CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/05/25/7","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/9","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90874","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336461","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04424.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/25/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/26/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1336461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04424.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5699","sourceIdentifier":"secalert@redhat.com","published":"2016-09-02T14:59:07.003","lastModified":"2026-06-17T00:49:53.580","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en la función HTTPConnection.putheader en urllib2 y urllib en CPython (también conocido como Python) en versiones anteriores a 2.7.10 y 3.x en versiones anteriores a 3.4.4 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias a través de secuencias CRLF en una URL."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-113"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.9","matchCriteriaId":"B863CAEA-588A-4708-88E0-2B073EEB70EA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.0:*:*:*:*:*:*:*","matchCriteriaId":"FC0C702F-59E0-40AB-BA95-8F0803AB0550"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3190C547-7230-476C-A43F-641FE7B891EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B370D065-D08F-46B3-8B7B-8477A77F8E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2B547525-E0DB-4D64-8ED1-AF3F1B6FF65F"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19064C18-1CD7-4F10-8065-4B900BB31F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B1997CB6-FD72-4B13-915A-7500AA06F4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"06A1811C-4E97-4226-8335-ADF0827A03B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BF2C50D1-187B-4E98-BA02-008D0ED4C220"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B511BDFA-D1DC-4E50-9A08-66DA05947A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0708E98D-5C84-47DC-89E5-8BB7CFFB12A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6595C4F3-5683-4889-AD30-83840F6A58D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"027FD902-9B08-4EDF-9F83-314FBF0583ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"89FB9D30-8559-4F57-9D20-DC603765B346"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"957FCB4A-32D0-4449-8995-80144CC713B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C17A0E8D-7611-42F7-896E-F2B3BC25643D"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"875ABC97-2783-41DA-AB9F-9E6F0870B74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5262D28D-204C-41E8-BC4D-27372E366295"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"121225D0-C5DA-4F26-93B8-3D56BC1D38B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"52DD66F7-FE7B-4C1C-B07B-F9E4CEEA7AFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6C2C18A1-F202-4E48-8E29-F250AD1A6737"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5EE1602B-6ECB-492B-BFEB-21AF40EE4A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"64662850-7460-46C2-852E-E047874F9660"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D6658A8-E57E-4743-95D5-074F990D0D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F6C65BBA-4DC7-4F2F-90B1-75C6F3C68FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0D0DBAEE-599A-44EB-A1E4-94CEBB406CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4CE28365-977E-47F2-8E2C-635D287149C1"}]}]}],"references":[{"url":"http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1626.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1627.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1628.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1629.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1630.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/14/7","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/15/12","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/16/2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91226","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com"},{"url":"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-4","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"https://hg.python.org/cpython/raw-file/v2.7.10/Misc/NEWS","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"https://hg.python.org/cpython/rev/1c45047c5102","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://hg.python.org/cpython/rev/bf3e1c9b80e9","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html","source":"secalert@redhat.com"},{"url":"http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1627.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1630.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/14/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/15/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/16/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://hg.python.org/cpython/raw-file/v2.7.10/Misc/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://hg.python.org/cpython/rev/1c45047c5102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://hg.python.org/cpython/rev/bf3e1c9b80e9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-5720","sourceIdentifier":"cve@mitre.org","published":"2016-09-03T20:59:01.483","lastModified":"2026-06-23T13:42:00.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) add.ctp, (2) edit.ctp, and (3) ajaxification.js."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en la funcionalidad de creación de plantilla en Malware Information Sharing Platform (MISP) en versiones anteriores a 2.3.90 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores que implican (1) add.ctp, (2) edit.ctp y (3) ajaxification.js."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.89","matchCriteriaId":"F2A656C7-581B-49C5-A894-7947A5ED50BD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92738","source":"cve@mitre.org"},{"url":"https://github.com/MISP/MISP/commit/812ac878c3645c02e2a599287117418424cbd4cf","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://www.circl.lu/advisory/CVE-2015-5720/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/MISP/MISP/commit/812ac878c3645c02e2a599287117418424cbd4cf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://www.circl.lu/advisory/CVE-2015-5720/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1415","sourceIdentifier":"psirt@cisco.com","published":"2016-09-03T20:59:03.843","lastModified":"2026-06-17T00:41:55.883","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted file, aka Bug ID CSCuz80455."},{"lang":"es","value":"Cisco WebEx Meetings Player T29.10, cuando el soporte de archivo WRF está habilitado, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un archivo manipulado, también conocido como Bug ID CSCuz80455."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_wrf_player_t29:sp10_base:*:*:*:*:*:*:*","matchCriteriaId":"AF090D54-97ED-4E83-A868-F21517550266"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-webex","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92711","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036713","source":"psirt@cisco.com"},{"url":"https://www.exploit-db.com/exploits/40509/","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-webex","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40509/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5430","sourceIdentifier":"secalert@redhat.com","published":"2016-09-03T20:59:07.280","lastModified":"2026-06-17T00:49:23.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA)."},{"lang":"es","value":"La implementación del algoritmo RSA 1.5 en la clase JOSE_JWE en JWE.php en jose-php en versiones anteriores a 2.2.1 carece del mecanismo de protección Random Filling, lo que hace más fácil a atacantes remotos obtener datos en texto plano a través de un Million Message Attack (MMA)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jose-php_project:jose-php:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.1","matchCriteriaId":"B1053065-CC9C-4137-BEC3-2E3AE4CA58C5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92741","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/nov/jose-php/commit/f03b986b4439e20b0fd635109b48afe96cf0099b#diff-37b0d289d6375ba4a7740401950ccdd6R199","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/92741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/nov/jose-php/commit/f03b986b4439e20b0fd635109b48afe96cf0099b#diff-37b0d289d6375ba4a7740401950ccdd6R199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-7152","sourceIdentifier":"cve@mitre.org","published":"2016-09-06T10:59:00.133","lastModified":"2026-06-17T00:52:41.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a \"HEIST\" attack."},{"lang":"es","value":"El protocolo HTTPS no considera el rol de la ventana de congestión TCP cuando da información sobre longitud del contenido, lo que facilita a atacantes remotos obtener datos en texto plano aprovechando una configuración de navegador web donde son enviadas cookies de terceros, también conocido como ataque \"HEIST\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:-:*:*:*:*:*:*:*","matchCriteriaId":"9E2045F5-B973-49F1-8FFD-778BADCEC00F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*","matchCriteriaId":"C37BA825-679F-4257-9F2B-CE2318B75396"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*","matchCriteriaId":"39B565E1-C2F1-44FC-A517-E3130332B17C"}]}]}],"references":[{"url":"http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/92769","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036741","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036742","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036743","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036744","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036745","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036746","source":"cve@mitre.org"},{"url":"https://tom.vg/papers/heist_blackhat2016.pdf","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/92769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tom.vg/papers/heist_blackhat2016.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]}]}},{"cve":{"id":"CVE-2016-7153","sourceIdentifier":"cve@mitre.org","published":"2016-09-06T10:59:01.493","lastModified":"2026-06-17T00:52:41.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a \"HEIST\" attack."},{"lang":"es","value":"El protocolo HTTP/2 no considera el rol de la ventana de congestión TCP cuando da información sobre longitud del contenido, lo que facilita a atacantes remotos obtener datos en texto plano aprovechando una configuración de navegador web donde son enviadas las cookies de terceros, también conocido como ataque \"HEIST\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*","matchCriteriaId":"C37BA825-679F-4257-9F2B-CE2318B75396"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*","matchCriteriaId":"39B565E1-C2F1-44FC-A517-E3130332B17C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*","matchCriteriaId":"4545786D-3129-4D92-B218-F4A92428ED48"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/92773","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036741","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036742","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036743","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036744","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036745","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036746","source":"cve@mitre.org"},{"url":"https://tom.vg/papers/heist_blackhat2016.pdf","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/92773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tom.vg/papers/heist_blackhat2016.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]}]}},{"cve":{"id":"CVE-2016-6344","sourceIdentifier":"secalert@redhat.com","published":"2016-09-07T18:59:00.140","lastModified":"2026-06-17T00:50:51.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies."},{"lang":"es","value":"Red Hat JBoss BPM Suite 6.3.x no incluye el indicador HTTPOnly en una cabecera Set-Cookie para cookies de sesión, lo que facilita a atacantes remotos obtener información potencialmente sensible a través del acceso con secuencia de comandos a las cookies"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_bpm_suite:6.3:*:*:*:*:*:*:*","matchCriteriaId":"07850BC5-6295-40CB-BE70-9DF30575E4BC"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-0248.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0249.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/92714","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371807","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0248.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1371807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2016-6345","sourceIdentifier":"secalert@redhat.com","published":"2016-09-07T18:59:02.077","lastModified":"2026-06-17T00:50:51.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"RESTEasy allows remote authenticated users to obtain sensitive information by leveraging \"insufficient use of random values\" in async jobs."},{"lang":"es","value":"RESTEasy permite a usuarios remotos autenticados obtener información sensible mediante el aprovechamiento del \"uso insuficiente de valores aleatorios\" en async jobs."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:resteasy:-:*:*:*:*:*:*:*","matchCriteriaId":"22E9B0E8-3204-4D53-A5F4-2927B7D4FF4A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92746","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372117","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://www.securityfocus.com/bid/92746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2016-6351","sourceIdentifier":"secalert@redhat.com","published":"2016-09-07T18:59:04.640","lastModified":"2026-06-17T00:50:52.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer."},{"lang":"es","value":"La función esp_do_dma en hw/scsi/esp.c en QEMU (también conocido como Quick Emulator), cuando se construye con soporte de emulación del controlador ESP/NCR53C9x, permite a administradores locales del SO invitado provocar una denegación de servicio (escritura fuera de rango y caída del proceso QEMU) o ejecutar código arbitrario en el anfitrión de QEMU a través de vectores que involucran lectura de DMA en búfer de comandos ESP."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"3CF78B06-34D3-4BF8-883B-7B9643BBA7CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=926cde5f3e4d2504ed161ed0cb771ac7cad6fd11","source":"secalert@redhat.com"},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=cc96677469388bad3d66479379735cf75db069e3","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/25/14","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/26/7","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92119","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=926cde5f3e4d2504ed161ed0cb771ac7cad6fd11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=cc96677469388bad3d66479379735cf75db069e3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/25/14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/26/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3047-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3047-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-7033","sourceIdentifier":"secalert@redhat.com","published":"2016-09-07T18:59:06.733","lastModified":"2026-06-17T00:52:11.327","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the admin pages in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en las páginas de admin en dashbuilder en Red Hat JBoss BPM Suite 6.3.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_bpm_suite:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C9A7241B-51EC-46A1-9F18-2006D2A0E65A"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-0249.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/92762","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373344","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2016-1241","sourceIdentifier":"security@debian.org","published":"2016-09-07T19:28:00.127","lastModified":"2026-06-17T00:41:32.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors."},{"lang":"es","value":"Tryton 3.x en versiones anteriores a 3.2.17, 3.4.x en versiones anteriores a 3.4.14, 3.6.x en versiones anteriores a 3.6.12, 3.8.x en versiones anteriores a 3.8.8 y 4.x en versiones anteriores a 4.0.4 permiten a usuarios remotos autenticados descubrir hashes de contraseñas de usuario a través de vectores no especificados."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"618FF838-56E3-4087-AD2D-FE8677740400"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A90168D0-DADF-4AD2-81F6-10F5FC4BAB88"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"78EB89CB-07F2-44AE-B99F-DAAC81FE7D86"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.3:*:*:*:*:*:*:*","matchCriteriaId":"98756804-6B53-4BD0-89D0-573905D83B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"E82011DD-1E22-4969-BCFA-95FD9C995CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.5:*:*:*:*:*:*:*","matchCriteriaId":"75573741-4CF9-4465-BED6-6C296754FB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.6:*:*:*:*:*:*:*","matchCriteriaId":"C02E22AF-5768-41CC-AF93-A4A1FCB22C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2B471B78-0232-40A1-AD89-55FF000297FF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6730B739-B7EF-495D-8256-F552FAAAB588"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F95728E5-B5C5-4C9D-807E-535726C9886B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"44C9A34B-FAC8-454C-8C87-908B3A5B54D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1C5A0CD6-9D95-4C6F-B566-5347391E87AF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.16","matchCriteriaId":"CF963655-95EE-47FF-AB6C-1C647D4C23E0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E66CA992-A721-43C1-975E-13408D0BCC69"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0A2E5ED5-1490-49C4-B484-97020B90E611"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0C55F574-5734-4131-B7FA-7C3B72A34366"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"785A1D6A-52BD-4EA0-9FEA-805F4CF8F347"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"982F55FA-230E-486D-857D-A47C5580A98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"3868F007-E794-47BA-A6C2-4D5572F607D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"5569A138-B8A1-4782-9E21-8189C614A8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"D53B70AD-3197-4BF3-A650-FE7932380FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"99CED877-4F45-4485-9890-00B65593223E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"67A47C56-D2BA-460A-B3AD-91BD830E31C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"F1651341-2B35-48B5-8B51-9935260EFFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"6E60BF36-AD7B-4198-AF3E-72B62572D194"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"FFB2741E-31D0-4FE0-90FC-F9AFCDA60FA3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"CCBACDA2-4A24-4E94-A97D-CE35BD2260DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"D9F4CB60-AC83-4B8C-9378-DD3A0B073A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"820DCFC1-B82D-4F9F-A9C2-00693BB4A0CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"C1C780E6-F84E-4AF9-977E-A2355773C0AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D2D1D2EF-BDA5-45F8-AA65-829E388D60BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"9F9C31E9-5A60-4CEE-BF09-DF1980BFFDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"983F41DE-2696-480C-89BE-C8F9DC8F9DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"DA9BB6FB-98FE-4065-AE4F-49DE1FA82EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6C82B8CF-F5A9-47CA-B142-BF5615744F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"38032178-B351-488D-8AFE-44B367331613"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"31F5A3E2-12F3-42AF-80B3-41AF54D4D668"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"FA6D2C93-E66F-4A62-94C2-8A44C83FA3DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"CEABCB83-257F-4791-95C1-07B28C07E07B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.13:*:*:*:*:*:*:*","matchCriteriaId":"6331C335-1E73-4A58-B4D8-DD32E707DA82"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"E82011DD-1E22-4969-BCFA-95FD9C995CCE"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3656","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"https://bugs.tryton.org/issue5795","source":"security@debian.org","tags":["Issue Tracking"]},{"url":"http://www.debian.org/security/2016/dsa-3656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.tryton.org/issue5795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2016-1242","sourceIdentifier":"security@debian.org","published":"2016-09-07T19:28:01.677","lastModified":"2026-06-17T00:41:32.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors."},{"lang":"es","value":"file_open en Tryton en versiones anteriores a 3.2.17, 3.4.x en versiones anteriores a 3.4.14, 3.6.x en versiones anteriores a 3.6.12, 3.8.x en versiones anteriores a 3.8.8 y 4.x en versiones anteriores a 4.0.4 permite a usuarios remotos autenticados con ciertos permisos leer archivos arbitrarios a través del parámetro name o de otros vectores no especificados."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.7,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6730B739-B7EF-495D-8256-F552FAAAB588"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F95728E5-B5C5-4C9D-807E-535726C9886B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"44C9A34B-FAC8-454C-8C87-908B3A5B54D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1C5A0CD6-9D95-4C6F-B566-5347391E87AF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.16","matchCriteriaId":"CF963655-95EE-47FF-AB6C-1C647D4C23E0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"618FF838-56E3-4087-AD2D-FE8677740400"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A90168D0-DADF-4AD2-81F6-10F5FC4BAB88"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"78EB89CB-07F2-44AE-B99F-DAAC81FE7D86"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.3:*:*:*:*:*:*:*","matchCriteriaId":"98756804-6B53-4BD0-89D0-573905D83B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"E82011DD-1E22-4969-BCFA-95FD9C995CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.5:*:*:*:*:*:*:*","matchCriteriaId":"75573741-4CF9-4465-BED6-6C296754FB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.6:*:*:*:*:*:*:*","matchCriteriaId":"C02E22AF-5768-41CC-AF93-A4A1FCB22C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2B471B78-0232-40A1-AD89-55FF000297FF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"CCBACDA2-4A24-4E94-A97D-CE35BD2260DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"D9F4CB60-AC83-4B8C-9378-DD3A0B073A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"820DCFC1-B82D-4F9F-A9C2-00693BB4A0CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"C1C780E6-F84E-4AF9-977E-A2355773C0AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D2D1D2EF-BDA5-45F8-AA65-829E388D60BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"9F9C31E9-5A60-4CEE-BF09-DF1980BFFDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"983F41DE-2696-480C-89BE-C8F9DC8F9DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"DA9BB6FB-98FE-4065-AE4F-49DE1FA82EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6C82B8CF-F5A9-47CA-B142-BF5615744F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"38032178-B351-488D-8AFE-44B367331613"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"31F5A3E2-12F3-42AF-80B3-41AF54D4D668"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"FA6D2C93-E66F-4A62-94C2-8A44C83FA3DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"CEABCB83-257F-4791-95C1-07B28C07E07B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.4.13:*:*:*:*:*:*:*","matchCriteriaId":"6331C335-1E73-4A58-B4D8-DD32E707DA82"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"E82011DD-1E22-4969-BCFA-95FD9C995CCE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E66CA992-A721-43C1-975E-13408D0BCC69"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0A2E5ED5-1490-49C4-B484-97020B90E611"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0C55F574-5734-4131-B7FA-7C3B72A34366"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"785A1D6A-52BD-4EA0-9FEA-805F4CF8F347"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"982F55FA-230E-486D-857D-A47C5580A98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"3868F007-E794-47BA-A6C2-4D5572F607D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"5569A138-B8A1-4782-9E21-8189C614A8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"D53B70AD-3197-4BF3-A650-FE7932380FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"99CED877-4F45-4485-9890-00B65593223E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"67A47C56-D2BA-460A-B3AD-91BD830E31C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"F1651341-2B35-48B5-8B51-9935260EFFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"6E60BF36-AD7B-4198-AF3E-72B62572D194"},{"vulnerable":true,"criteria":"cpe:2.3:a:tryton:tryton:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"FFB2741E-31D0-4FE0-90FC-F9AFCDA60FA3"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3656","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"https://bugs.tryton.org/issue5808","source":"security@debian.org","tags":["Issue Tracking"]},{"url":"http://www.debian.org/security/2016/dsa-3656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.tryton.org/issue5808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2016-6316","sourceIdentifier":"secalert@redhat.com","published":"2016-09-07T19:28:10.067","lastModified":"2026-06-17T00:50:48.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as \"HTML safe\" and used as attribute values in tag handlers."},{"lang":"es","value":"Vulnerabilidad de XSS en Action View en Ruby en Rails 3.x en versiones anteriores a 3.2.22.3, 4.x en versiones anteriores a 4.2.7.1 y 5.x en versiones anteriores a 5.0.0.1 podría permitir a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de texto declarado como \"HTML safe\" y utilizado como valores de atributos en los manejadores de etiquetas."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3BE7DFE-BA20-434B-A1DE-AD038B255C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"DCEE5B21-C990-4705-8239-0D7B29DAEDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"65EE33B1-B079-4CDE-B9C2-F1613A4610DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5CAAA20B-824F-4448-99DC-9712FE628073"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"D2BEBDFB-0F30-454A-B74C-F820C9D2708B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*","matchCriteriaId":"1D7CD8C1-95D1-477E-AD96-6582EC33BA01"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B6F00D98-3D0F-40AF-AE4F-090B1E6B660C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9476CE55-69C0-45D3-B723-6F459C90BF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"112FC73B-A8BC-4EEA-9F4B-CCE685EF2838"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D26565B1-2BA6-4A3C-9264-7FC9A1820B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"644EF85E-6D3E-4F5C-96B0-49AD2A2D90CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"392E2D58-CB39-4832-B4D9-9C2E23B8E14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*","matchCriteriaId":"1F2466EA-7039-46A1-B4A3-8DACD1953A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0CAB4E72-0A15-4B26-9B69-074C278568D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A085E105-9375-440A-80CB-9B23E6D7EB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*","matchCriteriaId":"25911E48-C5D7-4ED8-B4DB-7523A74CCF49"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FE6EC1E5-3A4A-4751-9F77-28EF5AF681E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"B29674E3-CC80-446B-9A43-82594AE7A058"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"FF34D8CB-2B6D-4CB8-A206-108293BCFFE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8E5187F6-E3AC-4E0D-B1D0-83DE76C20A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*","matchCriteriaId":"272268EE-E3E8-4683-B679-55D748877A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*","matchCriteriaId":"7B69FD33-61FE-4F10-BBE1-215F59035D30"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*","matchCriteriaId":"08D7CB5D-82EF-4A24-A792-938FAB40863D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*","matchCriteriaId":"8A044B21-47D5-468D-AF4A-06B3B5CC0824"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2196F3D0-532A-40F9-843A-1DFBC8B63FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*","matchCriteriaId":"CBEDA932-6CB5-438C-94E4-824732A91BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*","matchCriteriaId":"903E5524-5E45-48CE-A804-EDAEBE3A79AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*","matchCriteriaId":"08534AF2-F94E-4FB6-A572-4FB9827276D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*","matchCriteriaId":"29E3B4A6-1346-4358-B7BC-84D00ED3ABBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*","matchCriteriaId":"B52D7A6B-DD93-45F0-9186-18ABEFF28DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"1F07C641-48DF-43BE-9EB5-72B337C54846"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*","matchCriteriaId":"A1CB1B12-99F5-430F-AE19-9A95C17FA123"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D1A7C449-8F9A-4CE5-9C3D-375996BFAEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"05D5D58C-DB79-41EA-81AE-5D95C48211B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*","matchCriteriaId":"FE331D6D-99BA-4369-AD8B-B556DEE4955F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"58304E17-ADFD-4686-9CCF-C1CA31843B94"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*","matchCriteriaId":"05108EF0-81AD-4378-9843-5C23F2AC79A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4EE7DA7E-23A5-42AF-9D5C-39240CE2FBDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0C448F62-8231-4221-ADA0-C9B848AE03D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"5FBD11A1-51C7-4AF7-AA0B-3A14C5435E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"60255706-C44A-48CB-B98B-A1F0991CBC74"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"0456E2E8-EF06-414E-8A7D-8005F0EB46B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D9EE4763-2495-4B6A-B72F-344967E51C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DB51F3E9-4899-49A9-9E7B-0DCA92A91DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F884F2F4-94F3-46CB-860B-1BCC0EEF408A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"88DFBB48-1C29-4639-9369-F5B413CA2337"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D37696D7-BEE6-4587-9E33-A7FE24780409"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"E95B5D44-0C8D-47BC-A89D-48A5BDEB84F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"1DFDAF6A-76AA-436F-A4F3-DA69892DE2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"D3172982-3FA4-427F-BE3E-2321D804E49D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*","matchCriteriaId":"FD6EC85B-F092-48FF-966A-96B9227C8656"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*","matchCriteriaId":"9000F3C1-57A0-474C-9C82-E58688F29838"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*","matchCriteriaId":"6E55E42E-AB6A-4E47-AC69-DFDAEB0A8735"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A42F4E7A-6F6A-485C-8D30-95F3B0285922"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"30B9C0CB-F6E6-4233-84E4-D6E69104DD73"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"84309CC7-A8B7-4ADB-AEA1-964DA5F7B0E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"5343241F-274D-45FF-97C7-2BC2E920BAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FED122B8-AF4C-4C48-B1E5-54F4A7A31A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"157ACCAD-0FB8-4CC9-9DFB-70835DE6506C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"3E50ACF6-7277-4C9A-B42A-E7EFDC317691"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C191DC2B-1EC3-48E0-A586-867E6EE4431C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3AA51263-6680-42C6-B119-8241D6F76206"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"B4BC41E8-FEDA-4C31-B479-D49A59FC4D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"09C20971-53B5-43B0-AC45-5AA0FDF1B054"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"D1AEFA5D-A793-4BAB-8DED-3D3A31260AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"496902D6-409A-40D9-849F-C41264BE5B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2482AB3F-8303-4F95-BE04-C5F06EEF2015"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"244C6952-377C-4AF0-8BA2-C34516A3EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"98A79CC5-71EC-4E90-9E99-2DF62ABC0122"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"6562F3C3-D794-4107-95D4-1C0B0486940B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"11F211A0-AC69-482A-B659-AEE7BE4E4CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2816C02C-E13E-4367-91F3-14756A90EC9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E82AF7C7-B725-40EF-8EE3-18F8E7FAEB29"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"1AE674DE-65DB-437E-A034-A2EE5C584B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0524F3E3-BAD7-4CD3-A6E7-74CFBE4B46E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"32EB2C3F-0F24-43DB-988E-BD2973598F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"EB32713D-FE64-445E-872E-B4678C243AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C55E6B4A-2B9C-46C8-A739-109EA4BA7FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"89C618DC-38BC-4484-8C41-BC38B7EB636B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*","matchCriteriaId":"FE1EF01A-F358-45D3-ADA2-51DD1D8CB6E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AC2616BD-A4E8-42F3-BB5A-7517DC4EDA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"0E376782-98B0-4766-B6FC-67E032A00C62"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"96D08DC1-14E9-4DB9-BC95-3F73B454FBC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F365C9E5-27DC-46C3-AFE4-4876EC7B352B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"6F0016A6-0ED6-443D-B969-CB1226D8E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.7:rc1:*:*:*:*:*:*","matchCriteriaId":"42232305-7D62-4692-81CC-B7E9CE642372"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"E69470EA-5EBC-4FB9-A722-5B61C70C1140"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.8:rc1:*:*:*:*:*:*","matchCriteriaId":"DD2818D7-5006-4486-AE55-47B63C8F114B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.8:rc2:*:*:*:*:*:*","matchCriteriaId":"83EF40E0-1C62-415A-892B-C071B109D924"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B13A8EBB-4211-4AB1-8872-244EEEE20ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.9:rc1:*:*:*:*:*:*","matchCriteriaId":"22D707A0-7CA9-4CED-8DBA-1B50B57EDB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.9:rc2:*:*:*:*:*:*","matchCriteriaId":"0C3CADF8-3316-4514-9A70-AD3DF16B19E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.9:rc3:*:*:*:*:*:*","matchCriteriaId":"D0D4AF31-A47B-4BE3-A99B-9A0EB7C53D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C9AB2152-DED8-4CFD-B915-94A9F56FDD05"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"C630AB60-DBAF-421E-B663-492BAE8A180F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0F41CCF8-14EB-4327-A675-83BFDBB53196"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"75842F7D-B1B1-48BA-858F-01148867B3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.13:rc1:*:*:*:*:*:*","matchCriteriaId":"FE65D701-AA6E-48E4-B62B-C22DEE863503"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.13:rc2:*:*:*:*:*:*","matchCriteriaId":"17B1E475-C873-4561-9348-027721C08D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C0406FF0-30F5-40E2-B9B8-FE465D923DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.15:rc3:*:*:*:*:*:*","matchCriteriaId":"6646610D-279B-4AEC-B445-981E7784EE5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.16:*:*:*:*:*:*:*","matchCriteriaId":"50F51980-EAD9-4E4D-A2E7-1FACFA80AAB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.17:*:*:*:*:*:*:*","matchCriteriaId":"CC02A7D1-CB1A-4793-86E3-CF88D0BCDF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.18:*:*:*:*:*:*:*","matchCriteriaId":"A499584B-6E2E-42F3-B0CE-DA7BDD732897"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.21:*:*:*:*:*:*:*","matchCriteriaId":"AE982FFD-D30F-4872-9C36-74DE50405B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:3.2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"EA770BE3-DD37-45C9-9E6D-8D3407D1A5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"2E950E33-CD03-45F5-83F9-F106060B4A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"547C62C8-4B3E-431B-AA73-5C42ED884671"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"4CDAD329-35F7-4C82-8019-A0CF6D069059"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"56D3858B-0FEE-4E8D-83C2-68AF0431F478"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*","matchCriteriaId":"254884EE-EBA4-45D0-9704-B5CB22569668"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"35FC7015-267C-403B-A23D-EDA6223D2104"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"5C913A56-959D-44F1-BD89-D246C66D1F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*","matchCriteriaId":"5D5BA926-38EE-47BE-9D16-FDCF360A503B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*","matchCriteriaId":"18EA25F1-279A-4F1A-883D-C064369F592E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FD794856-6F30-4ABF-8AE4-720BB75E6F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B4199B8B-A6F9-4BFD-8D27-0E663D8C579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F11E76A3-FA5B-4038-AB52-3D7D5E54D8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"C583ACDE-55D5-4D2F-838F-BEC5BDCDE3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"767C481D-6616-4CA9-9A9B-C994D9121796"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D5496953-0C5E-45F8-A7FB-240CEC2CCEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*","matchCriteriaId":"CA46B621-125E-497F-B2DE-91C989B25936"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*","matchCriteriaId":"B3239443-2E19-4540-BA0C-05A27E44CB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*","matchCriteriaId":"104AC9CF-6611-4469-9852-7FDAF4EC7638"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DC9E1864-B1E5-42C3-B4AF-9A002916B66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"31AC91AA-6A9A-43B4-B3E9-A66A34B6E612"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A462C151-982E-4A83-A376-025015F40645"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"660C2AD2-CEC8-4391-84AF-27515A88B29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*","matchCriteriaId":"578CC013-776B-4868-B448-B7ACAF3AF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*","matchCriteriaId":"C310EA3E-399A-48FD-8DE9-6950E328CF23"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"293B2998-5169-4960-BEC4-21DAC837E32B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FB42A8E7-D273-4CE2-9182-D831D8089BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DB757DFD-BF47-4483-A2C0-DF37F7D10989"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B6C375F2-5027-4B55-9112-C5DD2F787E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EAB8D57F-9849-428C-B8E9-D0A1020728BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B0359DA8-6B41-46C5-AA95-41B1B366DD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"0965BDB6-9644-465C-AA32-9278B2D53197"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"7F6B15CF-37C1-4C9B-8457-4A8C9A480188"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"072EB16D-1325-4869-B156-65E786A834C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"847B3C3D-8656-404D-A954-09C159EDC8E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65CA2D50-B33C-4088-BDDF-EB964C9A092C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"CADB5989-5260-4F60-ACF2-BEB6D7F97654"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9036E3C7-0AD5-489D-BCEE-31DFE13F5ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*","matchCriteriaId":"509597D0-22E1-4BE8-95AD-C54FE4D15FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.6:rc2:*:*:*:*:*:*","matchCriteriaId":"B86E26CB-2376-4EBC-913C-B354E2D6711B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"539C550D-FEDD-415E-95AE-40E1AE2BAF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D5150753-E86D-4859-A046-97B83EAE2C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"59C5B869-74FC-4051-A103-A721332B3CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"7C31EBD2-CD2D-4D38-AA51-A5A56487939A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.9:rc1:*:*:*:*:*:*","matchCriteriaId":"F11E9791-7BCE-43E5-A4BA-6449623FE4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"33FBD4E4-0BCD-49E1-BA84-86621B7C4556"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc1:*:*:*:*:*:*","matchCriteriaId":"CE521626-2876-455C-9D99-DB74726DC724"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc2:*:*:*:*:*:*","matchCriteriaId":"2DFDD32E-F49E-47F7-B033-B6C3C0E07FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc3:*:*:*:*:*:*","matchCriteriaId":"DCBA26F1-FBBA-444D-9C14-F15AB14A4FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.10:rc4:*:*:*:*:*:*","matchCriteriaId":"16D3B0EA-49F7-401A-A1D9-437429D33EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"83D1EB17-EE67-48E5-B637-AA9A75D397F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.12:rc1:*:*:*:*:*:*","matchCriteriaId":"17EBD8B4-C4D3-44A6-9DC1-89D948F126A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"A2B1711A-5541-412C-A5A0-274CEAB9E387"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.13:rc1:*:*:*:*:*:*","matchCriteriaId":"FCB08CD7-E9B9-454F-BAF7-96162D177677"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C3AF00C3-93D9-4284-BCB9-40E42CB8386E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.14:rc1:*:*:*:*:*:*","matchCriteriaId":"0D3DA0B4-E374-4ED4-8C3B-F723C968666F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.14:rc2:*:*:*:*:*:*","matchCriteriaId":"B1730A9A-6810-4470-AE6C-A5356D5BFF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.14.2:*:*:*:*:*:*:*","matchCriteriaId":"AE4B688E-8638-4539-961D-4FDCBEB4B1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5D0346BB-9180-4FE5-AA35-DC466675ED5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.15:rc1:*:*:*:*:*:*","matchCriteriaId":"2D6DD9BF-F174-4BE3-9910-BDE3658DC36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"40B79E40-75CB-4EBB-8A4B-AF41AED2AE1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.1.16:rc1:*:*:*:*:*:*","matchCriteriaId":"89B4DCF6-1A21-4B91-ACB4-7DE05487C497"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9A68D41F-36A9-4B77-814D-996F4E48FA79"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"709A19A5-8FD1-4F9C-A38C-F06242A94D68"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8104482C-E8F5-40A7-8B27-234FEF725FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"2CFF8677-EA00-4F7E-BFF9-272482206DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8D7DF5CD-DA28-492D-B5EE-D252ECCC8D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"85435026-9855-4BF4-A436-832628B005FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"56C2308F-A590-47B0-9791-7865D189196F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9A266882-DABA-4A4C-88E6-60E993EE0947"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"83F1142C-3BFB-4B72-A033-81E20DB19D02"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1FA738A1-227B-4665-B65E-666883FFAE96"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"6F00718C-A9E8-4E85-8DA6-33BF11F2DCCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*","matchCriteriaId":"10789A2D-6401-4119-BFBE-2EE4C16216D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*","matchCriteriaId":"70ABD462-7142-4831-8EB6-801EC1D05573"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"81D717DB-7C80-48AA-A774-E291D2E75D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"06B357FB-0307-4EFA-9C5B-3C2CDEA48584"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"E4BD8840-0F1C-49D3-B843-9CFE64948018"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"79D5B492-43F9-470F-BD21-6EFD93E78453"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"4EC1F602-D48C-458A-A063-4050BE3BB25F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F6A1C015-56AD-489C-B301-68CF1DBF1BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"FD191625-ACE2-46B6-9AAD-12D682C732C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*","matchCriteriaId":"02C7DB56-267B-4057-A9BA-36D1E58C6282"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EC163D49-691B-4125-A983-6CF6F6D86DEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68B537D1-1584-4D15-9C75-08ED4D45DC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"6A19315C-9A9D-45FE-81C8-074744825B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"1E3B4233-E117-4E77-A60D-3DFD5073154D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"392CF25B-8400-4185-863F-D6353B664FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:4.2.7:rc1:*:*:*:*:*:*","matchCriteriaId":"3037282A-863A-4C92-A40C-4D436D2621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"AF8F94CF-D504-4165-A69E-3F1198CB162A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta1.1:*:*:*:*:*:*","matchCriteriaId":"C8C25977-AB6C-45E1-8956-871EB31B36BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"5F0AB6B0-3506-4332-A183-309FAC4882CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"6D7B4EBC-B634-4AD7-9F7A-54D14821D5AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F844FB25-6E27-412F-8394-A7FB15AC1191"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A4E608ED-F4AB-4F29-B34E-2841A59580A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6320DD44-7D7E-4075-A865-BEAFF86FDA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"224BD488-0D7E-4F8B-9012-DE872DEB544C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A325F57E-0055-4279-9ED7-A26E75FC38E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.14:rc1:*:*:*:*:*:*","matchCriteriaId":"9A3BA4AE-B4F0-4204-AFA1-1016F0A6F7AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.14:rc2:*:*:*:*:*:*","matchCriteriaId":"991F368C-CEB5-4DE6-A7EE-C341F358A4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.15:rc1:*:*:*:*:*:*","matchCriteriaId":"01DB164E-E08E-4649-84BD-15B4159A3AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.15:rc2:*:*:*:*:*:*","matchCriteriaId":"E0F7ECFB-86A1-4F00-AD47-971FA23C6D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.19:*:*:*:*:*:*:*","matchCriteriaId":"69702127-AB96-4FE0-9AC4-FBE7B8CA77E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.20:*:*:*:*:*:*:*","matchCriteriaId":"48D71F7B-CF93-41D4-A824-51CB11F08692"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.22:*:*:*:*:*:*:*","matchCriteriaId":"60CE659B-DF49-477B-8879-C33823F6527F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"7EF68196-7C9E-40FE-868D-C42FF82D52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.10:rc2:*:*:*:*:*:*","matchCriteriaId":"9C8E749B-2908-442A-99F0-91E2772336ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"9E43D2D7-89AE-4805-9732-F1C601D8D8B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"5F3D8911-060D-435D-ACA2-E29271170CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"EA7A4939-16CF-450D-846A-75B231E32D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C964D4A2-3F39-4CC7-A028-B42C94DDB56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.13:rc1:*:*:*:*:*:*","matchCriteriaId":"3B54D9FE-0A38-4053-9F3C-8831E2DD2BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"23FD6D82-9A14-4BD4-AA00-1875F0962ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:4.1.14.1:*:*:*:*:*:*:*","matchCriteriaId":"91AB2B26-A6F1-44D2-92EB-8078DD6FD63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E971CF9D-B807-4A74-81EB-D7CB4E5B8099"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:5.0.0:racecar1:*:*:*:*:*:*","matchCriteriaId":"0B31291C-CBB5-4E51-B0AC-4144E8BAD65B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1855.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1856.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1857.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1858.html","source":"secalert@redhat.com"},{"url":"http://weblog.rubyonrails.org/2016/8/11/Rails-5-0-0-1-4-2-7-2-and-3-2-22-3-have-been-released/","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3651","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/08/11/3","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92430","source":"secalert@redhat.com"},{"url":"https://groups.google.com/forum/#%21topic/ruby-security-ann/8B2iV2tPRSE","source":"secalert@redhat.com"},{"url":"https://puppet.com/security/cve/cve-2016-6316","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1855.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1856.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1857.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1858.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblog.rubyonrails.org/2016/8/11/Rails-5-0-0-1-4-2-7-2-and-3-2-22-3-have-been-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/08/11/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://groups.google.com/forum/#%21topic/ruby-security-ann/8B2iV2tPRSE","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://puppet.com/security/cve/cve-2016-6316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6670","sourceIdentifier":"cve@mitre.org","published":"2016-09-07T19:28:13.380","lastModified":"2026-06-17T00:51:33.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate."},{"lang":"es","value":"Dispositivos Huawei S7700, S9300, S9700 y S12700 con software en versiones anteriores a V200R008C00SPC500 utiliza números aleatorios con entropía insuficiente para generar certificados con auto-firma, lo que facilita a atacantes remotos descubrir claves privadas mediante el aprovechamiento del conocimiento un certificado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei_firmware:s12700:v200r005c00:*:*:*:*:*:*:*","matchCriteriaId":"7B54C737-6E7F-434C-99B8-28825515E735"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*","matchCriteriaId":"138C1E57-176C-46B1-9704-D9C8391CC802"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9700_firmware:v200r003c00:*:*:*:*:*:*:*","matchCriteriaId":"06AD9ACA-E0C3-4096-BE50-94E717CDA318"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9700_firmware:v200r005c00:*:*:*:*:*:*:*","matchCriteriaId":"325D6523-A07A-48D4-AD44-CF838BD77432"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*","matchCriteriaId":"75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s7700_firmware:v200r003c00:*:*:*:*:*:*:*","matchCriteriaId":"B1DFF0C0-AA17-4AA1-A418-4759D1A58852"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s7700_firmware:v200r005c00:*:*:*:*:*:*:*","matchCriteriaId":"D84F05D5-BA7D-485B-91C2-273349335CFB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*","matchCriteriaId":"8769C2C4-E333-432B-8943-CFDFAE013379"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9300_firmware:v200r003c00:*:*:*:*:*:*:*","matchCriteriaId":"473B6E52-E60F-4D3C-9028-E362DF2A8327"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9300_firmware:v200r005c00:*:*:*:*:*:*:*","matchCriteriaId":"2632DC1D-0CB9-4493-9270-436139C88623"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:*","matchCriteriaId":"AD2EC926-50C6-4CBE-BB6F-56F3A6287DEE"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-certificate-en","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92438","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-certificate-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6839","sourceIdentifier":"cve@mitre.org","published":"2016-09-07T19:28:16.910","lastModified":"2026-06-17T00:51:52.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Huawei FusionAccess en versiones anteriores a V100R006C00 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de división de respuesta HTTP a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-113"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:fusionaccess:v100r005c10:*:*:*:*:*:*:*","matchCriteriaId":"A9DA9180-AEB7-46A1-8AF8-BB26CA9FC460"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:fusionaccess:v100r005c20:*:*:*:*:*:*:*","matchCriteriaId":"3399737D-23AE-448B-A6C2-52815AE4902F"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:fusionaccess:v100r005c30:*:*:*:*:*:*:*","matchCriteriaId":"384E9303-AFED-4AA6-B7A0-A580D3B2F821"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-fusionaccess-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92502","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-fusionaccess-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6898","sourceIdentifier":"cve@mitre.org","published":"2016-09-07T19:28:19.363","lastModified":"2026-06-17T00:51:57.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service (web service outage) via a crafted XML document."},{"lang":"es","value":"Vulnerabilidad XML de entidad externa (XXE) en el Hyper Management Module (HMM) en servidores en rack Huawei E9000 con software en versiones anteriores a V100R001C00SPC296 permite a usuarios remotos autenticados leer archivos arbitrarios o provocar una denegación de servicio (interrupción del servicio web) a través de un documento XML manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:P","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:e9000_chassis:*:*:*:*:*:*:*:*","versionEndIncluding":"v100r001c00","matchCriteriaId":"79661280-009F-4408-9A82-34A6E296323B"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-e9000-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92620","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-e9000-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6900","sourceIdentifier":"cve@mitre.org","published":"2016-09-07T19:28:21.740","lastModified":"2026-06-17T00:51:57.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 allows local users to cause a denial of service (iBMC resource consumption) via unspecified vectors."},{"lang":"es","value":"Intelligent Baseboard Management Controller (iBMC) en servidores Huawei RH1288 V3 con software anterior a V100R003C00SPC613; servidores RH2288 V3 con software anterior a V100R003C00SPC617; servidores RH2288H V3 con software anterior a V100R003C00SPC515; servidores RH5885 V3 con software anterior a V100R003C10SPC102 XH620 V3, XH622 V3 y servidores XH628 V3 con software anterior a V100R003C00SPC610 permite a usuarios locales provocar una denegación de servicio (recurso de consumo iBMC) a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:rh1288_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*","matchCriteriaId":"AE7DF842-021C-422A-BCE5-17BEE7FAA950"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:rh2288_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*","matchCriteriaId":"93439764-5BA1-49B0-B337-5C2C62C3A962"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:rh2288h_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*","matchCriteriaId":"33CE73B9-21F6-4175-9C60-159F862B98B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:xh620_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*","matchCriteriaId":"E5C5F600-30B6-4098-B0C5-E20A722957A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:xh622_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*","matchCriteriaId":"91123A12-63C1-422F-86C5-C0A6E2C1E8C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:xh628_v3_server_firmware:v100r003c00:*:*:*:*:*:*:*","matchCriteriaId":"443F96DD-C3E8-4A8C-8FFC-D8E750DFDCB2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:rh1288_v3_server:-:*:*:*:*:*:*:*","matchCriteriaId":"CF7BCC07-7475-48F0-BF51-C86B8548AE62"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:rh2288_v3_server:-:*:*:*:*:*:*:*","matchCriteriaId":"04129772-90A9-4FD1-935F-08EEF6D06A3B"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:rh2288h_v3_server:-:*:*:*:*:*:*:*","matchCriteriaId":"20FCB034-2A59-406F-A7B7-0C098E360E17"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:xh620_v3_server:-:*:*:*:*:*:*:*","matchCriteriaId":"51480E77-61B8-4F1B-8FAE-E4ADF3279999"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:xh622_v3_server:-:*:*:*:*:*:*:*","matchCriteriaId":"ED6D095D-5546-44BE-A8FD-4C22EC297AF9"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:xh628_v3_server:-:*:*:*:*:*:*:*","matchCriteriaId":"8AB59F25-E2C1-4017-8875-BE60C540F2B1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:rh5885_v3_server_firmware:v100r003c01:*:*:*:*:*:*:*","matchCriteriaId":"738BC343-71EE-4FDE-829A-4E528E222360"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:rh5885_v3_server:-:*:*:*:*:*:*:*","matchCriteriaId":"07B3E187-6185-4FE8-A0A2-DCD87903140B"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7108","sourceIdentifier":"cve@mitre.org","published":"2016-09-07T19:28:23.677","lastModified":"2026-06-17T00:52:36.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors."},{"lang":"es","value":"Huawei Unified Maintenance Audit (UMA) en versiones anteriores a V200R001C00SPC200 SPH206 permite a usuarios remotos autenticados obtener los hashes MD5 de contraseñas de usuarios arbitrarias a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:uma:*:*:*:*:*:*:*:*","versionEndIncluding":"v200r001c00spc200","matchCriteriaId":"FF766F50-B584-4515-AD48-877962F9AF8B"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92619","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-5404","sourceIdentifier":"secalert@redhat.com","published":"2016-09-07T20:59:01.623","lastModified":"2026-06-17T00:49:21.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The cert_revoke command in FreeIPA does not check for the \"revoke certificate\" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the \"retrieve certificate\" permission."},{"lang":"es","value":"El comando cert_revoke en FreeIPA no realiza comprobaciones para el permiso \"certificado de revocación\", lo que permite a usuarios remotos autenticados revocar certificados arbitrarios aprovechando el permiso \"certificado de recuperación\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeipa:freeipa:-:*:*:*:*:*:*:*","matchCriteriaId":"73805123-ACD0-4548-8B3E-81E6D7A37135"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","matchCriteriaId":"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*","matchCriteriaId":"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*","matchCriteriaId":"772E9557-A371-4664-AE2D-4135AAEB89AA"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1797.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/08/17/9","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92525","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fedorahosted.org/freeipa/ticket/6232","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=cf74584d0f772f3f5eccc1d30c001e4212a104fd","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3PZ2ZQTMGC2UBRNHXVVOY3PJDOBP4CP4/","source":"secalert@redhat.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5OROLKFSY5QRQS7NGBNDP5QMOBV3XMZ/","source":"secalert@redhat.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VQDYWANTMDFZP3HTGSEOA2IONVUITYX5/","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1797.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/08/17/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fedorahosted.org/freeipa/ticket/6232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=cf74584d0f772f3f5eccc1d30c001e4212a104fd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3PZ2ZQTMGC2UBRNHXVVOY3PJDOBP4CP4/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5OROLKFSY5QRQS7NGBNDP5QMOBV3XMZ/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VQDYWANTMDFZP3HTGSEOA2IONVUITYX5/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4380","sourceIdentifier":"cve@mitre.org","published":"2016-09-08T16:59:03.097","lastModified":"2026-06-17T00:47:27.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en el AdminUI en HPE Operations Manager 9.21.x en versiones anteriores a 9.21.130 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_manager:*:*:*:*:*:linux:*:*","versionEndIncluding":"9.21","matchCriteriaId":"0BF70EB8-567F-4BBA-A37C-40D973477A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_manager:*:*:*:*:*:solaris:*:*","versionEndIncluding":"9.21","matchCriteriaId":"600D6D54-BBC9-4A15-82DC-B3AE962828DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_manager:*:*:*:*:*:unix:*:*","versionEndIncluding":"9.21","matchCriteriaId":"4DEE88D4-CE3F-4213-8866-222A18504E75"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92698","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036716","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05249833","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05249833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4381","sourceIdentifier":"cve@mitre.org","published":"2016-09-08T16:59:04.157","lastModified":"2026-06-17T00:47:27.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x through 8.x before 8.4.1-02, when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled, allows local users to bypass intended access restrictions via unspecified vectors."},{"lang":"es","value":"HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x hasta la versión 8.x en versiones anteriores a 8.4.1-02, cuando Replication Manager (RepMgr) y Device Manager (DevMgr) están habilitados, permite a usuarios locales eludir restricciones de acceso intencionadas a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":4.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.0,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*","versionEndIncluding":"8.4.1","matchCriteriaId":"33835F67-75F1-499E-9A18-713A59D47D57"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92733","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05257711","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05257711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7175","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T10:59:00.137","lastModified":"2026-06-17T00:52:44.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-qnet6.c en el disector QNX6 QNET en Wireshark 2.x en versiones anteriores a 2.0.6 maneja de manera incorrecta datos de la dirección MAC, lo que permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D900BA83-D5D3-4A8D-8C32-D135A3E5190E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1036760","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11850","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/16965","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1396f6ad555178f6b81cc1a65f9cb37b2d99aebf","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-50.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/16965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1396f6ad555178f6b81cc1a65f9cb37b2d99aebf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-50.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7176","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T10:59:01.947","lastModified":"2026-06-17T00:52:44.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-h225.c en el disector H.225 en Wireshark 2.x en versiones anteriores a 2.0.6 llama a snprintf con uno de sus búfer de entrada como si fuera un búfer de salida, lo que permite a atacantes remotos provocar una denegación de servicio (superposición de copia y caída de la aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D900BA83-D5D3-4A8D-8C32-D135A3E5190E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3671","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12700","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/16852","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6d8261994bb928b7e80e3a2478a3d939ea1ef373","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-51.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/16852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6d8261994bb928b7e80e3a2478a3d939ea1ef373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-51.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7177","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T10:59:03.213","lastModified":"2026-06-17T00:52:44.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-catapult-dct2000.c en el disector Catapult DCT2000 en Wireshark 2.x en versiones anteriores a 2.0.6 no restringe el número de canales, lo que permite a atacantes remotos provocar una denegación de servicio (sobrelectura de búfer y caída de la aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D900BA83-D5D3-4A8D-8C32-D135A3E5190E"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3671","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/17096","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e37b271c473e1cbd01d62ebe1f3b011fc9fe638","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-52.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/17096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e37b271c473e1cbd01d62ebe1f3b011fc9fe638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-52.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7178","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T10:59:04.260","lastModified":"2026-06-17T00:52:44.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-umts_fp.c en el disector UMTS FP en Wireshark 2.x en versiones anteriores a 2.0.6 no asegura que la memoria sea asignada para ciertas estructuras de datos, lo que permite a atacantes remotos provocar una denegación de servicio (escrito de acceso invalido y caída de la aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D900BA83-D5D3-4A8D-8C32-D135A3E5190E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3671","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/17094","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=315bba7c645b75af24215c6303d187b188610bba","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-53.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/17094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=315bba7c645b75af24215c6303d187b188610bba","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-53.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7179","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T10:59:05.307","lastModified":"2026-06-17T00:52:44.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet."},{"lang":"es","value":"Desbordamiento del búfer basado en pila en epan/dissectors/packet-catapult-dct2000.c en el disector Catapult DCT2000 en Wireshark 2.x en versiones anteriores a 2.0.6 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D900BA83-D5D3-4A8D-8C32-D135A3E5190E"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3671","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/17095","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b97fbddc23c065727b0147aab52a27c4aadffe7","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-54.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/17095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b97fbddc23c065727b0147aab52a27c4aadffe7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-54.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7180","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T10:59:06.277","lastModified":"2026-06-17T00:52:44.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet."},{"lang":"es","value":"epan/dissectors/packet-ipmi-trace.c en el disector de trazo IPMI en Wireshark 2.x en versiones anteriores a 2.0.6 no considera adecuadamente cuándo una cadena es constante. lo que permite a atacantes remotos provocar una denegación de servicio (uso después de liberación y caída de la aplicación) a través de un paquete manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF0B55F-A412-48E2-9047-7CCA8442766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8BE013B-8615-49DB-939E-B7E289171467"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FDB30F17-A41A-4F09-977F-AB91E509247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D900BA83-D5D3-4A8D-8C32-D135A3E5190E"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3671","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/17289","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5213496250aceff086404c568e3718ebc0060934","source":"cve@mitre.org"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/17289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5213496250aceff086404c568e3718ebc0060934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1275","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T14:05:02.297","lastModified":"2026-06-17T00:41:37.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface."},{"lang":"es","value":"Juniper Junos OS en versiones anteriores a 13.3R9, 14.1R6 en versiones anteriores a 14.1R6-S1 y 14.1 en versiones anteriores a 14.1R7, cuando es configurado con enrutamiento de casos VPLS, permite a atacantes remotos obtener información mbuf sensible inyectando una inundación de marcos de Ethernet con una dirección IPv6 MAC direccionada dentro de una interfaz conectada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:*:r8:*:*:*:*:*:*","versionEndIncluding":"13.3","matchCriteriaId":"61B7CD60-A947-44A5-B153-7E50039D42BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*","matchCriteriaId":"6237291A-B861-4D53-B7AA-C53A44B76896"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"9C778627-820A-48F5-9680-0205D6DB5EB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"FA7F03DC-73A2-4760-B386-2A57E9C97E65"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"0CA10003-D52B-4110-9D7A-F50895E6BA17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*","matchCriteriaId":"1B2D843A-8ADE-4888-8960-B48394DEA1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*","matchCriteriaId":"3BE66516-A06D-4C0F-8346-DFC8865C8FE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*","matchCriteriaId":"EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91758","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036301","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1277","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T14:05:04.063","lastModified":"2026-06-17T00:41:37.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R6, 15.1 before 15.1F6 or 15.1R3, and 15.1X49 before 15.1X49-D40, when configured with a GRE or IPIP tunnel, allow remote attackers to cause a denial of service (kernel panic) via a crafted ICMP packet."},{"lang":"es","value":"Juniper Junos OS en versiones anteriores a 12.1X46-D50, 12.1X47 en versiones anteriores a 12.1X47-D40, 12.3X48 en versiones anteriores a 12.3X48-D30, 13.3 en versiones anteriores a 13.3R9, 14.1 en versiones anteriores a 14.1R8, 14.1X53 en versiones anteriores a 14.1X53-D40, 14.2 en versiones anteriores a 14.2R6, 15.1 en versiones anteriores a 15.1F6 o 15.1R3 y 15.1X49 en versiones anteriores a 15.1X49-D40, cuando es configurado con un tunel GRE o IPIP, permiten a atacantes remotos provocar una denegación de servicio (pánico en el kernel) a través de un paquete ICMP manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:*:d45:*:*:*:*:*:*","versionEndIncluding":"12.1x46","matchCriteriaId":"CE3C59EA-3089-4693-980B-46969B38DFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*","matchCriteriaId":"0BB3DE56-1B04-4A53-B4A4-93286FC98463"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*","matchCriteriaId":"181C0D30-4476-48EE-A4A4-3B2461F4AC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*","matchCriteriaId":"63F559A2-2744-4771-9420-C70AA87496A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*","matchCriteriaId":"040A6307-236E-4FAA-9A74-676F1DB0CF17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*","matchCriteriaId":"350A0F1E-1057-4A8E-AB0B-7615B3877858"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d30:*:*:*:*:*:*","matchCriteriaId":"898DF03B-0E72-4E9A-8C93-926FC01A87DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d35:*:*:*:*:*:*","matchCriteriaId":"FEE85C83-E6FC-42DE-9857-A1FFA3A1B82A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*","matchCriteriaId":"6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*","matchCriteriaId":"E4AF5DAA-62F5-491F-A9CE-098970671D43"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"3FF9FF91-9184-4D18-8288-9110E35F4AE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*","matchCriteriaId":"0F2E537B-9504-4912-B231-0D83F4459469"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2-s2:*:*:*:*:*:*","matchCriteriaId":"99A946CE-FFC7-4F16-82F4-795A6E5B84C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*","matchCriteriaId":"4BCB3837-DCBC-4997-B63E-E47957584709"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*","matchCriteriaId":"6C88E2B1-469B-442B-9FC0-7C9408CE3917"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*","matchCriteriaId":"1FB5A368-E582-4DFD-87B4-C887DA908E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*","matchCriteriaId":"70ED0B93-2CFC-474F-B199-F78E1C67E8C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*","matchCriteriaId":"B8D270B6-1681-4EC5-9BC2-1312A50C8E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*","matchCriteriaId":"41DB14FA-0D58-4AE4-9324-310290F1F0F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*","matchCriteriaId":"6237291A-B861-4D53-B7AA-C53A44B76896"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"9C778627-820A-48F5-9680-0205D6DB5EB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"FA7F03DC-73A2-4760-B386-2A57E9C97E65"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"0CA10003-D52B-4110-9D7A-F50895E6BA17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*","matchCriteriaId":"1B2D843A-8ADE-4888-8960-B48394DEA1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*","matchCriteriaId":"3BE66516-A06D-4C0F-8346-DFC8865C8FE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*","matchCriteriaId":"EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*","matchCriteriaId":"25E5D543-D779-482D-AA8A-6E77C1949FBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*","matchCriteriaId":"9C7FCCC1-B151-465A-8327-26DB5DC074F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*","matchCriteriaId":"09771B8F-8B2A-4E8B-B4D3-80677697FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*","matchCriteriaId":"55E2F909-E1CC-45AA-ABA9-58178B751808"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*","matchCriteriaId":"E1AA12C5-4520-4F79-80BE-66112F7AFC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*","matchCriteriaId":"807C8110-5CC2-45F0-B094-BBF9C0B63BDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*","matchCriteriaId":"547E5737-D385-49B9-A69F-A3B185A34116"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*","matchCriteriaId":"2ED257ED-A56B-48A6-8568-65F36FFFC753"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*","matchCriteriaId":"74500FC7-EE82-4AA8-9A5F-15DE4835E337"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*","matchCriteriaId":"AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*","matchCriteriaId":"79149AA0-17D1-4522-894F-C025F7A30FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*","matchCriteriaId":"30726286-7CB1-4E5D-AE44-2B4D84795900"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*","matchCriteriaId":"33BE028F-2961-414A-9D42-C4861566C2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*","matchCriteriaId":"E85AB30C-03FC-44DB-A8AA-B916A905CA66"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*","matchCriteriaId":"D01CA25F-E1E1-4831-8561-D3B0300BF4A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*","matchCriteriaId":"1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*","matchCriteriaId":"0E0ECBD8-3D66-49DA-A557-5695159F0C06"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*","matchCriteriaId":"0EAA2998-A0D6-4818-9E7C-25E8099403E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*","matchCriteriaId":"2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*","matchCriteriaId":"D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*","matchCriteriaId":"0E6CD065-EC06-4846-BD2A-D3CA7866070F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*","matchCriteriaId":"C7620D01-1A6B-490F-857E-0D803E0AEE56"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*","matchCriteriaId":"18468579-0195-4DDE-BAA5-4BE4068F3A69"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*","matchCriteriaId":"870244F3-1C05-4F10-A205-5189BB860F46"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10752","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91755","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036306","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1280","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T14:05:06.237","lastModified":"2026-06-17T00:41:38.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D20, 13.3 before 13.3R10, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R7, 15.1 before 15.1R4, 15.1X49 before 15.1X49-D20, 15.1X53 before 15.1X53-D60, and 16.1 before 16.1R1 allow remote attackers to bypass an intended certificate validation mechanism via a self-signed certificate with an Issuer name that matches a valid CA certificate enrolled in Junos."},{"lang":"es","value":"PKId en Juniper Junos OS en versiones anteriores a 12.1X44-D52, 12.1X46 en versiones anteriores a 12.1X46-D37, 12.1X47 en versiones anteriores a 12.1X47-D30, 12.3 en versiones anteriores a 12.3R12, 12.3X48 en versiones anteriores a 12.3X48-D20, 13.3 en versiones anteriores a 13.3R10, 14.1 en versiones anteriores a 14.1R8, 14.1X53 en versiones anteriores a 14.1X53-D40, 14.2 en versiones anteriores a 14.2R7, 15.1 en versiones anteriores a 15.1R4, 15.1X49 en versiones anteriores a 15.1X49-D20, 15.1X53 en versiones anteriores a 15.1X53-D60 y 16.1 en versiones anteriores a 16.1R1 permiten a atacantes remotos eludir mecanismos destinados a la validación de certificados a través de un certificado auto-firmado con un nombre Issuer que concuerda con un certificado CA válido inscrito en Junos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-297"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:*:d50:*:*:*:*:*:*","versionEndIncluding":"12.1x44","matchCriteriaId":"71CECD22-5FB3-4439-88A0-F160D29E549A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*","matchCriteriaId":"CFB89F64-16BB-4A14-9084-B338668D7FF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*","matchCriteriaId":"A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*","matchCriteriaId":"4FD4237A-C257-4D8A-ABC4-9B2160530A4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*","matchCriteriaId":"5A449C87-C5C3-48FE-9E46-64ED5DD5F193"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*","matchCriteriaId":"F4B6215F-76BF-473F-B325-0975B0EB101E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*","matchCriteriaId":"A1C4A10C-49A3-4103-9E56-F881113BC5D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*","matchCriteriaId":"50E7FD07-A309-48EC-A520-C7F0FA35865C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*","matchCriteriaId":"0BB3DE56-1B04-4A53-B4A4-93286FC98463"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*","matchCriteriaId":"181C0D30-4476-48EE-A4A4-3B2461F4AC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*","matchCriteriaId":"63F559A2-2744-4771-9420-C70AA87496A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*","matchCriteriaId":"040A6307-236E-4FAA-9A74-676F1DB0CF17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*","matchCriteriaId":"350A0F1E-1057-4A8E-AB0B-7615B3877858"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8E014A0D-0054-4EBA-BA1F-035B74BD822F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*","matchCriteriaId":"371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*","matchCriteriaId":"661B4C1E-DB85-4EB0-B26F-F6496CEF0AA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*","matchCriteriaId":"F0DD051A-E486-4A9D-A978-A5A980AAF237"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*","matchCriteriaId":"7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*","matchCriteriaId":"C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*","matchCriteriaId":"960059B5-0701-4B75-AB51-0A430247D9F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*","matchCriteriaId":"1D1DCA52-DA81-495B-B516-5571F01E3B0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*","matchCriteriaId":"05E187F6-BACD-4DD5-B393-B2FE4349053A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*","matchCriteriaId":"3C240840-A6BC-4E3D-A60D-22F08E67E2B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*","matchCriteriaId":"CC90563F-6BCB-4D77-8FD4-584E3A6C7741"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*","matchCriteriaId":"5AD03BA7-D9EC-420F-97C4-383F79D6873F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3x50:*:*:*:*:*:*:*","matchCriteriaId":"BBB34C84-9E55-4D35-95DB-636E50275F5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*","matchCriteriaId":"E4AF5DAA-62F5-491F-A9CE-098970671D43"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"3FF9FF91-9184-4D18-8288-9110E35F4AE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*","matchCriteriaId":"0F2E537B-9504-4912-B231-0D83F4459469"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r2-s2:*:*:*:*:*:*","matchCriteriaId":"99A946CE-FFC7-4F16-82F4-795A6E5B84C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*","matchCriteriaId":"4BCB3837-DCBC-4997-B63E-E47957584709"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*","matchCriteriaId":"6C88E2B1-469B-442B-9FC0-7C9408CE3917"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*","matchCriteriaId":"1FB5A368-E582-4DFD-87B4-C887DA908E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*","matchCriteriaId":"70ED0B93-2CFC-474F-B199-F78E1C67E8C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*","matchCriteriaId":"B8D270B6-1681-4EC5-9BC2-1312A50C8E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*","matchCriteriaId":"41DB14FA-0D58-4AE4-9324-310290F1F0F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*","matchCriteriaId":"5617BE56-FAB0-4A26-B311-E4A6C506DE80"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*","matchCriteriaId":"6237291A-B861-4D53-B7AA-C53A44B76896"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"9C778627-820A-48F5-9680-0205D6DB5EB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"FA7F03DC-73A2-4760-B386-2A57E9C97E65"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"0CA10003-D52B-4110-9D7A-F50895E6BA17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*","matchCriteriaId":"1B2D843A-8ADE-4888-8960-B48394DEA1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*","matchCriteriaId":"3BE66516-A06D-4C0F-8346-DFC8865C8FE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*","matchCriteriaId":"EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*","matchCriteriaId":"25E5D543-D779-482D-AA8A-6E77C1949FBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*","matchCriteriaId":"09771B8F-8B2A-4E8B-B4D3-80677697FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*","matchCriteriaId":"55E2F909-E1CC-45AA-ABA9-58178B751808"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*","matchCriteriaId":"E1AA12C5-4520-4F79-80BE-66112F7AFC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*","matchCriteriaId":"807C8110-5CC2-45F0-B094-BBF9C0B63BDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*","matchCriteriaId":"547E5737-D385-49B9-A69F-A3B185A34116"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*","matchCriteriaId":"2ED257ED-A56B-48A6-8568-65F36FFFC753"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*","matchCriteriaId":"74500FC7-EE82-4AA8-9A5F-15DE4835E337"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*","matchCriteriaId":"AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*","matchCriteriaId":"D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*","matchCriteriaId":"79149AA0-17D1-4522-894F-C025F7A30FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*","matchCriteriaId":"30726286-7CB1-4E5D-AE44-2B4D84795900"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*","matchCriteriaId":"33BE028F-2961-414A-9D42-C4861566C2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*","matchCriteriaId":"E85AB30C-03FC-44DB-A8AA-B916A905CA66"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*","matchCriteriaId":"D01CA25F-E1E1-4831-8561-D3B0300BF4A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*","matchCriteriaId":"A117A0D6-6356-49DF-8B21-F6D47C6B8E94"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*","matchCriteriaId":"D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*","matchCriteriaId":"0E6CD065-EC06-4846-BD2A-D3CA7866070F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*","matchCriteriaId":"C7620D01-1A6B-490F-857E-0D803E0AEE56"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*","matchCriteriaId":"6E87C765-8D68-404A-AC71-3F22A7260E8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*","matchCriteriaId":"1E3B807C-196D-42B8-9042-7582A1366772"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*","matchCriteriaId":"83FEEE8F-9279-46F2-BAF9-A60537020C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*","matchCriteriaId":"1F294E43-73FA-4EF3-90F2-EE29C56D6573"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*","matchCriteriaId":"EDDE1048-BFEA-4A3E-8270-27C538A68837"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*","matchCriteriaId":"CC517CD0-FF35-498F-AD33-683B43CA3829"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*","matchCriteriaId":"53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2AC40ABB-E364-46C9-A904-C0ED02806250"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10755","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91761","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036303","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6212","sourceIdentifier":"cve@mitre.org","published":"2016-09-09T14:05:09.550","lastModified":"2026-06-17T00:50:38.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors."},{"lang":"es","value":"El módulo Views 7.x-3.x en versiones anteriores a 7.x-3.14 en Drupal 7.x y el módulo Views en Drupal 8.x en versiones anteriores a 8.1.3 podrían permitir a usuarios remotos autenticados eludir restricciones destinadas al acceso y obtener información de Statistics sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*","matchCriteriaId":"48C33CAB-4633-418C-B162-20A2EC24E8DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"CC3B1750-17AD-4386-B6EE-1AFC9CDFB6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"9E0C1873-22A6-4CE9-853D-2A40BD3D9E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"9F6DF608-0DA2-455F-AD28-7BE4A7548E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"7BCC306D-EB5D-4784-B0B1-B4F9370796F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"5639A5F3-CD18-451C-BA5A-3336C42BED83"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"5B0A10CA-F59E-48AC-97E9-8476F63BAEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"07B7917C-5934-4AFF-B3DB-BE9B099B27FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"16731B53-3CD1-4B98-947B-7621162D8DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"BD738402-A50E-4AEB-8F42-607F52DE5540"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*","matchCriteriaId":"199AC10C-6E65-409B-8658-E26240B27E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*","matchCriteriaId":"2B378BEF-B070-4955-A6B3-8F2ACBA96832"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"19EC9A36-5EDC-4519-802E-BEA69B18800A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"8C281EA7-8AE1-4D5A-B03B-B3BE37740195"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*","matchCriteriaId":"024CF5B1-1875-4785-ACAF-35ECCC7914A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5F446903-51AC-4FA3-BA90-C2EA59BBDB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1FE86CC5-956E-4F16-BE7B-2B1CAAEB5C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F0AC1B21-D3BE-4B6A-AE40-8B395E81DD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*","matchCriteriaId":"7E5E8A73-1C02-4900-BC30-83084DC8371C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*","matchCriteriaId":"A92A41E3-BF0F-49BD-9F0F-5FDC11BF2499"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*","matchCriteriaId":"937C3149-3F34-40D8-964D-FB65EBDF0BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*","matchCriteriaId":"90CD183A-3777-44F9-8CA6-8E802058D099"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*","matchCriteriaId":"68C0CC63-558B-4750-8293-926BE9EAD42C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*","matchCriteriaId":"CA66BCA5-3934-449E-BAD3-D0DFBF4A04BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*","matchCriteriaId":"5030281C-CD4F-4106-A100-332A4C3C2AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D408134A-29E8-4D6A-9352-DB7F9CF55FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*","matchCriteriaId":"3B08C41E-2357-44D5-A3A7-75389B343B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*","matchCriteriaId":"E9F40588-308A-4BA7-AE62-5DCC7D7528EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*","matchCriteriaId":"E41BD65A-F39B-42C5-8776-CE09345A531D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*","matchCriteriaId":"CBAFBC02-38E9-41F3-8944-6F6AB0A85941"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*","matchCriteriaId":"9069C99D-C935-4272-B7F4-172CFD246835"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*","matchCriteriaId":"41BE2EAA-CC60-4EFA-9E75-61EDA0EB69B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*","matchCriteriaId":"71CABDC4-0E47-4E33-9075-79E0D59D9A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*","matchCriteriaId":"74A5893C-A855-4C49-A17A-83B6172C0496"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*","matchCriteriaId":"4048A2C7-9646-42E3-9D4B-DE9CF4AC66C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:*","matchCriteriaId":"2C915139-9B3A-4583-99A9-3447ACEF9E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:*","matchCriteriaId":"01BE6A75-15F2-416C-9EBB-6FDD995C7399"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D82630-555A-43CE-986D-2D15DD8A68F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:*","matchCriteriaId":"AB9F1B32-B3C0-47AB-96C1-0AEF7A96744A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:*","matchCriteriaId":"A23E72D9-9301-4CF8-A083-0AEC91F2845E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:*","matchCriteriaId":"983636D8-084A-40AA-8EEA-39D4D39EA056"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:*","matchCriteriaId":"5FEAA6C1-D2F5-4C7A-AEEA-FEDD52F039B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:*","matchCriteriaId":"BCAC8831-637A-49B7-9DFD-93965D0944A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:*","matchCriteriaId":"247FF6EA-E8E8-4AC9-BC03-6D8929DC60EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:*","matchCriteriaId":"73AAA716-1DB3-4D38-A52B-F579EE5627AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:*","matchCriteriaId":"18257E82-134E-4B4B-9AA4-997582A6FE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.31:*:*:*:*:*:*:*","matchCriteriaId":"C53AC67F-07A4-4DDF-9A21-AAC32E388454"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.32:*:*:*:*:*:*:*","matchCriteriaId":"E350D8C6-5618-4C7E-8D0D-D448B7B485EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:*","matchCriteriaId":"42224177-DEFC-4A23-9707-0C2A96902FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:*","matchCriteriaId":"2C0017C6-C985-4F0C-89C4-198063DAB3FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:*","matchCriteriaId":"EA2A100A-4579-4E32-9ED1-54E6063032CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:*","matchCriteriaId":"9B41BB85-CED1-4CED-A56E-A58A22AAE4CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:*","matchCriteriaId":"19437699-98F7-40EC-B0F9-502CA8126749"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:*","matchCriteriaId":"3697FD64-0D39-45E0-B91E-6190B13CE8AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.39:*:*:*:*:*:*:*","matchCriteriaId":"C6449B24-7C8B-4035-8254-5EDFBE1C3ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.40:*:*:*:*:*:*:*","matchCriteriaId":"29B0AE8A-97A8-4105-B0E8-5CABBFD50587"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.41:*:*:*:*:*:*:*","matchCriteriaId":"AC8AB4B2-AC8C-4E15-BA79-760871794944"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.42:*:*:*:*:*:*:*","matchCriteriaId":"F0389B8B-AF62-42DE-8A3E-2FAFA39CAA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.43:*:*:*:*:*:*:*","matchCriteriaId":"BC15097C-4361-4045-872E-23616B01E8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"0F860666-578F-4B48-ABCA-1B5F2697DEAB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3C20DAD7-13A7-40F7-B6E0-965DB4E14508"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha10:*:*:*:*:*:*","matchCriteriaId":"144694E6-3287-4F4D-A687-7F495133DBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha11:*:*:*:*:*:*","matchCriteriaId":"581D686B-1061-4271-BEF4-17A429BD666A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha12:*:*:*:*:*:*","matchCriteriaId":"E3E45AA6-5FAF-4C63-91F5-0765CE60191A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha13:*:*:*:*:*:*","matchCriteriaId":"FE5D81CF-AE7B-4A9C-AD8F-9A19D2AC35DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha14:*:*:*:*:*:*","matchCriteriaId":"A27535A5-7C4F-4548-A4B8-5FFBD58361D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha15:*:*:*:*:*:*","matchCriteriaId":"17BC6508-3518-4BB5-B29F-4E6CB6DE9D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"8CBB5620-5847-443F-8356-B66EE93A3779"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"3E81260D-E0D2-4FD2-AAED-99945404EB00"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"5A7D34E6-76E0-4BCB-A4C8-9401C7331EF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"201E2EA9-B811-4BB2-867A-6F12DC472911"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"C957B189-10C2-4D42-B5B9-03F7DE287C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"A7E21838-CDEC-41B2-AE40-C78DE8984B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha8:*:*:*:*:*:*","matchCriteriaId":"639F0284-85D1-40B0-B337-77632E7A664B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha9:*:*:*:*:*:*","matchCriteriaId":"5F4B611A-3628-41EA-878D-BF9D6C34AA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"856E46E5-1BF3-42F4-AFCB-81275B1EF265"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta10:*:*:*:*:*:*","matchCriteriaId":"B351F769-598F-4E3E-99EA-94A5516995A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta11:*:*:*:*:*:*","matchCriteriaId":"220900E6-5859-4CA9-831E-3FF3C128F060"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta12:*:*:*:*:*:*","matchCriteriaId":"0D55D51E-DE2D-469C-9F9C-F312A02EE921"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta13:*:*:*:*:*:*","matchCriteriaId":"259B5FE7-2808-4F61-B98C-73ECC7F9503C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta14:*:*:*:*:*:*","matchCriteriaId":"BA263BE6-2088-4E18-914B-96CFAA0093E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta15:*:*:*:*:*:*","matchCriteriaId":"906AED87-8C5C-4214-B5AD-43E5573E357A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta16:*:*:*:*:*:*","matchCriteriaId":"E150FDA8-5271-465C-8DE0-F44E9FC81E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"4E036D4F-BD94-4F77-883C-165B3F0802C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7A7068F8-810D-4720-9E0E-06DB1DD366ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"443183F6-9EF5-41AE-8AD0-B304BBF1670A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"58C5EF43-E24F-4BDB-9496-16DE4EEF3E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta7:*:*:*:*:*:*","matchCriteriaId":"B00B494B-736A-47A7-ACF3-81368C033086"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta9:*:*:*:*:*:*","matchCriteriaId":"E275F22B-7A46-4107-BE6F-6C4D7EAA46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"63530139-7EF2-4210-9870-B06175ECBC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ED085089-51D6-4E5C-96E8-CC5C7C55CC97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"36FC67CE-9C45-4842-81AF-EEAE557D70D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5FE6AC83-B248-4491-A320-836C65E64D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"99D7F3C7-3EC6-48D2-A8D5-1F987FD74A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"434D4D80-44C0-4278-A09B-005A599F4658"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2CF1BC91-4A24-40FC-8EEC-E4FAD624C2CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"43067661-B562-41BC-B272-8A79075291B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EA9EF375-AE7C-4900-A992-C635228889E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"53FA0C7F-000A-4CB4-86E3-DEC0C9DCA1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E39B2B71-C1B8-4A16-88FE-D691CC3C9BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"535BC461-E9B1-4124-8125-1D9F91CF4F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"06F63C7F-CE02-428D-90CD-05B726C0026D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F18278D5-A30B-4624-AC64-CA39F92EB8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3F72CAF-2BCA-454D-B8AC-951EC566A965"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E0C7CB5D-CE55-4628-957D-3D2C5EE2353B"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/4","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/7","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91230","source":"cve@mitre.org"},{"url":"https://www.drupal.org/SA-CORE-2016-002","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.drupal.org/node/2749333","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.drupal.org/SA-CORE-2016-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.drupal.org/node/2749333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5147","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-11T10:59:00.143","lastModified":"2026-06-17T00:48:50.757","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka \"Universal XSS (UXSS).\""},{"lang":"es","value":"Blink, tal como se utiliza en Google Chrome en versiones anteriores a 53.0.2785.89 en Windows y SO X y en versiones anteriores a 53.0.2785.92 en Linux, no maneja correctamente las cargas de página diferida, lo que permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un sitio web manipulado, vulnerabilidad también conocida como \"Universal XSS (UXSS)\"."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"52.0.2743.116","matchCriteriaId":"2B9B1F3E-5ED5-490F-9AB5-B2065C2C99FF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92717","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036729","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2155393002","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2169453002","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2174263002/","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2183423002/","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2190523002/","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2242923002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/628942","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2155393002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2169453002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2174263002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2183423002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2190523002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2242923002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/628942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5148","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-11T10:59:02.613","lastModified":"2026-06-17T00:48:50.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka \"Universal XSS (UXSS).\""},{"lang":"es","value":"Vulnerabilidad de XSS en Blink, tal como se utiliza en Google Chrome en versiones anteriores a 53.0.2785.89 en Windows y SO X y en versiones anteriores a 53.0.2785.92 en Linux, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores relacionados con actualizaciones de widget, vulnerabilidad también conocida como \"Universal XSS (UXSS)\"."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"52.0.2743.116","matchCriteriaId":"2B9B1F3E-5ED5-490F-9AB5-B2065C2C99FF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92717","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036729","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2134113002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/621362","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2134113002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/621362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5155","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-11T10:59:10.990","lastModified":"2026-06-17T00:48:51.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site."},{"lang":"es","value":"Google Chrome en versiones anteriores a 53.0.2785.89 en Windows y SO X y en versiones anteriores a 53.0.2785.92 en Linux no valida apropiadamente el acceso al documento inicial, lo que permite a atacantes remotos suplantar la barra de dirección a través de un sitio web manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"52.0.2743.116","matchCriteriaId":"2B9B1F3E-5ED5-490F-9AB5-B2065C2C99FF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92717","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036729","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2177233002/","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2209303002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/630662","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2177233002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2209303002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/630662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5160","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-11T10:59:16.850","lastModified":"2026-06-17T00:48:52.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5162."},{"lang":"es","value":"La función AllowCrossRendererResourceLoad en extensions/browser/url_request_util.cc en Google Chrome en versiones anteriores a 53.0.2785.89 en Windows y SO X y en versiones anteriores a 53.0.2785.92 en Linux no se utiliza adecuadamente el campo web_accessible_resources en la extensión manifest.json para restricciones en elementos IFRAME, lo que facilita a atacantes remotos llevar a cabo ataques de clickjacking y engañar a usuarios para cambiar ajustes de extensión, a través de un sitio web manipulado, una vulnerabilidad diferente a CVE-2016-5162."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"52.0.2743.116","matchCriteriaId":"2B9B1F3E-5ED5-490F-9AB5-B2065C2C99FF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92717","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036729","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2007133004","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/576867","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2007133004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/576867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5162","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-11T10:59:18.803","lastModified":"2026-06-17T00:48:52.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160."},{"lang":"es","value":"La función AllowCrossRendererResourceLoad en extensions/browser/url_request_util.cc en Google Chrome en versiones anteriores a 53.0.2785.89 en Windows y SO X y en versiones anteriores a 53.0.2785.92 en Linux no se utiliza adecuadamente el campo web_accessible_resources en la extensión manifest.json para restricciones en elementos IFRAME, lo que facilita a atacantes remotos llevar a cabo ataques de clickjacking y engañar a usuarios para cambiar ajustes de extensión, a través de un sitio web manipulado, una vulnerabilidad diferente a CVE-2016-5160."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"52.0.2743.116","matchCriteriaId":"2B9B1F3E-5ED5-490F-9AB5-B2065C2C99FF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92717","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036729","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2007133004","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/589237","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2007133004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/589237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5163","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-11T10:59:19.817","lastModified":"2026-06-17T00:48:53.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android."},{"lang":"es","value":"La implementación de texto bidireccional en Google Chrome en versiones anteriores a 53.0.2785.89 en Windows y SO X y en versiones anteriores a 53.0.2785.92 en Linux no asegura la renderización left-to-right (LTR) de URLs, lo que permite a atacantes remotos suplantar la barra de dirección a través de texto Unicode left-to-right (RTL), relacionado con omnibox/SuggestionView.java y omnibox/UrlBar.java en Chrome para Android."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"52.0.2743.116","matchCriteriaId":"2B9B1F3E-5ED5-490F-9AB5-B2065C2C99FF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92717","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036729","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1988553002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/495933","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/609680","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1988553002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/495933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/609680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5164","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-11T10:59:20.850","lastModified":"2026-06-17T00:48:53.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka \"Universal XSS (UXSS).\""},{"lang":"es","value":"Vulnerabilidad de XSS en WebKit/Source/platform/v8_inspector/V8Debugger.cpp en Blink, tal como se utiliza en Google Chrome en versiones anteriores a 53.0.2785.89 en Windows y SO X y en versiones anteriores a 53.0.2785.92 en Linux, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios en el subsistema Developer Tools (también conocido como DevTools) a través de un sitio web manipulado, vulnerabilidad también conocida como \"Universal XSS (UXSS)\"."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"52.0.2743.116","matchCriteriaId":"2B9B1F3E-5ED5-490F-9AB5-B2065C2C99FF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92717","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036729","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2253643002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/637594","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2253643002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/637594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5165","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-11T10:59:22.117","lastModified":"2026-06-17T00:48:53.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a chrome-devtools-frontend.appspot.com URL's query string."},{"lang":"es","value":"Vulnerabilidad de XSS en el subsistema Developer Tools (también conocido como DevTools) en Google Chrome en versiones anteriores a 53.0.2785.89 en Windows y SO X y en versiones anteriores a 53.0.2785.92 en Linux permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro de ajustes en una cadena query de URLs chrome-devtools-frontend.appspot.com."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"52.0.2743.116","matchCriteriaId":"2B9B1F3E-5ED5-490F-9AB5-B2065C2C99FF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92717","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036729","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2177983004","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/618037","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1854.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2177983004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/618037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3875","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:18.557","lastModified":"2026-06-17T00:46:29.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"server/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the DISALLOW_SAFE_BOOT setting, which allows physically proximate attackers to bypass intended access restrictions and boot to safe mode via unspecified vectors, aka internal bug 26251884."},{"lang":"es","value":"server/wm/WindowManagerService.java en Android 6.x en versiones anteriores a 2016-09-01 no hace cumplir el ajuste DISALLOW_SAFE_BOOT, lo que permite a atacantes próximos físicamente eludir restricciones destinadas al acceso y arrancar en modo seguro a través de vectores no especificados, vulnerabilidad también conocida como error interno 26251884."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92818","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/69729fa8b13cadbf3173fe1f389fe4f3b7bd0f9c","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/69729fa8b13cadbf3173fe1f389fe4f3b7bd0f9c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3876","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:19.777","lastModified":"2026-06-17T00:46:29.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the SAFE_BOOT_DISALLOWED protection mechanism and boot to safe mode via the Android Debug Bridge (adb) tool, aka internal bug 29900345."},{"lang":"es","value":"providers/settings/SettingsProvider.java en Android 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 permite a atacantes próximos físicamente eludir el mecanismo de protección SAFE_BOOT_DISALLOWED y arrancar en modo seguro a través de la herramienta Android Debug Bridge (adb), vulnerabilidad también conocida como error interno 29900345."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92819","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/91fc934bb2e5ea59929bb2f574de6db9b5100745","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/91fc934bb2e5ea59929bb2f574de6db9b5100745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3878","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:22.227","lastModified":"2026-06-17T00:46:29.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 29493002."},{"lang":"es","value":"decoder/ih264d_api.c en mediaserver en Android 6.x en versiones anteriores a 2016-09-01 no maneja correctamente el caso de decodificar MBs cero, lo que permite a atacantes remotos provocar una denegación de servicio (cuelgue o reinicio del dispositivo) a través de un archivo multimedia manipulado, vulnerabilidad también conocida como error interno 29493002."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/external/libavc/+/7109ce3f8f90a28ca9f0ee6e14f6ac5e414c62cf","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/libavc/+/7109ce3f8f90a28ca9f0ee6e14f6ac5e414c62cf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3879","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:23.277","lastModified":"2026-06-17T00:46:30.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"arm-wt-22k/lib_src/eas_mdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial of service (NULL pointer dereference, and device hang or reboot) via a crafted media file, aka internal bug 29770686."},{"lang":"es","value":"arm-wt-22k/lib_src/eas_mdls.c en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-09-01 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y cuelgue o reinicio del dispositivo) a través de un archivo multimedia manipulado, vulnerabilidad también conocida como error interno 29770686."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/external/sonivox/+/cadfb7a3c96d4fef06656cf37143e1b3e62cae86","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/sonivox/+/cadfb7a3c96d4fef06656cf37143e1b3e62cae86","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3880","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:24.730","lastModified":"2026-06-17T00:46:30.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allow remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 25747670."},{"lang":"es","value":"Múltiples desbordamientos de búfer en rtsp/ASessionDescription.cpp en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 permiten a atacantes remotos provocar una denegación de servicio (cuelgue o reinicio del dispositivo) a través de un archivo multimedia manipulado, vulnerabilidad también conocida como error interno 25747670."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/68f67ef6cf1f41e77337be3bc4bff91f3a3c6324","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/68f67ef6cf1f41e77337be3bc4bff91f3a3c6324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3881","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:25.887","lastModified":"2026-06-17T00:46:30.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows remote attackers to cause a denial of service (buffer over-read, and device hang or reboot) via a crafted media file, aka internal bug 30013856."},{"lang":"es","value":"La función decoder_peek_si_internal en vp9/vp9_dx_iface.c en libvpx en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 permite a atacantes remotos provocar una denegación de servicio (sobrelectura de búfer y cuelgue o reinicio del dispositivo) a través de un archivo multimedia manipulado, vulnerabilidad también conocida como error interno 30013856."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/external/libvpx/+/4974dcbd0289a2530df2ee2a25b5f92775df80da","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/libvpx/+/4974dcbd0289a2530df2ee2a25b5f92775df80da","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3883","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:27.040","lastModified":"2026-06-17T00:46:30.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"internal/telephony/SMSDispatcher.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not properly construct warnings about premium SMS messages, which allows attackers to spoof the premium-payment confirmation dialog via a crafted application, aka internal bug 28557603."},{"lang":"es","value":"internal/telephony/SMSDispatcher.java en Telephony en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 no construye adecuadamente alertas sobre mensajes SMS premium, lo que permite a atacantes suplantar el diálogo de confirmación del pago premium a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 28557603."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92861","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/b2c89e6f8962dc7aff88cb38aa3ee67d751edda9","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/b2c89e6f8962dc7aff88cb38aa3ee67d751edda9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3884","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:28.073","lastModified":"2026-06-17T00:46:30.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"server/notification/NotificationManagerService.java in the Notification Manager Service in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 lacks uid checks, which allows attackers to bypass intended restrictions on method calls via a crafted application, aka internal bug 29421441."},{"lang":"es","value":"server/notification/NotificationManagerService.java en el Notification Manager Service en Android 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 carece de comprobaciones uid, lo que permite a atacantes eludir las restricciones destinadas a llamadas al método a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 29421441."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92875","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/61e9103b5725965568e46657f4781dd8f2e5b623","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/61e9103b5725965568e46657f4781dd8f2e5b623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3886","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:30.683","lastModified":"2026-06-17T00:46:30.833","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate attackers to gain privileges by modifying a setting, aka internal bug 30107438."},{"lang":"es","value":"systemui/statusbar/phone/QuickStatusBarHeader.java en el System UI Tuner en Android 7.0 en versiones anteriores a 2016-09-01 no previene cambios en el sintonizador en la pantalla de bloqueo, lo que permite a atacantes próximos físicamente obtener privilegios mediante la modificación de un ajuste, vulnerabilidad también conocida como error interno 30107438."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92860","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/6ca6cd5a50311d58a1b7bf8fbef3f9aa29eadcd5","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/6ca6cd5a50311d58a1b7bf8fbef3f9aa29eadcd5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3889","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:33.887","lastModified":"2026-06-17T00:46:31.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism by accessing (1) an external tile from a system application, (2) the help feature, or (3) the Settings application during a pre-setup stage, aka internal bug 29194585."},{"lang":"es","value":"Android 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 permite a atacantes próximos físicamente eludir el mecanismo de protección Factory Reset Protection mediante el acceso a (1) un azulejo externo de una aplicación de sistema, (2) la funcionalidad de ayuda o (3) la aplicación Settings durante la etapa de preconfiguración, también conocido como error interno 29194585."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92854","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/e206f02d46ae5e38c74d138b51f6e1637e261abe","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"https://android.googlesource.com/platform/packages/apps/Settings/+/bd5d5176c74021e8cf4970f93f273ba3023c3d72","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/e206f02d46ae5e38c74d138b51f6e1637e261abe","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://android.googlesource.com/platform/packages/apps/Settings/+/bd5d5176c74021e8cf4970f93f273ba3023c3d72","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3892","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:36.247","lastModified":"2026-06-17T00:46:31.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Qualcomm SPMI driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28760543 and Qualcomm internal bug CR1024197."},{"lang":"es","value":"El controlador Qualcomm SPMI en Android en versiones anteriores a 2016-09-05 en dispositivos Nexus 5, 5X, 6 y 6P permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno de Android 28760543 y error interno de Qualcomm CR1024197."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92878","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3893","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:37.637","lastModified":"2026-06-17T00:46:31.483","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29512527 and Qualcomm internal bug CR856400."},{"lang":"es","value":"La función wcdcal_hwdep_ioctl_shared en sound/soc/codecs/wcdcal-hwdep.c en el códec de sonido Qualcomm en Android en versiones anteriores a 2016-09-05 en dispositivos Nexus 6P no copia adecuadamente datos de firmware, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno de Android 29512527 y error interno de Qualcomm CR856400."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92884","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=a7a6ddc91cce7ad5ad55c9709b24bfc80f5ac873","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=a7a6ddc91cce7ad5ad55c9709b24bfc80f5ac873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3894","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:38.620","lastModified":"2026-06-17T00:46:31.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29618014 and Qualcomm internal bug CR1042033."},{"lang":"es","value":"El componente DMA Qualcomm en Android en versiones anteriores a 2016-09-05 en dispositivos Nexus 6 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno de Android 29618014 y error interno de Qualcomm CR1042033."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92880","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3895","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:39.543","lastModified":"2026-06-17T00:46:31.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260."},{"lang":"es","value":"Desbordamiento de entero en la función Region::unflatten en libs/ui/Region.cpp en mediaserver en Android 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 29983260."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/native/+/363247929c35104b3e5ee9e637e9dcf579080aee","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/native/+/363247929c35104b3e5ee9e637e9dcf579080aee","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3896","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:40.950","lastModified":"2026-06-17T00:46:31.790","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows attackers to obtain sensitive EmailAccountCacheProvider information via a crafted application, aka internal bug 29767043."},{"lang":"es","value":"AOSP Mail en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-09-01 permite a atacantes obtener información sensible de EmailAccountCacheProvider a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 29767043."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92848","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/packages/apps/Email/+/cb2dfe43f25cb0c32cc73aa4569c0a5186a4ef43","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/packages/apps/Email/+/cb2dfe43f25cb0c32cc73aa4569c0a5186a4ef43","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3897","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:42.183","lastModified":"2026-06-17T00:46:31.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The WifiEnterpriseConfig class in net/wifi/WifiEnterpriseConfig.java in Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 includes a password in the return value of a toString method call, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 25624963."},{"lang":"es","value":"La clase WifiEnterpriseConfig en net/wifi/WifiEnterpriseConfig.java en Wi-Fi en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-09-01 incluye una contraseña en el valor de retorno de una llamada al método toString, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 25624963."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92842","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/55271d454881b67ff38485fdd97598c542cc2d55","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"https://android.googlesource.com/platform/frameworks/base/+/81be4e3aac55305cbb5c9d523cf5c96c66604b39","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/55271d454881b67ff38485fdd97598c542cc2d55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://android.googlesource.com/platform/frameworks/base/+/81be4e3aac55305cbb5c9d523cf5c96c66604b39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3898","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:43.217","lastModified":"2026-06-17T00:46:32.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to cause a denial of service (loss of locked-screen 911 TTY functionality) via a crafted application that modifies the TTY mode by broadcasting an intent, aka internal bug 29832693."},{"lang":"es","value":"Telephony en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 permite a atacantes provocar una denegación de servicio (pérdida de la funcionalidad 911 TTY de bloqueo de pantalla) a través de una aplicación manipulada que modifica el modo TTY mediante la trasmisión de un intento, vulnerabilidad también conocida como error interno 29832693."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/packages/services/Telephony/+/d1d248d10cf03498efb7041f1a8c9c467482a19d","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/packages/services/Telephony/+/d1d248d10cf03498efb7041f1a8c9c467482a19d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3899","sourceIdentifier":"security@android.com","published":"2016-09-11T21:59:44.373","lastModified":"2026-06-17T00:46:32.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OMXCodec.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not validate a certain pointer, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 29421811."},{"lang":"es","value":"OMXCodec.cpp en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 no valida un determinado puntero, lo que permite a atacantes remotos provocar una denegación de servicio (cuelgue o reinicio del dispositivo) a través de un archivo multimedia manipulado, vulnerabilidad también conocida como error interno 29421811."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"security@android.com"},{"url":"http://www.securitytracker.com/id/1036763","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/97837bb6cbac21ea679843a0037779d3834bed64","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/97837bb6cbac21ea679843a0037779d3834bed64","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-6375","sourceIdentifier":"psirt@cisco.com","published":"2016-09-12T01:59:01.130","lastModified":"2026-06-17T00:50:55.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote attackers to cause a denial of service (device reload) by sending crafted Inter-Access Point Protocol (IAPP) packets and then sending a traffic stream metrics (TSM) information request over SNMP, aka Bug ID CSCuz40221."},{"lang":"es","value":"Dispositivos Cisco Wireless LAN Controller (WLC) en versiones anteriores a 8.0.140.0, 8.1.x y 8.2.x en versiones anteriores a 8.2.121.0 y 8.3.x en versiones anteriores a 8.3.102.0 permiten a atacantes remotos provocar una denegación de servicio (recarga del dispositivo) mediante el envío de paquetes Inter-Access Point Protocol (IAPP) manipulados y después, el envío de peticiones de información de métricas de flujo de tráfico (TSM) a través de SNMP, vulnerabilidad también conocida como Bug ID CSCuz40221."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:N/I:N/A:C","baseScore":5.7,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_controller_software:8.0.72.140:*:*:*:*:*:*:*","matchCriteriaId":"C7FFA694-78D1-48A6-BFAC-EB101A636AC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.0_base:*:*:*:*:*:*:*","matchCriteriaId":"127638A2-6E17-4228-8681-89382AC8CE1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.1.59.24:*:*:*:*:*:*:*","matchCriteriaId":"296F88C9-6874-44E2-B9D1-B3E1989660FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.1.105.0:*:*:*:*:*:*:*","matchCriteriaId":"2C57126D-D6BE-4602-885C-04D7CCEE3FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.1.111.0:*:*:*:*:*:*:*","matchCriteriaId":"3D85E98B-4FAD-42B4-9A78-B5155992249E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.78.0:*:*:*:*:*:*:*","matchCriteriaId":"E2486222-1595-4FA2-80E8-8EE996C11CD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.116.21:*:*:*:*:*:*:*","matchCriteriaId":"D3A79CB6-6094-46AC-8574-FF6DC7FB592C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.150.6:*:*:*:*:*:*:*","matchCriteriaId":"2A558875-504D-4D2F-BF48-F29ABCCF6840"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.150.10:*:*:*:*:*:*:*","matchCriteriaId":"D3C646C8-021E-4F3E-8580-C364A6FF6B8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.171.5:*:*:*:*:*:*:*","matchCriteriaId":"53DCF441-096D-444D-8995-FF71EC149471"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.171.6:*:*:*:*:*:*:*","matchCriteriaId":"16AB56C1-1DB9-454E-836B-8AA56C4309FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.185.0:*:*:*:*:*:*:*","matchCriteriaId":"7E918087-75F7-4742-B9B9-39FEE3A069A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.193.5:*:*:*:*:*:*:*","matchCriteriaId":"7BD0A4A5-A9A4-46A9-BDE0-5203864D4E5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.195.10:*:*:*:*:*:*:*","matchCriteriaId":"4B431407-D4A7-4A9A-8C9F-5E8C1D162149"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:3.6.0e:*:*:*:*:*:*:*","matchCriteriaId":"1119C3DB-A423-46B8-8E21-558D3AE0F8A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.108:*:*:*:*:*:*:*","matchCriteriaId":"E23E6B23-2DFC-4959-B69D-35B12A3674C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.155.0:*:*:*:*:*:*:*","matchCriteriaId":"8F9E44A7-9C79-4937-B929-D7CD48969D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.155.5:*:*:*:*:*:*:*","matchCriteriaId":"D91822EB-04F3-4590-9E74-C173D332FF64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.179.8:*:*:*:*:*:*:*","matchCriteriaId":"328B192D-6070-46C9-9B5E-E2D19197516E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.179.11:*:*:*:*:*:*:*","matchCriteriaId":"9AEB928B-97EC-490F-A313-B565FB67C8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.196:*:*:*:*:*:*:*","matchCriteriaId":"27C3E9DF-439E-4319-BFA3-14D756069FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.206.0:*:*:*:*:*:*:*","matchCriteriaId":"546C8A02-3C19-4AE8-98D6-D24342306764"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.217.0:*:*:*:*:*:*:*","matchCriteriaId":"D882A253-143C-4561-B0CA-209D48A995F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.219.0:*:*:*:*:*:*:*","matchCriteriaId":"2AA48A99-0ED5-4FEB-8906-B68D4C5C702E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.1.171.0:*:*:*:*:*:*:*","matchCriteriaId":"81CC513E-95EA-4FA0-AD70-25C51155AD26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.1.181.0:*:*:*:*:*:*:*","matchCriteriaId":"272C20B5-3EA4-4AFD-ACD6-15A8ABA73C83"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.1.185.0:*:*:*:*:*:*:*","matchCriteriaId":"11F235E4-673A-4EC4-98F6-423C68919AB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.1_base:*:*:*:*:*:*:*","matchCriteriaId":"D16474F8-F7CC-445F-AB14-D8EB5CBB8A3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.61.0:*:*:*:*:*:*:*","matchCriteriaId":"9A15A3CA-69E7-451D-AB84-43A6BBF17A2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.99.0:*:*:*:*:*:*:*","matchCriteriaId":"62424F6A-2D82-45C0-A7D3-540649DA5F5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.112.0:*:*:*:*:*:*:*","matchCriteriaId":"8A17769C-A301-4BC9-A2B1-E442F78030C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.117.0:*:*:*:*:*:*:*","matchCriteriaId":"F2290101-AEFA-4C4F-B8CE-620BDE6EA3F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.130.0:*:*:*:*:*:*:*","matchCriteriaId":"0947448E-D8C5-423D-BDF3-36BD29A83ABE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.173.0:*:*:*:*:*:*:*","matchCriteriaId":"57C6B8CB-9277-463B-84EB-AEF36EE40E7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.174.0:*:*:*:*:*:*:*","matchCriteriaId":"DDBD9C2D-514C-44D3-ADCD-D6F80E50BEF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.176.0:*:*:*:*:*:*:*","matchCriteriaId":"7A97D98B-6B3C-4AD1-8096-202E44F63B72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.182.0:*:*:*:*:*:*:*","matchCriteriaId":"1C29D759-F433-42FB-ADA5-8FEA71085CC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2_base:*:*:*:*:*:*:*","matchCriteriaId":"26E0529E-C01C-4916-984F-B83C91CE3099"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.0.148.0:*:*:*:*:*:*:*","matchCriteriaId":"1BAACE0C-DD44-4E81-ABEF-7896647CE8C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.0.148.2:*:*:*:*:*:*:*","matchCriteriaId":"5140A4F1-713E-4478-B807-83D826DAA374"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.1.151.0:*:*:*:*:*:*:*","matchCriteriaId":"2143731F-749D-45ED-B2FE-A3893C5B1F6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.1.152.0:*:*:*:*:*:*:*","matchCriteriaId":"0C860DDD-33C6-4CC9-B8D2-4E3C9884C445"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.1.160.0:*:*:*:*:*:*:*","matchCriteriaId":"A2230FF3-EE71-408A-B558-74AAD024F661"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.2.157.0:*:*:*:*:*:*:*","matchCriteriaId":"D513E4D8-B0A4-4C71-AD42-8EF9FE3E63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.2.169.0:*:*:*:*:*:*:*","matchCriteriaId":"60A2DB28-C42F-4E64-B0A2-63D83603D656"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:6.0_base:*:*:*:*:*:*:*","matchCriteriaId":"AD2FE92A-847A-459A-9407-1CB3A954B965"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.0_base:*:*:*:*:*:*:*","matchCriteriaId":"9B50430F-82F1-42BF-A3BA-733D83BB30B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.1_base:*:*:*:*:*:*:*","matchCriteriaId":"B9657E7A-E366-48FB-A161-3CC8DD088D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.2_base:*:*:*:*:*:*:*","matchCriteriaId":"B7DFEC44-189D-4125-88FF-77C291B072DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.3.101.0:*:*:*:*:*:*:*","matchCriteriaId":"7233C6A0-9674-4C6D-ACC0-CC654CF117C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.3.103.8:*:*:*:*:*:*:*","matchCriteriaId":"38D00567-54C8-4135-9A96-C19893F661C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.3.112:*:*:*:*:*:*:*","matchCriteriaId":"B703F93F-4E0D-4DCD-8997-FC9E48334899"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.3_base:*:*:*:*:*:*:*","matchCriteriaId":"4ED20104-D7CC-4563-BCD5-F87DAD568937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4C069EB-29CB-4AF7-8886-D3EEBF0FFA60"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.4.100:*:*:*:*:*:*:*","matchCriteriaId":"0CB0B394-5DF5-4972-9463-43F39705DCD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.4.100.60:*:*:*:*:*:*:*","matchCriteriaId":"4D90CC27-03B4-4E8A-B7C7-31CF468CE9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.4.110.0:*:*:*:*:*:*:*","matchCriteriaId":"0D811122-DAD3-49F7-BF45-EB86A21C66AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.4.121.0:*:*:*:*:*:*:*","matchCriteriaId":"075749B7-8133-44B2-A9F6-8C57C1799088"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.4_base:*:*:*:*:*:*:*","matchCriteriaId":"490358BD-D4AC-41D9-954E-25D33A1D5545"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.5.102.0:*:*:*:*:*:*:*","matchCriteriaId":"AE2CAF56-E0D1-4056-A714-564D67D6A6AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.5.102.11:*:*:*:*:*:*:*","matchCriteriaId":"98D6FFA2-E82A-4E2F-89F4-F4CFFF6870A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.5_base:*:*:*:*:*:*:*","matchCriteriaId":"A1ED1088-C683-48DC-81D5-2545B353814A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.6.1.62:*:*:*:*:*:*:*","matchCriteriaId":"C36A1927-65E0-431E-B8AD-CDC18F199801"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.6.100.0:*:*:*:*:*:*:*","matchCriteriaId":"2CFFCE42-6068-49F7-A3F7-B3B76BD26AE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.6.110.0:*:*:*:*:*:*:*","matchCriteriaId":"D769AF88-EF56-4F23-AB6D-2BE1005011B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.6.120.0:*:*:*:*:*:*:*","matchCriteriaId":"86F349D8-CC1E-4894-9810-6346646CB5AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:7.6.130.0:*:*:*:*:*:*:*","matchCriteriaId":"94C657F9-385D-430F-B1A8-6385B31D5B67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6F8EFBBD-1E3C-4456-B5FF-F1A9B007BAD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.0.0.30220.385:*:*:*:*:*:*:*","matchCriteriaId":"0401FB45-2948-4167-91BA-42C18E472262"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.0.100:*:*:*:*:*:*:*","matchCriteriaId":"DCB28498-E77B-4929-9A46-8748CB4CE79B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"3C57197A-7E0B-4975-ABA3-EF2E610C580B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.0.120.0:*:*:*:*:*:*:*","matchCriteriaId":"0872E094-1332-4EBE-9B2D-DFC7B6B0585D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.0.121.0:*:*:*:*:*:*:*","matchCriteriaId":"E48594C8-799E-4F04-8FA2-70F628555283"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6D61C08F-3F9A-4502-AED7-AC63C0045ACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.1.104.37:*:*:*:*:*:*:*","matchCriteriaId":"8D6E21CB-D531-441F-82E6-485F064F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.1.111.0:*:*:*:*:*:*:*","matchCriteriaId":"D2F785B0-45C2-4CF0-BCFF-9B8174D20D60"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.1.122.0:*:*:*:*:*:*:*","matchCriteriaId":"078F630B-225D-4AFF-8F4A-55711A42FA5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:8.1.130.0:*:*:*:*:*:*:*","matchCriteriaId":"E0CF7D77-656D-4745-AC84-78F9636EC5FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_6.0:182.0:*:*:*:*:*:*:*","matchCriteriaId":"FAC9448E-EA9C-4280-A2E5-1556FE746A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_6.0:188.0:*:*:*:*:*:*:*","matchCriteriaId":"37FDDF90-B234-4246-8AB7-3CF6F4E684E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_6.0:196.0:*:*:*:*:*:*:*","matchCriteriaId":"8B03732E-28C2-4E33-A705-B749C3897EE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_6.0:199.4:*:*:*:*:*:*:*","matchCriteriaId":"0A059B53-B23D-4F1A-BD78-35D3CE7537D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_6.0:202.0:*:*:*:*:*:*:*","matchCriteriaId":"CC22EE11-E2FF-4D37-9143-A742F5D0A6EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.0:98.0:*:*:*:*:*:*:*","matchCriteriaId":"74AC084A-3D4C-402D-909C-FA7FEC086114"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.0:98.218:*:*:*:*:*:*:*","matchCriteriaId":"9D11CC67-13EF-4BAD-A801-32719DAD2FA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.0:116.0:*:*:*:*:*:*:*","matchCriteriaId":"E0429E0D-A260-4D20-8921-C1FB4C1F9BAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.0:220.0:*:*:*:*:*:*:*","matchCriteriaId":"63B0F149-4EA4-48BA-BAF5-EF63F9E1C6DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.0:240.0:*:*:*:*:*:*:*","matchCriteriaId":"6F3770B4-2062-4618-8CB0-C4C4F7995F29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.0:250.0:*:*:*:*:*:*:*","matchCriteriaId":"83BD8D6A-02B8-4DC3-971B-1D93065D09D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.0:252.0:*:*:*:*:*:*:*","matchCriteriaId":"89723EEC-F0F6-4C6C-939B-8032AD8B37BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.1:91.0:*:*:*:*:*:*:*","matchCriteriaId":"C2D31F2E-1D1C-4699-9004-69A22864518B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.2:103.0:*:*:*:*:*:*:*","matchCriteriaId":"866A85C2-81F7-45E0-9FA1-15EAAF87CC25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.4:1.19:*:*:*:*:*:*:*","matchCriteriaId":"947CF04B-D8F0-4ACD-AEA6-B994F4CEFA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.4:1.54:*:*:*:*:*:*:*","matchCriteriaId":"B18C2D9A-F2B1-4607-BADD-E0BD0FC4347E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software_7.4:140.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6D299D-4ECF-4113-829E-E5DFB982EACF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:wireless_lan_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"8E08C420-97C2-4323-9388-D6C32E83BBF9"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92712","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036721","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7128","sourceIdentifier":"cve@mitre.org","published":"2016-09-12T01:59:06.770","lastModified":"2026-06-17T00:52:38.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image."},{"lang":"es","value":"La función exif_process_IFD_in_TIFF en ext/exif/exif.c en PHP en versiones anteriores a 5.6.25 y 7.x en versiones anteriores a 7.0.10 no maneja correctamente el caso de desplazamientos en miniatura que exceden el tamaño de archivo, lo que permite a atacantes remotos obtener información sensible de un proceso de memoria a través de una imagen TIFF manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.24","matchCriteriaId":"B6862C7D-F8A4-46E5-AAD4-72C29AB4FB3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6B90B947-7B54-47F3-9637-2F4AC44079EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"35848414-BD5D-4164-84DC-61ABBB1C4152"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1F8402-8551-4F66-A9A7-81D472AB058E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7A773E8E-48CD-4D35-A0FD-629BD9334486"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FC492340-79AF-4676-A161-079A97EC6F0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F1C2D8FE-C380-4B43-B634-A3DBA4700A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3EB58393-0C10-413C-8D95-6BAA8BC19A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"751F51CA-9D88-4971-A6EC-8C0B72E8E22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"37B74118-8FC2-44CB-9673-A83DF777B2E6"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2016/09/02/9","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.php.net/ChangeLog-7.php","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/bid/92564","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036680","source":"cve@mitre.org"},{"url":"https://bugs.php.net/bug.php?id=72627","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"https://github.com/php/php-src/commit/6dbb1ee46b5f4725cc6519abf91e512a2a10dfed?w=1","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://security.gentoo.org/glsa/201611-22","source":"cve@mitre.org"},{"url":"https://www.tenable.com/security/tns-2016-19","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2016/09/02/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.php.net/ChangeLog-7.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/bid/92564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=72627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://github.com/php/php-src/commit/6dbb1ee46b5f4725cc6519abf91e512a2a10dfed?w=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://security.gentoo.org/glsa/201611-22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-19","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0331","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-12T10:59:00.130","lastModified":"2026-06-17T00:37:20.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL."},{"lang":"es","value":"Vulnerabilidad XSS en IBM Rational Team Concert 6.0.1 y 6.0.2 en versiones anteriores a 6.0.2 iFix2 y Rational Collaborative Lifecycle Management 6.0.1 y 6.0.2 en versiones anteriores a 6.0.2 iFix2 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F9D6232-16BC-4985-97BE-9AEA8E30FB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"96CFA6A6-19E4-4325-BCDF-5AFA8A366196"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"380BB05E-6ADE-4A45-897D-9AA16E3408D1"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989899","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92840","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036814","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4852","sourceIdentifier":"vultures@jpcert.or.jp","published":"2016-09-12T10:59:01.210","lastModified":"2026-06-17T00:48:19.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"YoruFukurou (NightOwl) before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service (application crash) via a crafted emoji character sequence."},{"lang":"es","value":"YoruFukurou (NightOwl) en versiones anteriores a 2.85 confía en soporte para modificadores emoji skin-tone a pesar de que este soporte no se encuentra en CoreText CTFramesetter API en OS X 10.9, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una secuencia de caracteres emoji manipulada."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aki-null:yorufukurou:*:*:*:*:*:*:*:*","versionEndIncluding":"2.84","matchCriteriaId":"A08B2B1A-241A-42C1-9289-AC5822CA42A6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.9:*:*:*:*:*:*:*","matchCriteriaId":"A48A5310-A589-4E9B-99BC-F840CC1A6A44"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.9.1:*:*:*:*:*:*:*","matchCriteriaId":"F241EBFB-CCB3-4D16-B476-AC1578D3C435"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.9.2:*:*:*:*:*:*:*","matchCriteriaId":"7AEAD650-87D1-49BB-A8C7-BA39FD47285C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5BB54764-186F-490D-A17A-4FA1180A854B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.9.4:*:*:*:*:*:*:*","matchCriteriaId":"C0D6629C-8842-4AC1-99BC-A0F9A2967B54"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:*","matchCriteriaId":"06A4AE53-A477-4386-887C-4B7408575C23"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN94816361/995844/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory"]},{"url":"http://jvn.jp/en/jp/JVN94816361/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000151","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92609","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN94816361/995844/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://jvn.jp/en/jp/JVN94816361/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5927","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-12T10:59:02.647","lastModified":"2026-06-17T00:50:15.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output."},{"lang":"es","value":"IBM Tivoli Storage Manager para Space Management (también conocido como Spectrum Protect para Space Management) 6.3.x en versiones anteriores a 6.3.2.6, 6.4.x en versiones anteriores a 6.4.3.3, y 7.1.x en versiones anteriores a 7.1.6, cuando está configurado cierto rastreo dsmsetpw, permite a usuarios locales descubrir una contraseña cifrada leyendo el resultado del rastreo de aplicación."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1D1030A8-2770-49BF-93EC-8C2FB08C3FCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D08D7BF-6C7C-4C53-8D75-506EE7BFA0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3ED1C563-6B46-4F15-A3EE-9732A6E135CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"58B2465F-1445-4CB2-8130-D97D4524A290"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"10C95B6A-2B34-4DF9-B4D8-E1DF2986BE20"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"321D004F-094E-4FBD-9D9D-850EED24A0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.4.3:*:*:*:*:*:*:*","matchCriteriaId":"112C19AF-1BCC-4FBD-AC2D-A8399AF4DA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0749732C-0F60-4D69-B933-4058C652E31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6BAA7180-6E41-4836-B03E-5DC0C55E0093"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5A267E3D-9912-46E7-9E5C-2FFEB503CA76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74755D0A-28C1-4071-8DD1-FA452F8128B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6000AC77-53A1-4249-89BD-83B7E8E82CC6"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT15203","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989006","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92723","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT15203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5954","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-12T10:59:04.177","lastModified":"2026-06-17T00:50:17.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a denial of service by uploading temporary files."},{"lang":"es","value":"IBM WebSphere Portal 6.1.0 hasta la versión 6.1.0.6 CF27, 6.1.5 hasta la versión 6.1.5.3 CF27, 7.0.0 hasta la versión 7.0.0.2 CF30, 8.0.0 hasta la versión 8.0.0.1 CF21 y 8.5.0 en versiones anteriores a CF12 permite a usuarios remotos autenticados provocar una denegación de servicio mediante la subida de archivos temporales."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5DB29F4-59AB-439C-91C4-CDF677676C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6CA922-11EF-4315-A09A-B4A8937E4CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"526738D7-1AF8-4A8F-B833-BA0E35973A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"13D6BE9C-16FD-4FB4-8A87-56B42C246316"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5B50CEA-AFC4-4B45-9954-519965237FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0902AC0F-EA4D-4E65-A70A-15DE9B904B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D808F95D-C6BD-43EB-B16C-66449977BCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6ECEE98-B276-4ED6-AA5A-109EA57E9925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E4FF84B-A17F-464B-A718-67C44D2C69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F40E0F5-B964-4BDC-828E-7571619F7C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D03AF20E-0C29-45A6-9B7F-8260D8D9E8BF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI67037","source":"psirt@us.ibm.com","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989993","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93017","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036762","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI67037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6370","sourceIdentifier":"psirt@cisco.com","published":"2016-09-12T10:59:05.273","lastModified":"2026-06-17T00:50:54.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la interfaz web en Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) y versiones anteriores permite a usuarios remotos autenticados leer archivos arbitrarios a través de un nombre de ruta manipulado en una petición HTTP, vulnerabilidad también conocida como Bug ID CSCuz27255."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\\(1\\)_base:*:*:*:*:*:*:*","matchCriteriaId":"8D3EDCFC-8F87-43ED-9182-F0AAB1A07AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\\(2\\)_base:*:*:*:*:*:*:*","matchCriteriaId":"B5DEBB89-2D6F-4E81-8EF3-1B79CA41ECBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\\(3\\)_base:*:*:*:*:*:*:*","matchCriteriaId":"034C1CE2-0B55-41BC-9715-799BF22C187F"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-hcm","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92704","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036718","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-hcm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6395","sourceIdentifier":"psirt@cisco.com","published":"2016-09-12T10:59:08.227","lastModified":"2026-06-17T00:50:57.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de administración basada en web en Cisco Firepower Management Center en versiones anteriores a 6.1 y FireSIGHT System Software en versiones anteriores a 6.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, vulnerabilidad también conocida como Bug ID CSCuz58658."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D68F137F-0C21-4426-A9AC-B9B00177F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4874DD2C-25A3-4A5D-B27C-02C8D990868E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7317F08D-7EFC-4B62-80F7-FE576231A18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7508F7DB-48D1-4193-ABED-DCA6C49B11B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FF592298-E703-4B5F-988A-FA1C0E342A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"089D6811-105D-4ECA-8836-F46BD0C7EDE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"28E65D89-AFF5-47B7-91EE-2A40CB01A689"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"751A22BC-528B-4491-8BDE-F5E3DC024D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BC7B8C63-652A-48CE-B13B-D01E53B3FC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3C3E9B49-3332-4D5C-8E2E-4E3BEC0846C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"886ABEA0-A578-4239-9058-E51688D8027B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"758C985B-8BD7-48F0-99B3-AE06BAEB0EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"3F035955-83F7-4BAF-AA3D-3813C8AA4C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5815516B-6CC1-4951-953B-4F6B438269E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"07C30E53-E9AE-4517-AC5C-EC5ED8668380"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CCC4B09D-E3B2-40B2-8704-010EDF605675"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E807F3A-A75F-43F6-8CFC-92200D0F0C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E5025E5E-51CD-42B9-B81A-15B06BEBB514"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4023BBD2-FF31-402B-BBB2-DD143CF574EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1252AB9E-CF16-4721-BAD8-55B761303164"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BB7B2163-041D-4975-8B00-A406F47EEB9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"55200C11-D3AB-4E4E-AE45-4D27AEDB23E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"CEEF2BDF-612C-4B37-8FE2-AD3191D417EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F1049BCE-4A7B-4636-9090-17724D5AFBA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"87359216-7FDC-4235-9DEC-6BAF04214FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3C5912CE-A631-4A16-84EE-E7B9864655D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11825DC6-C51C-49DA-9F60-BA60E2FBD2E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D75EF46F-C78B-4D96-AEDD-C66EC5A414D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1E708B7E-F5AA-4DD8-90DD-76D107F2AC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FB1681-0566-4BC5-94A4-1D9AA58E222F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FA95F020-BD8E-4188-8ABF-7310300B1763"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1BEF2B98-243F-4796-A98C-A978C4CCAD91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59A9002E-66A1-4C35-8D07-9BC438350081"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"34C49E27-A356-45E5-9FF3-242C37626718"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A1B9FBE0-7771-49C9-96D9-204B684AB693"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"380900BB-4F03-4E76-A78C-DFB43669494F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A5273EE5-40CA-48B5-8F60-823CDB75F3A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"A476BF5E-1877-4B47-8E89-240910B49A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0EB13B96-D431-49BD-ADAB-9AE5DB559935"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79AECC9E-657F-4BFF-B640-B96CD1384647"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F2424A93-0C9D-4839-9773-EBFD143F6240"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C27E220F-160C-4706-9516-27889F7B37E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9CB0484C-F0B7-4349-856E-194E97A7F8A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1FD5721D-8F28-4A7C-B2BE-97CE796B208A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"85DEC2B7-2142-4959-817F-2F9B3AA82660"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B7DC251B-1CA8-4232-A900-885933E01FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FD0DF530-4865-45A1-87CA-6ED6026A56A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7335266F-B16F-4EFB-B1D2-1F61B3EBB437"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"13BF9C6F-B511-444B-B6B7-960DF8758964"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"55D52DB0-4441-41C9-900E-DE917B0CBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D032900-6B00-4F4D-A2F7-6119F113675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC5565FE-174C-41C7-9462-9138BB31507D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92824","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036755","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036755","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6396","sourceIdentifier":"psirt@cisco.com","published":"2016-09-12T10:59:09.523","lastModified":"2026-06-17T00:50:57.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482."},{"lang":"es","value":"Cisco Firepower Management Center en versiones anteriores a 6.1 y FireSIGHT System Software en versiones anteriores a 6.1, permite a atacantes remotos, cuando ciertas opciones de bloqueo de malware están habilitadas, eludir la detección de malware a través de campos manipulados en cabeceras HTTP, vulnerabilidad también conocida como Bug ID CSCuz44482."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D68F137F-0C21-4426-A9AC-B9B00177F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4874DD2C-25A3-4A5D-B27C-02C8D990868E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7317F08D-7EFC-4B62-80F7-FE576231A18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7508F7DB-48D1-4193-ABED-DCA6C49B11B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FF592298-E703-4B5F-988A-FA1C0E342A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"089D6811-105D-4ECA-8836-F46BD0C7EDE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"28E65D89-AFF5-47B7-91EE-2A40CB01A689"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"751A22BC-528B-4491-8BDE-F5E3DC024D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BC7B8C63-652A-48CE-B13B-D01E53B3FC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3C3E9B49-3332-4D5C-8E2E-4E3BEC0846C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"886ABEA0-A578-4239-9058-E51688D8027B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"758C985B-8BD7-48F0-99B3-AE06BAEB0EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"3F035955-83F7-4BAF-AA3D-3813C8AA4C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5815516B-6CC1-4951-953B-4F6B438269E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"07C30E53-E9AE-4517-AC5C-EC5ED8668380"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CCC4B09D-E3B2-40B2-8704-010EDF605675"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E807F3A-A75F-43F6-8CFC-92200D0F0C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E5025E5E-51CD-42B9-B81A-15B06BEBB514"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4023BBD2-FF31-402B-BBB2-DD143CF574EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1252AB9E-CF16-4721-BAD8-55B761303164"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BB7B2163-041D-4975-8B00-A406F47EEB9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"55200C11-D3AB-4E4E-AE45-4D27AEDB23E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"CEEF2BDF-612C-4B37-8FE2-AD3191D417EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F1049BCE-4A7B-4636-9090-17724D5AFBA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"87359216-7FDC-4235-9DEC-6BAF04214FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3C5912CE-A631-4A16-84EE-E7B9864655D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11825DC6-C51C-49DA-9F60-BA60E2FBD2E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D75EF46F-C78B-4D96-AEDD-C66EC5A414D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1E708B7E-F5AA-4DD8-90DD-76D107F2AC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FB1681-0566-4BC5-94A4-1D9AA58E222F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FA95F020-BD8E-4188-8ABF-7310300B1763"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1BEF2B98-243F-4796-A98C-A978C4CCAD91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59A9002E-66A1-4C35-8D07-9BC438350081"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"34C49E27-A356-45E5-9FF3-242C37626718"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A1B9FBE0-7771-49C9-96D9-204B684AB693"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"380900BB-4F03-4E76-A78C-DFB43669494F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A5273EE5-40CA-48B5-8F60-823CDB75F3A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"A476BF5E-1877-4B47-8E89-240910B49A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0EB13B96-D431-49BD-ADAB-9AE5DB559935"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79AECC9E-657F-4BFF-B640-B96CD1384647"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F2424A93-0C9D-4839-9773-EBFD143F6240"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C27E220F-160C-4706-9516-27889F7B37E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9CB0484C-F0B7-4349-856E-194E97A7F8A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1FD5721D-8F28-4A7C-B2BE-97CE796B208A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"85DEC2B7-2142-4959-817F-2F9B3AA82660"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B7DC251B-1CA8-4232-A900-885933E01FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FD0DF530-4865-45A1-87CA-6ED6026A56A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7335266F-B16F-4EFB-B1D2-1F61B3EBB437"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"13BF9C6F-B511-444B-B6B7-960DF8758964"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"55D52DB0-4441-41C9-900E-DE917B0CBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D032900-6B00-4F4D-A2F7-6119F113675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC5565FE-174C-41C7-9462-9138BB31507D"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92826","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036756","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6398","sourceIdentifier":"psirt@cisco.com","published":"2016-09-12T10:59:10.507","lastModified":"2026-06-17T00:50:57.813","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb16274."},{"lang":"es","value":"El servidor PPTP en Cisco IOS 15.5(3)M no inicializa adecuadamente paquete de búfers, lo que permite a atacantes remotos obtener información sensible de una red de comunicaciones anterior leyendo paquetes de datos, vulnerabilidad también conocida como Bug ID CSCvb16274."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.5\\(3\\)m:*:*:*:*:*:*:*","matchCriteriaId":"716EC9AA-0569-4FA7-A244-1A14FA15C5AD"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160902-ios","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92734","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036732","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160902-ios","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0138","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:02.133","lastModified":"2026-06-17T00:36:59.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging the Send As right, aka \"Microsoft Exchange Information Disclosure Vulnerability.\""},{"lang":"es","value":"\" Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1 y 2016 Cumulative Update 2 no analiza correctamente la gramática de mensajes de e-mail, lo que permite a usuarios remotos autenticados obtener información sensible de la aplicación de Outlook aprovechando el derecho Send As, vulnerabilidad también conocida como \"\"Microsoft Exchange Information Disclosure Vulnerability\"\".\""}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"D4069573-841E-4540-ACCD-AE3272A1D496"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2010:sp3:*:*:*:*:*:*","matchCriteriaId":"3E5EA9AD-1E84-4AB5-A1EF-3B9F2AC84755"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_12:*:*:*:*:*:*","matchCriteriaId":"D0CE2398-7B53-4F42-BF77-660A52CDD5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_13:*:*:*:*:*:*","matchCriteriaId":"1FF4FB22-54EE-479D-903E-62C0A70083D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_1:*:*:*:*:*:*","matchCriteriaId":"56728785-188C-470A-9692-E6C7235109CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_2:*:*:*:*:*:*","matchCriteriaId":"996163E7-6F3F-4D3B-AEA4-62A7F7E1F54D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92806","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036778","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-108","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0141","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:03.320","lastModified":"2026-06-17T00:36:59.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka \"Microsoft Information Disclosure Vulnerability.\""},{"lang":"es","value":"Las macros de Visual Basic en Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1 y 2016 exportan una clave privada del certificado de almacenamiento durante una operación de guardado de documento, lo que permite a atacantes obtener información sensible a través de vectores no especificados, vulnerabilidad también conocida como \"Microsoft Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"FEECD12A-5BEF-4675-B62E-86CF4A7474D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:*","matchCriteriaId":"69998A67-CB15-4217-8AD6-43F9BA3C6454"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:*","matchCriteriaId":"349E9084-8116-43E9-8B19-CA521C96660D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"120690A6-E0A1-4E36-A35A-C87109ECC064"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*","matchCriteriaId":"E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92903","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036785","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3292","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:06.633","lastModified":"2026-06-17T00:45:26.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 10 y 11 no maneja adecuadamente ajustes de integridad y de zona, lo que permite a atacantes remotos eludir un mecanismo de protección sandbox a través de un sitio web manipulado, vulnerabilidad también conocida como \"Internet Explorer Elevation of Privilege Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92808","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036788","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3302","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:11.493","lastModified":"2026-06-17T00:45:27.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a (1) crafted Wi-Fi access point or (2) crafted mobile-broadband device, aka \"Windows Lock Screen Elevation of Privilege Vulnerability.\""},{"lang":"es","value":"Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1 y Windows 10 Gold, 1511 y 1607, cuando la pantalla de bloqueo está habilitada, no restringe adecuadamente la carga de contenido web, lo que permite a atacantes físicamente próximos ejecutar código arbitrario a través de un (1) punto de acceso Wi-Fi manipulado o (2) dispositivo de banda ancha móvil manipulado, vulnerabilidad también conocida como \"Windows Lock Screen Elevation of Privilege Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.4,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","baseScore":6.2,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","matchCriteriaId":"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92853","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036799","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-112","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3351","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:24.357","lastModified":"2026-08-14T05:16:53.547","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka \"Microsoft Browser Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 9 hasta la versión 11 y Microsoft Edge permiten a atacantes remotos obtener información sensible a través de un sitio web manipulado, vulnerabilidad también conocida como \"Microsoft Browser Information Disclosure Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2022-06-23T00:00:00+00:00","id":"CVE-2016-3351","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-05-24","cisaActionDue":"2022-06-14","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Internet Explorer and Edge Information Disclosure Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*","matchCriteriaId":"C043EDDD-41BF-4718-BDCF-158BBBDB6360"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*","matchCriteriaId":"D5808661-A082-4CBE-808C-B253972487B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*","matchCriteriaId":"542DAEEC-73CC-46C6-A630-BF474A3446AC"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*","matchCriteriaId":"7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*","matchCriteriaId":"61019899-D7AF-46E4-A72C-D189180F66AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*","matchCriteriaId":"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*","matchCriteriaId":"542DAEEC-73CC-46C6-A630-BF474A3446AC"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*","matchCriteriaId":"7A8E9D99-BD78-4340-88F2-5AFF27AC37C9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*","matchCriteriaId":"61019899-D7AF-46E4-A72C-D189180F66AB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92788","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036788","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036789","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.brokenbrowser.com/detecting-apps-mimetype-malware/","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/92788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.brokenbrowser.com/detecting-apps-mimetype-malware/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3351","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2016-3366","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:40.810","lastModified":"2026-06-17T00:45:33.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka \"Microsoft Office Spoofing Vulnerability.\""},{"lang":"es","value":"Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016 y Outlook 2016 para Mac no implementa adecuadamente el RFC 2046, lo que permite a atacantes remotos eludir la detección de virus o spam a través de datos MIME manipulados en un archivo adjunto de un e-mail, vulnerabilidad también conocida como \"Microsoft Office Spoofing Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"8B32CD31-398A-4078-8B5B-B39DB9DB9A35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"F9A115C1-45EB-4688-AD7C-C1854850EE9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:macos:*:*","matchCriteriaId":"EDFE7319-3B03-42E7-B73D-907CA8A2C64A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92831","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036785","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3370","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:44.717","lastModified":"2026-06-17T00:45:34.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka \"PDF Library Information Disclosure Vulnerability,\" a different vulnerability than CVE-2016-3374."},{"lang":"es","value":"La librería PDF en Microsoft Edge, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 permite a atacantes remotos obtener información sensible a través de un sitio web manipulado, vulnerabilidad también conocida como \"PDF Library Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2016-3374."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","matchCriteriaId":"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92839","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036789","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-115","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3371","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:46.000","lastModified":"2026-06-17T00:45:34.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain sensitive information via a crafted application, aka \"Windows Kernel Elevation of Privilege Vulnerability.\""},{"lang":"es","value":"La API del kernel en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 no impone los permisos adecuadamente, lo que permite a usuarios locales obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows Kernel Elevation of Privilege Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","matchCriteriaId":"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*","matchCriteriaId":"7519928D-0FF2-4584-8058-4C7764CD5671"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92814","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036802","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/40429/","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40429/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3372","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:47.187","lastModified":"2026-06-17T00:45:34.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel API in Microsoft Windows Vista SP2 and Windows Server 2008 SP2 does not properly enforce permissions, which allows local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application, aka \"Windows Kernel Elevation of Privilege Vulnerability.\""},{"lang":"es","value":"La API del kernel en Microsoft Windows Vista SP2 y Windows Server 2008 SP2 no hace cumplir los permisos adecuadamente, lo que permite a usuarios locales suplantar procesos, suplantar la comunicación entre procesos o provocar una denegación de servicios a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows Kernel Elevation of Privilege Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92815","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036802","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3373","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:48.343","lastModified":"2026-06-17T00:45:34.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly implement registry access control, which allows local users to obtain sensitive account information via a crafted application, aka \"Windows Kernel Elevation of Privilege Vulnerability.\""},{"lang":"es","value":"La API del kernel en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 no implementa adecuadamente el control de acceso al registro, lo que permite a usuarios locales obtener información sensible de cuentas a través de una aplicación manipulada, vulnerabilidad también conocida como \"Windows Kernel Elevation of Privilege Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","matchCriteriaId":"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*","matchCriteriaId":"7519928D-0FF2-4584-8058-4C7764CD5671"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92845","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036802","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/40430/","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40430/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3374","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:49.343","lastModified":"2026-06-17T00:45:34.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka \"PDF Library Information Disclosure Vulnerability,\" a different vulnerability than CVE-2016-3370."},{"lang":"es","value":"La librería PDF en Microsoft Edge, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT 8.1 y Windows 10 Gold, 1511 y 1607 permite a atacantes remotos obtener información sensible a través de un sitio web manipulado, vulnerabilidad también conocida como \"PDF Library Information Disclosure Vulnerability\", una vulnerabilidad diferente a CVE-2016-3370."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*","matchCriteriaId":"232581CC-130A-4C62-A7E9-2EC9A9364D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","matchCriteriaId":"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"197E82CB-81AF-40F1-A55C-7B596891A783"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"}]}]}],"references":[{"url":"http://blog.malerisch.net/2016/09/microsoft--out-of-bounds-read-pdf-library-cve-2016-3374.html","source":"secure@microsoft.com"},{"url":"http://srcincite.io/advisories/src-2016-39/","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92838","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036789","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-115","source":"secure@microsoft.com"},{"url":"http://blog.malerisch.net/2016/09/microsoft--out-of-bounds-read-pdf-library-cve-2016-3374.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://srcincite.io/advisories/src-2016-39/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3379","sourceIdentifier":"secure@microsoft.com","published":"2016-09-14T10:59:53.860","lastModified":"2026-06-17T00:45:35.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request, aka \"Microsoft Exchange Elevation of Privilege Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de XSS en Microsoft Exchange Server 2016 Cumulative Update 1 y 2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una solicitud de invitación a reunión, vulnerabilidad también conocida como \"Microsoft Exchange Elevation of Privilege Vulnerability\"."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_1:*:*:*:*:*:*","matchCriteriaId":"56728785-188C-470A-9692-E6C7235109CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_2:*:*:*:*:*:*","matchCriteriaId":"996163E7-6F3F-4D3B-AEA4-62A7F7E1F54D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92836","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036778","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-108","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4271","sourceIdentifier":"cve@mitre.org","published":"2016-09-14T18:59:00.153","lastModified":"2026-06-17T00:47:15.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4277 and CVE-2016-4278, aka a \"local-with-filesystem Flash sandbox bypass\" issue."},{"lang":"es","value":"Adobe Flash Player en versiones anteriores a 18.0.0.375 y 19.x hasta la versión 23.x en versiones anteriores a 23.0.0.162 en Windows y SO X y en versiones anteriores a 11.2.202.635 en Linux permite a atacantes eludir restricciones destinadas al acceso y obtener información sensible a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-4277 y CVE-2016-4278, vulnerabilidad también conocida como un problema \"local-with-filesystem Flash sandbox bypass\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.2.202.632","matchCriteriaId":"E7CA6039-558F-4C74-95A6-5C651DD6884D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"15F5093D-7418-4D20-BFBA-081D69D7AE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"CE5BB30B-7DE2-469E-AF95-D552C2BF15F8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"186A94B2-FFE5-48FF-BADA-0A8083C6CD3D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*","versionEndIncluding":"18.0.0.366","matchCriteriaId":"7DB6BA20-BD01-4169-AFE3-07DEB17381C9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"156F0DBE-F62C-4596-BF96-9E1224B74494"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*","matchCriteriaId":"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"http://lab.truel.it/flash-sandbox-bypass/","source":"cve@mitre.org","tags":["Broken Link","Technical Description","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1865.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036791","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://blog.bjornweb.nl/2017/02/flash-bypassing-local-sandbox-data-exfiltration-credentials-leak/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-29.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-10","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lab.truel.it/flash-sandbox-bypass/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Technical Description","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1865.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://blog.bjornweb.nl/2017/02/flash-bypassing-local-sandbox-data-exfiltration-credentials-leak/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-29.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-4277","sourceIdentifier":"psirt@adobe.com","published":"2016-09-14T18:59:06.637","lastModified":"2026-06-17T00:47:16.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4271 and CVE-2016-4278."},{"lang":"es","value":"Adobe Flash Player en versiones anteriores a 18.0.0.375 y 19.x hasta la versión 23.x en versiones anteriores a 23.0.0.162 en Windows y OS X y en versiones anteriores a 11.2.202.635 en Linux permite a atacantes eludir restricciones destinadas al acceso y obtener información sensible a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-4271 y CVE-2016-4278."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.2.202.632","matchCriteriaId":"E7CA6039-558F-4C74-95A6-5C651DD6884D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"15F5093D-7418-4D20-BFBA-081D69D7AE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"CE5BB30B-7DE2-469E-AF95-D552C2BF15F8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"186A94B2-FFE5-48FF-BADA-0A8083C6CD3D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*","versionEndIncluding":"18.0.0.366","matchCriteriaId":"7DB6BA20-BD01-4169-AFE3-07DEB17381C9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"156F0DBE-F62C-4596-BF96-9E1224B74494"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*","matchCriteriaId":"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1865.html","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036791","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-29.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-10","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1865.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-29.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-4278","sourceIdentifier":"psirt@adobe.com","published":"2016-09-14T18:59:07.920","lastModified":"2026-06-17T00:47:16.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4271 and CVE-2016-4277."},{"lang":"es","value":"Adobe Flash Player en versiones anteriores a 18.0.0.375 y 19.x hasta la versión 23.x en versiones anteriores a 23.0.0.162 en Windows y OS X y en versiones anteriores a 11.2.202.635 en Linux permite a atacantes eludir restricciones destinadas al acceso y obtener información sensible a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-4271 y CVE-2016-4277."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.2.202.632","matchCriteriaId":"E7CA6039-558F-4C74-95A6-5C651DD6884D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"15F5093D-7418-4D20-BFBA-081D69D7AE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"CE5BB30B-7DE2-469E-AF95-D552C2BF15F8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"186A94B2-FFE5-48FF-BADA-0A8083C6CD3D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*","versionEndIncluding":"18.0.0.366","matchCriteriaId":"7DB6BA20-BD01-4169-AFE3-07DEB17381C9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*","versionEndIncluding":"22.0.0.211","matchCriteriaId":"156F0DBE-F62C-4596-BF96-9E1224B74494"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*","matchCriteriaId":"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1865.html","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036791","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-29.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-10","source":"psirt@adobe.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1865.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-29.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201610-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-7420","sourceIdentifier":"cve@mitre.org","published":"2016-09-16T05:59:15.427","lastModified":"2026-06-17T00:53:02.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump."},{"lang":"es","value":"Crypto++ (también conocido como cryptopp) hasta la versión 5.6.4 no documenta el requisito para una definición NDEBUG de tiempo de compilación deshabilitando las múltiples llamadas assert que son no intencionadas en uso de producción, lo que podría permitir a atacantes dependientes del contexto obtener información sensible aprovechando acceso a la memoria de procesamiento después de un fallo de aserción, según lo demostrado mediante la lectura de un volcado de memoria."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cryptopp:crypto\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.4","matchCriteriaId":"CCF65951-D574-4603-BA6E-EE43D70B6C1F"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/09/15/12","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92988","source":"cve@mitre.org"},{"url":"https://github.com/weidai11/cryptopp/commit/553049ba297d89d9e8fbf2204acb40a8a53f5cd6","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/weidai11/cryptopp/issues/277","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/15/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2025/11/14/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/weidai11/cryptopp/commit/553049ba297d89d9e8fbf2204acb40a8a53f5cd6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/weidai11/cryptopp/issues/277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6401","sourceIdentifier":"psirt@cisco.com","published":"2016-09-17T02:59:01.617","lastModified":"2026-06-17T00:50:58.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause a denial of service (line-card reload) via crafted IPv6-over-MPLS packets, aka Bug ID CSCva32494."},{"lang":"es","value":"Cisco Carrier Routing System (CRS) 5.1 y 5.1.4, tal como se utiliza en CRS Carrier Grade Services para dispositivos CRS-1 y CRS-3, permite a atacantes remotos provocar una denegación de servicio (recarga de tarjeta en línea) a través de paquetes IPv6-over-MPLS manipulados, vulnerabilidad también conocida como Bug ID CSCva32494."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:N/I:N/A:C","baseScore":5.7,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:carrier_routing_system:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7E8DDAB0-A852-44F6-8B6F-1757A1B38BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:carrier_routing_system:5.1_base:*:*:*:*:*:*:*","matchCriteriaId":"4FF5C375-BF30-4615-BB0E-1BAF3D4BDBEB"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-crs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92964","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036830","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-crs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6644","sourceIdentifier":"security_alert@emc.com","published":"2016-09-17T21:59:01.543","lastModified":"2026-06-17T00:51:31.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an r_object_id value."},{"lang":"es","value":"EMC Documentum D2 4.5 en versiones anteriores a patch 15 y 4.6 en versiones anteriores a patch 03 permite a atacantes remotos leer documentos Docbase arbitrarios aprovechando el conocimiento de un valor r_object_id."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_d2:*:p14:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"32E6A682-6FFE-4E3A-86A0-C3EC5442D0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_d2:*:p2:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"A196B4AC-4BCF-4117-B0CD-64323931C8FD"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Sep/18","source":"security_alert@emc.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92906","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1036796","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/Sep/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7419","sourceIdentifier":"cve@mitre.org","published":"2016-09-17T21:59:11.777","lastModified":"2026-06-17T00:53:01.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name."},{"lang":"es","value":"Vulnerabilidad de XSS en share.js en la aplicación de galería en ownCloud Server en versiones anteriores a 9.0.4 y Nextcloud Server en versiones anteriores a 9.0.52 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un nombre de directorio manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.51","matchCriteriaId":"B7C653C0-53CE-4CC6-99C5-DB1AC94D539B"},{"vulnerable":true,"criteria":"cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"AC698542-23B9-4101-BD01-10D2FB0870E9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92373","source":"cve@mitre.org"},{"url":"https://github.com/nextcloud/gallery/commit/6933d27afe518967bd1b60e6a7eacd88288929fc","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://hackerone.com/reports/145355","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://nextcloud.com/security/advisory/?id=nc-sa-2016-001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2016-011","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/nextcloud/gallery/commit/6933d27afe518967bd1b60e6a7eacd88288929fc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://hackerone.com/reports/145355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://nextcloud.com/security/advisory/?id=nc-sa-2016-001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2016-011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0926","sourceIdentifier":"security_alert@emc.com","published":"2016-09-18T02:59:06.933","lastModified":"2026-06-17T00:38:28.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.32 and 1.7.x before 1.7.8 allows remote attackers to inject arbitrary web script or HTML via unspecified input that improperly interacts with the AngularJS framework."},{"lang":"es","value":"Vulnerabilidad de XSS en Apps Manager en Pivotal Cloud Foundry (PCF) Elastic Runtime en versiones anteriores a 1.6.32 y 1.7.x en versiones anteriores a 1.7.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de entrada no especificada que interactúa de manera incorrecta con el marco de referencia AngularJS."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*","versionStartIncluding":"1.6.0","versionEndExcluding":"1.6.32","matchCriteriaId":"2A185A4F-A604-4779-9553-145A721ECB39"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*","versionStartIncluding":"1.7.0","versionEndExcluding":"1.7.8","matchCriteriaId":"E6A3140A-F593-4AEA-9FDF-94FE511DBA0A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/91677","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://pivotal.io/security/cve-2016-0926","source":"security_alert@emc.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://pivotal.io/security/cve-2016-0926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-0927","sourceIdentifier":"security_alert@emc.com","published":"2016-09-18T02:59:07.947","lastModified":"2026-06-17T00:38:29.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en Pivotal Cloud Foundry (PCF) Ops Manager en versiones anteriores a 1.6.17 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F4CC5918-BC38-46E3-8000-5FE87A65C0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"36926681-35F4-4619-9613-155DEEEA3C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"41FF3C2B-E96F-4DF7-A5C4-703206CB729E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F9CB3C2D-3080-4A3D-8D8D-1381B5D98920"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"782781EB-147C-4B00-84C5-1D8443BFA2D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"35A56755-EEB2-4C93-B180-3918A36965AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E4009F10-08AF-470B-B903-38B8A6DBF332"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"2B2E8F04-53E6-4A3C-BE4B-8D0DDA22CA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"790DAB24-893A-463F-8358-171DACD75074"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"3645A1A8-4945-447F-A968-101D5938F9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"0E52C9B9-8F94-48D8-ADA6-96918F6AAD36"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*","matchCriteriaId":"3948FC2F-AF3B-4AF3-968D-F124D03A213A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*","matchCriteriaId":"4BA44F9B-97D5-48C0-91E9-6D3FEC8B7773"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*","matchCriteriaId":"7B414F88-6541-48C6-B9D6-4DDA035A0037"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*","matchCriteriaId":"66235C7F-D5EE-4989-8D24-6D0781954234"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*","matchCriteriaId":"12E75B49-2419-4313-A648-B5283DA620E7"}]}]}],"references":[{"url":"https://pivotal.io/security/cve-2016-0927","source":"security_alert@emc.com","tags":["Vendor Advisory"]},{"url":"https://pivotal.io/security/cve-2016-0927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6642","sourceIdentifier":"security_alert@emc.com","published":"2016-09-18T02:59:14.497","lastModified":"2026-06-17T00:51:31.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files."},{"lang":"es","value":"Vulnerabilidad de CSRF en EMC ViPR SRM en versiones anteriores a 3.7.2 permite a atacantes remotos secuestrar la autenticación de los administradores para peticiones de subida de archivos."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:vipr_srm:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.1","matchCriteriaId":"75354152-7BF1-4777-B6F5-381C400433B9"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Sep/17","source":"security_alert@emc.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92945","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/Sep/17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6643","sourceIdentifier":"security_alert@emc.com","published":"2016-09-18T02:59:15.793","lastModified":"2026-06-17T00:51:31.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en EMC ViPR SRM en versiones anteriores a 3.7.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:vipr_srm:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.1","matchCriteriaId":"75354152-7BF1-4777-B6F5-381C400433B9"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Sep/17","source":"security_alert@emc.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92945","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/Sep/17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1433","sourceIdentifier":"psirt@cisco.com","published":"2016-09-18T22:59:00.140","lastModified":"2026-06-17T00:41:58.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service (OSPFv3 process reload) via crafted OSPFv3 packets, aka Bug ID CSCuz66289."},{"lang":"es","value":"Cisco IOS XR 6.0 y 6.0.1 en dispositivos NCS 6000 permite a atacantes remotos provocar una denegación de servicio (recarga del proceso OSPFv3) a través de paquetes OSPFv3 manipulados, vulnerabilidad también conocida como Bug ID CSCuz66289."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3CC44668-FE9D-47CA-BFD9-BD721ADA9ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A9BE8485-444F-45E2-BBBB-B69BF322FEB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:6.0_base:*:*:*:*:*:*:*","matchCriteriaId":"BFF1497F-08C0-4064-9AB8-3ED2360F6710"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-iosxr","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92961","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036832","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-iosxr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4719","sourceIdentifier":"product-security@apple.com","published":"2016-09-18T22:59:04.720","lastModified":"2026-06-17T00:48:04.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application."},{"lang":"es","value":"El componente GeoServices en Apple iOS en versiones anteriores a 10 y watchOS en versiones anteriores a 3 no restringe adecuadamente los accesos a información PlaceData, lo que permite a atacantes descubrir ubicaciones físicas a través de una aplicación manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"8E523B53-52F3-4912-BF79-FF49D51D6F6F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00004.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/92932","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/92933","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036797","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207141","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4741","sourceIdentifier":"product-security@apple.com","published":"2016-09-18T22:59:06.987","lastModified":"2026-06-17T00:48:08.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Assets component in Apple iOS before 10 allows man-in-the-middle attackers to block software updates via vectors related to lack of an HTTPS session for retrieving updates."},{"lang":"es","value":"El componente Assets en Apple iOS en versiones anteriores a 10 permite a atacantes man-in-the-middle bloquear actualizaciones de software a través de vectores relacionados con falta de una sesión HTTPS para la recuperación de actualizaciones."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/92932","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036797","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4746","sourceIdentifier":"product-security@apple.com","published":"2016-09-18T22:59:08.000","lastModified":"2026-06-17T00:48:08.723","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Keyboards component in Apple iOS before 10 does not properly use a cache for auto-correct suggestions, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging an unintended correction."},{"lang":"es","value":"El componente Keyboards en Apple iOS en versiones anteriores a 10 no utiliza adecuadamente una caché para sugerencias de autocorrección, lo que permite a atacantes remotos obtener información sensible en circunstancias oportunistas aprovechando una corrección no intencionada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/92932","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036797","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6403","sourceIdentifier":"psirt@cisco.com","published":"2016-09-18T22:59:12.533","lastModified":"2026-06-17T00:50:58.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912."},{"lang":"es","value":"La aplicación Data in Motion (DMo) en Cisco IOS 15.6(1)T e IOS XE, cuando el conjunto de características IOx está activado, permite a atacantes remotos provocar una denegación de servicio a través de un paquete manipulado, vulnerabilidad también conocida como Bug IDs CSCuy82904, CSCuy82909 y CSCuy82912."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"15.6\\(1\\)t","matchCriteriaId":"DD3D7C8C-CD1A-488B-BF35-30E2807FB3D3"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ios-xe","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92960","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036833","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ios-xe","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6404","sourceIdentifier":"psirt@cisco.com","published":"2016-09-18T22:59:13.517","lastModified":"2026-06-17T00:50:58.333","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854."},{"lang":"es","value":"Vulnerabilidad de XSS en el marco de referencia web en Cisco IOx Local Manager en IOS 15.5(2)T e IOS XE permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, vulnerabilidad también conocida como Bug ID CSCuy19854."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*","matchCriteriaId":"7A4E00DF-60FD-48F2-A69A-D709A5657F6A"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ios","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92963","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036834","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ios","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6405","sourceIdentifier":"psirt@cisco.com","published":"2016-09-18T22:59:14.813","lastModified":"2026-06-17T00:50:58.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368."},{"lang":"es","value":"Cisco Fog Director 1.0(0) para IOx permite a usuarios remotos autenticados eludir restricciones destinadas al acceso y escribir en archivos arbitrarios a través de la interfaz Cartridge, vulnerabilidad también conocida como Bug ID CSCuz89368."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:C/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:fog_director:1.0\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"87352877-DA08-44A4-A85A-CDCE743C3E05"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ioxfd","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92958","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ioxfd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0870","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2016-09-19T01:59:00.133","lastModified":"2026-06-17T00:38:23.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request."},{"lang":"es","value":"El servidor web en Trane Tracer SC 4.2.1134 y versiones anteriores permite a atacantes remotos leer archivos de configuración sensibles a través de una petición directa."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trane:tracer_sc:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.1134","matchCriteriaId":"7CD3560D-EFF6-4540-8C07-A277A45E53C3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92979","source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-259-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/92979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-259-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2015-8915","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:00.163","lastModified":"2026-06-17T00:35:28.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file."},{"lang":"es","value":"bsdcpio en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (lectura no válida y caída) a través de un archivo cpio manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91298","source":"cve@mitre.org"},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/503","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8916","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:01.633","lastModified":"2026-06-17T00:35:28.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a \"split file in multivolume RAR,\" which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted rar file."},{"lang":"es","value":"bsdtar en libarchive en versiones anteriores a 3.2.0 devuelve un código válido sin rellenar la entrada cuando la cabecera es un \"archivo dividido en multivolumen RAR,\" lo que permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída) a través de un archivo rar manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91296","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/504","source":"cve@mitre.org"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8916","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8920","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:06.447","lastModified":"2026-06-17T00:35:28.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file."},{"lang":"es","value":"La función lha_ar_read_header en archive_read_support_format_ar.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (lectura de pila fuera de rango) a través de un archivo ar manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1850.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91301","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/511","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1850.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8922","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:08.277","lastModified":"2026-06-17T00:35:29.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct."},{"lang":"es","value":"La función read_CodersInfo en archive_read_support_format_7zip.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída) a través de un archivo 7z manipulado, relacionado con la estructura the _7z_folder."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91312","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/513","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"https://www.suse.com/security/cve/CVE-2015-8922.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.suse.com/security/cve/CVE-2015-8922.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-8923","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:09.680","lastModified":"2026-06-17T00:35:29.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file."},{"lang":"es","value":"La función process_extra en libarchive en versiones anteriores a 3.2.0 utiliza el campo de tamaño y un número con signo en un desplazamiento, lo que permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo zip manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91309","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/514","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8924","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:10.743","lastModified":"2026-06-17T00:35:29.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file."},{"lang":"es","value":"La función archive_read_format_tar_read_header en archive_read_support_format_tar.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) a través de un archivo tar manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"01E6CAD9-DC1F-4C7C-8C8E-98E4BFABAC94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6359EF76-9371-4418-8694-B604CF02CF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"81D94366-47D6-445A-A811-39327B150FCD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91308","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/515","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8925","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:11.900","lastModified":"2026-06-17T00:35:29.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing."},{"lang":"es","value":"La función readline en archive_read_support_format_mtree.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (lectura no válida) a través de un archivo mtree manipulado, relacionado con una nueva línea de análisis gramatical."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91306","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/516","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8926","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:13.103","lastModified":"2026-06-17T00:35:29.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive."},{"lang":"es","value":"La función archive_read_format_rar_read_data en archive_read_support_format_rar.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo rar manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91304","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/518","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8927","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:14.120","lastModified":"2026-06-17T00:35:29.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted zip file, related to reading the password."},{"lang":"es","value":"La función trad_enc_decrypt_update en archive_read_support_format_zip.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria dinámica fuera de rango y caída) a través de un archivo zip manipulado, relacionado con la lectura de contraseña."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91329","source":"cve@mitre.org"},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/523","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8928","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:15.103","lastModified":"2026-06-17T00:35:30.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file."},{"lang":"es","value":"La función process_add_entry en archive_read_support_format_mtree.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango) a través de un archivo mtree manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91337","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/550","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8929","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:16.087","lastModified":"2026-06-17T00:35:30.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file."},{"lang":"es","value":"Fuga de memoria en la función __archive_read_get_extract en archive_read_extract2.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio a través de un archivo tar manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91340","source":"cve@mitre.org"},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/517","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8932","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:18.963","lastModified":"2026-06-17T00:35:30.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift."},{"lang":"es","value":"La función compress_bidder_init en archive_read_support_filter_compress.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo tar manipulado, lo que desencadena un desplazamiento a la izquierda no válida."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1850.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91424","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/547","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8932","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1850.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8933","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:19.963","lastModified":"2026-06-17T00:35:30.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file."},{"lang":"es","value":"Desbordamiento de entero en la función archive_read_format_tar_skip en archive_read_support_format_tar.c en libarchive en versiones anteriores a 3.2.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo tar manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91421","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/548","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8934","sourceIdentifier":"cve@mitre.org","published":"2016-09-20T14:15:20.917","lastModified":"2026-06-17T00:35:31.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file."},{"lang":"es","value":"La función copy_from_lzss_window en archive_read_support_format_rar.c en libarchive 3.2.0 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (lectura de memoria dinámica fuera de rango) a través de un archivo rar manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/91409","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/521","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3033-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/libarchive/libarchive/issues/521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0905","sourceIdentifier":"security_alert@emc.com","published":"2016-09-21T02:59:04.570","lastModified":"2026-06-17T00:38:26.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges by leveraging admin access and entering a sudo command."},{"lang":"es","value":"Avamar Data Store (ADS) y Avamar Virtual Edition (AVE) en EMC Avamar Server en versiones anteriores a 7.3.0-233 permiten a usuarios locales obtener privilegios de root aprovechando el acceso de administrador e introduciendo un comando sudo."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:avamar_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3.0","matchCriteriaId":"40730E89-20CF-4EAB-B427-CC66BB231E3A"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Sep/31","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/93032","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1036844","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/Sep/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/93032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0921","sourceIdentifier":"security_alert@emc.com","published":"2016-09-21T02:59:07.820","lastModified":"2026-06-17T00:38:28.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use weak permissions for unspecified directories, which allows local users to obtain root access by replacing a script with a Trojan horse program."},{"lang":"es","value":"Avamar Data Store (ADS) y Avamar Virtual Edition (AVE) en EMC Avamar Server en versiones anteriores a 7.3.0-233 utiliza permisos débiles para directorios no especificados, lo que permite a usuarios locales obtener acceso de root mediante el reemplazo de una secuencia de comandos con un programa con troyano."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.6,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:avamar_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3.0","matchCriteriaId":"40730E89-20CF-4EAB-B427-CC66BB231E3A"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Sep/31","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/93032","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1036844","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/Sep/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/93032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0925","sourceIdentifier":"security_alert@emc.com","published":"2016-09-21T02:59:08.820","lastModified":"2026-06-17T00:38:28.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and 7.2.x before 7.2.0.0.SP0.P0 HF20 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la aplicación Case Management en EMC RSA Adaptive Authentication (On-Premise) en versiones anteriores a 6.0.2.1.SP3.P4 HF210, 7.0.x y 7.1.x en versiones anteriores a 7.1.0.0.SP0.P6 HF50 y 7.2.x en versiones anteriores a 7.2.0.0.SP0.P0 HF20 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2","matchCriteriaId":"34A17F1E-D531-4ED4-B36C-B7B7C7A63E1B"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Sep/33","source":"security_alert@emc.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93025","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1036851","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/Sep/33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4966","sourceIdentifier":"cve@mitre.org","published":"2016-09-21T14:25:07.720","lastModified":"2026-06-17T00:48:31.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter."},{"lang":"es","value":"La página diagnosis_control.php en Fortinet FortiWan (anteriormente AscernLink) en versiones anteriores a 4.2.5 permite a usuarios remotos autenticados descargar archivos PCAP a través de vectores relacionados con el parámetro UserName GET."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4","matchCriteriaId":"3515FEA7-F6FC-4CD3-8B83-5EE97B6A9308"}]}]}],"references":[{"url":"http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92781","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/724487","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/724487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4967","sourceIdentifier":"cve@mitre.org","published":"2016-09-21T14:25:09.080","lastModified":"2026-06-17T00:48:31.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain sensitive information from (1) a backup of the device configuration via script/cfg_show.php or (2) PCAP files via script/system/tcpdump.php."},{"lang":"es","value":"Fortinet FortiWan (anteriormente AscernLink) en versiones anteriores a 4.2.5 permite a usuarios remotos autenticados obtener información sensible de (1) un backup de la configuración del dispositivo a través de script/cfg_show.php o (2) archivos PCAP a través de script/system/tcpdump.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4","matchCriteriaId":"3515FEA7-F6FC-4CD3-8B83-5EE97B6A9308"}]}]}],"references":[{"url":"http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92779","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/724487","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/724487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4968","sourceIdentifier":"cve@mitre.org","published":"2016-09-21T14:25:10.173","lastModified":"2026-06-17T00:48:31.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request."},{"lang":"es","value":"La página linkreport/tmp/admin_global en Fortinet FortiWan (anteriormente AscernLink) en versiones anteriores a 4.2.5 permite a usuarios remotos autenticados descubrir cookies de administrador a través de una petición GET."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4","matchCriteriaId":"3515FEA7-F6FC-4CD3-8B83-5EE97B6A9308"}]}]}],"references":[{"url":"http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92779","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/724487","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/724487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-4969","sourceIdentifier":"cve@mitre.org","published":"2016-09-21T14:25:11.143","lastModified":"2026-06-17T00:48:31.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to script/statistics/getconn.php."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Fortinet FortiWan (anteriormente AscernLink) en versiones anteriores a 4.2.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro IP a script/statistics/getconn.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4","matchCriteriaId":"3515FEA7-F6FC-4CD3-8B83-5EE97B6A9308"}]}]}],"references":[{"url":"http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92779","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/724487","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/724487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-5844","sourceIdentifier":"cve@mitre.org","published":"2016-09-21T14:25:16.550","lastModified":"2026-06-17T00:50:08.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file."},{"lang":"es","value":"Desbordamiento de entero en el analizador ISO en libarchive en versiones anteriores a 3.2.1 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un archivo ISO manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.0","matchCriteriaId":"6A6EFED3-4FD3-413D-85C2-73F746F346E8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1850.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/23/6","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/24/4","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91808","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036173","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350280","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/libarchive/libarchive/commit/3ad08e01b4d253c66ae56414886089684155af22","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://github.com/libarchive/libarchive/issues/717","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1850.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/23/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/24/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/48-Out-of-bounds-read-and-signed-integer-overflow-in-libarchive.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/libarchive/libarchive/commit/3ad08e01b4d253c66ae56414886089684155af22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://github.com/libarchive/libarchive/issues/717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6158","sourceIdentifier":"cve@mitre.org","published":"2016-09-21T14:25:17.457","lastModified":"2026-06-17T00:50:33.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that (1) restore factory settings or (2) reboot the device via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de CSRF en routers Huawei WS331a con software en versiones anteriores a WS331a-10 V100R001C01B112 permiten a atacantes remotos secuestrar la autenticación de administradores para peticiones que (1) restauran ajustes de fabrica o (2) reinician el dispositivo a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:C/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ws331a_router_firmware:ws331a-10_v100r001c02b017sp01:*:*:*:*:*:*:*","matchCriteriaId":"04E7212A-661D-4A3F-96A2-C80D6AF9A013"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ws331a_router:-:*:*:*:*:*:*:*","matchCriteriaId":"616E58C3-6FA3-407E-8EFE-B91617FAC1A2"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-ws331a-en","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-ws331a-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2016-7094","sourceIdentifier":"cve@mitre.org","published":"2016-09-21T14:25:25.160","lastModified":"2026-06-17T00:52:34.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update."},{"lang":"es","value":"Desbordamiento de búfer en Xen 4.7.x y versiones anteriores permite a administradores locales del SO invitado x86 HVM ejecutado con paginación sombra provocar una denegación de servicio a través de una actualización de tabla de página."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:N/I:N/A:P","baseScore":1.5,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":2.7,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7.0","matchCriteriaId":"EDD98135-D38D-498A-8D11-15C41CA31DED"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX216071","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3663","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92864","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036753","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-187.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://xenbits.xen.org/xsa/xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-09","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX216071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-187.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://xenbits.xen.org/xsa/xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7154","sourceIdentifier":"cve@mitre.org","published":"2016-09-21T14:25:27.160","lastModified":"2026-06-17T00:52:41.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number."},{"lang":"es","value":"Vulnerabilidad de uso después de liberación de memoria en el código de canal de evento FIFO en Xen 4.4.x permite a administradores locales del SO invitado provocar una denegación de servicio (caída de host) y posiblemente ejecutar código arbitrario u obtener información sensible a través de un número de marco invitado no válido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1044792C-D544-457C-9391-4F3B5BAB978D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBD9AD01-50B7-4951-8A73-A6CF4801A487"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"89AA8FD5-E997-4F0D-AFB6-FFBE0073BA5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"75615D84-9CA1-456C-816D-768E37B074A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB87384-A1F8-4136-A242-441C655D9364"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX216071","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3663","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/92863","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036754","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-188.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://xenbits.xen.org/xsa/xsa188.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.citrix.com/article/CTX216071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-188.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://xenbits.xen.org/xsa/xsa188.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-7166","sourceIdentifier":"cve@mitre.org","published":"2016-09-21T14:25:29.833","lastModified":"2026-06-17T00:52:43.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file."},{"lang":"es","value":"libarchive en versiones anteriores a 3.2.0 no limita el número de descompresiones recursivas, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída de aplicación) a través de un archivo gzip manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.901a","matchCriteriaId":"DC45D478-0BA2-4386-B1D2-E516D9AC28A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1850.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/08/15","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/08/18","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92901","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207362","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347086","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/libarchive/libarchive/commit/6e06b1c89dd0d16f74894eac4cfc1327a06ee4a0","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libarchive/libarchive/issues/660","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1844.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1850.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/08/15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/08/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/libarchive/libarchive/commit/6e06b1c89dd0d16f74894eac4cfc1327a06ee4a0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libarchive/libarchive/issues/660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6265","sourceIdentifier":"cve@mitre.org","published":"2016-09-22T15:59:01.583","lastModified":"2026-06-17T00:50:43.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service (crash) via a crafted PDF file."},{"lang":"es","value":"Vulnerabilidad de uso después de liberación en la función pdf_load_xref en pdf/pdf-xref.c en MuPDF permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo PDF manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9","matchCriteriaId":"62C1A42B-E4DB-4696-A159-A7A6825739B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://bugs.ghostscript.com/show_bug.cgi?id=696941","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://git.ghostscript.com/?p=mupdf.git%3Bh=fa1936405b6a84e5c9bb440912c23d532772f958","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00007.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3655","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/21/7","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/92071","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-12","source":"cve@mitre.org"},{"url":"http://bugs.ghostscript.com/show_bug.cgi?id=696941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://git.ghostscript.com/?p=mupdf.git%3Bh=fa1936405b6a84e5c9bb440912c23d532772f958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/21/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/92071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-12","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6824","sourceIdentifier":"cve@mitre.org","published":"2016-09-22T15:59:07.443","lastModified":"2026-06-17T00:51:50.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP packets."},{"lang":"es","value":"Controladores de acceso Huawei AC6003, AC6005, AC6605 y ACU2 con software en versiones anteriores a V200R006C10SPC200 permite a usuarios remotos autenticados provocar una denegación de servicio (reinicio de dispositivo) a través de paquetes CAPWAP manipulados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ac6003_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"v200r005c10","matchCriteriaId":"9F19F953-42DA-4268-82F9-882832CDC0DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ac6003_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"v200r006c00","matchCriteriaId":"746998C5-5D0A-4B04-9B7E-100B3E29E1BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ac6005_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"v200r005c10","matchCriteriaId":"4326174E-9187-49A0-AB05-B450B6C53F31"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ac6005_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"v200r006c00","matchCriteriaId":"3B78B3D8-AEF9-4529-8C98-0C1A5C1EFB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ac6605_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"v200r005c10","matchCriteriaId":"8AB7F764-5246-495B-B342-8D4C8168670B"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ac6605_firmware:v200r006c00:*:*:*:*:*:*:*","matchCriteriaId":"BEDF9639-FC4A-4749-9AF7-E7FBCF4147B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:acu2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"v200r005c10","matchCriteriaId":"5F0E0490-ADDB-410C-9C76-A10733AB682D"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:acu2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"v200r006c00","matchCriteriaId":"AC142E9C-C281-42DC-B254-6AC7D6B12855"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ac6003:-:*:*:*:*:*:*:*","matchCriteriaId":"50521400-DB04-4EA9-A98D-A9A893E8054F"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ac6005:-:*:*:*:*:*:*:*","matchCriteriaId":"3681DA94-7184-4DC6-BD73-FCE2DB808F07"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ac6605:-:*:*:*:*:*:*:*","matchCriteriaId":"BA1E5AE5-EBB2-4E05-A3C7-E2CA54205FF7"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:acu2:-:*:*:*:*:*:*:*","matchCriteriaId":"BF525629-AD0D-4CDC-A979-712C841FF7C6"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-ac-en","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92506","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-ac-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-2146","sourceIdentifier":"psirt@cisco.com","published":"2016-09-22T17:59:00.133","lastModified":"2026-06-17T00:06:08.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these sessions, aka Bug IDs CSCun94946 and CSCun96847."},{"lang":"es","value":"La funcionalidad Zone-Based Firewall (ZBFW) en Cisco IOS, posiblemente 15.4 y versiones anteriores e IOS XE, posiblemente 3.13 y versiones anteriores, no maneja adecuadamente la zona de comprobación de las sesiones existentes, lo que permite a atacantes remotos eludir las restricciones de acceso a los recursos intencionadas a través de tráfico suplantado que coincide con una de estas sesiones, vulnerabilidad también conocida como Bug IDs CSCun94946 y CSCun96847."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"15.4\\(1\\)t1","matchCriteriaId":"4970DCB2-3E76-491E-94B0-727E64945D12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*","versionEndIncluding":"15.4\\(3\\)s","matchCriteriaId":"587D3D93-1222-4E04-91C4-E1E03AEFD7D2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93126","source":"psirt@cisco.com"},{"url":"https://tools.cisco.com/security/center/viewAlert.x?alertId=39129","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tools.cisco.com/security/center/viewAlert.x?alertId=39129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-2827","sourceIdentifier":"security@mozilla.org","published":"2016-09-22T22:59:00.130","lastModified":"2026-06-17T00:44:32.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a Content Security Policy (CSP) referrer directive with zero values."},{"lang":"es","value":"La función mozilla::net::IsValidReferrerPolicy en Mozilla Firefox en versiones anteriores a 49.0 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída de aplicación) a través de una directiva de referencia Content Security Policy (CSP) con valores cero."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2","matchCriteriaId":"C56407AD-F303-4E6E-A64E-4AFA23BFB739"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93052","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036852","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1289085","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-85/","source":"security@mozilla.org"},{"url":"http://www.securityfocus.com/bid/93052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1289085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-85/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5271","sourceIdentifier":"security@mozilla.org","published":"2016-09-22T22:59:04.770","lastModified":"2026-06-17T00:49:05.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a \"display: contents\" Cascading Style Sheets (CSS) property."},{"lang":"es","value":"La función PropertyProvider::GetSpacingInternal en Mozilla Firefox en versiones anteriores a 49.0 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída de aplicación) a través de carreras de texto en conjunción con una propiedad \"mostrar: contenidos\" Cascading Style Sheets (CSS)."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2","matchCriteriaId":"C56407AD-F303-4E6E-A64E-4AFA23BFB739"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-85.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93052","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036852","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1288946","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-85.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1288946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5279","sourceIdentifier":"security@mozilla.org","published":"2016-09-22T22:59:13.850","lastModified":"2026-06-17T00:49:06.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 49.0 permite a atacantes remotos asistidos por un usuario obtener información sensible de un nombre de ruta completo durante una operación de arrastrar y soltar de archivo local a través de código JavaScript manipulado."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2","matchCriteriaId":"C56407AD-F303-4E6E-A64E-4AFA23BFB739"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-85.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93052","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036852","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1249522","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-85.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1249522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5282","sourceIdentifier":"security@mozilla.org","published":"2016-09-22T22:59:16.957","lastModified":"2026-06-17T00:49:06.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 49.0 no restringe adecuadamente el esquema en peticiones favicon, lo que podría permitir a atacantes remotos obtener información sensible a través de vectores no especificados, según lo demostrado por una URL jar: para un recurso favicon."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"48.0.2","matchCriteriaId":"C56407AD-F303-4E6E-A64E-4AFA23BFB739"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-85.html","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93052","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1036852","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=932335","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-85.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=932335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201701-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6410","sourceIdentifier":"psirt@cisco.com","published":"2016-09-24T01:59:02.900","lastModified":"2026-06-17T00:50:58.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuy19856."},{"lang":"es","value":"El componente Cisco Application-hosting Framework (CAF) en Cisco IOS 15.6(1)T1 e IOS XE, cuando el set de características IOx está habilitado, permite a usuarios remotos autenticados leer archivos arbitrarios a través de vectores no especificados, vulnerabilidad también conocida como Bug ID CSCuy19856."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*","matchCriteriaId":"7A4E00DF-60FD-48F2-A69A-D709A5657F6A"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93090","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036873","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6412","sourceIdentifier":"psirt@cisco.com","published":"2016-09-24T01:59:05.057","lastModified":"2026-06-17T00:50:59.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773."},{"lang":"es","value":"El componente Cisco Application-hosting Framework (CAF) en Cisco IOS 15.6(1)T1 y IOS XE, cuando la característica IOx está habilitada, permite a atacantes man-in-the-middle desencadenar descargas arbitrarias a través de cabeceras HTTP manipuladas, vulnerabilidad también conocida como Bug ID CSCuz84773."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"EF662E36-0831-4892-850F-844B0E0B54DA"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93088","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036874","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0918","sourceIdentifier":"security_alert@emc.com","published":"2016-09-24T10:59:00.137","lastModified":"2026-06-17T00:38:28.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL."},{"lang":"es","value":"EMC RSA Identity Management and Governance en versiones anteriores a 6.8.1 P25 y 6.9.x en versiones anteriores a 6.9.1 P15 y RSA Via Lifecycle and Governance en versiones anteriores a 7.0.0 P04 permiten a usuarios remotos autenticados obtener información de User Detail Popup a través de una URL modificada."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_identity_management_and_governance:*:*:*:*:*:*:*:*","versionEndIncluding":"6.8.1","matchCriteriaId":"54CA7E75-0907-4477-8280-4814BB324B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.0:*:*:*:*:*:*:*","matchCriteriaId":"0EFA9B3D-507A-49CD-9DA5-3CC984EE4E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_identity_management_and_governance:6.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E8784E8C-B027-446D-92E3-E1FF3CA90BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:rsa_via_lifecycle_and_governance:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.0","matchCriteriaId":"F0D38511-F37F-46F2-A73C-295B7099D8EF"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Sep/52","source":"security_alert@emc.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/93108","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1036896","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/Sep/52","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/93108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4618","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:01.233","lastModified":"2026-06-17T00:47:54.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safari before 10 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka \"Universal XSS (UXSS).\""},{"lang":"es","value":"Vulnerabilidad de XSS en Safari Reader en Apple iOS en versiones anteriores a 10 y Safari en versiones anteriores a 10 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un sitio web manipulado, vulnerabilidad también conocida como \"Universal XSS (UXSS)\"."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"910B5A3B-1AB7-498A-83A6-38F6FB002CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93053","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036854","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207157","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4701","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:09.890","lastModified":"2026-06-17T00:48:02.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Application Firewall in Apple OS X before 10.12 allows local users to cause a denial of service via vectors involving a crafted SO_EXECPATH environment variable."},{"lang":"es","value":"Application Firewall en Apple OS X en versiones anteriores a 10.12 permite a usuarios locales provocar una denegación de servicio a través de vectores relacionados con un entorno variable SO_EXECPATH manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/93055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/93055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4706","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:13.093","lastModified":"2026-06-17T00:48:03.487","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"cd9660 in Apple OS X before 10.12 allows local users to cause a denial of service via unspecified vectors."},{"lang":"es","value":"cd9660 en Apple OS X en versiones anteriores a 10.12 permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4707","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:14.157","lastModified":"2026-06-17T00:48:03.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors."},{"lang":"es","value":"CFNetwork en Apple iOS en versiones anteriores a 10 y OS X en versiones anteriores a 10.12 no maneja correctamente la eliminación de Local Storage, lo que permite a usuarios locales descubrir los sitios web visitados por usuarios arbitrarios a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/93056","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/93056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4708","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:15.687","lastModified":"2026-06-17T00:48:03.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response."},{"lang":"es","value":"CFNetwork en Apple iOS en versiones anteriores a 10, OS X en versiones anteriores a 10.12, tvOS en versiones anteriores a 10 y watchOS en versiones anteriores a 3 no analiza correctamente la gramática de la cabecera Set-Cookie, lo que permite a atacantes remotos obtener información sensible a través de una respuesta HTTP manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0","matchCriteriaId":"4BBE9AE6-0191-47AD-B3D2-ACF6F7938DE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.12.0","matchCriteriaId":"9A86B8F0-8D98-4F68-8175-0DE52B7C53E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0","matchCriteriaId":"DA2316B5-54BF-47F1-8C33-9B207DF55702"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0","matchCriteriaId":"BB820D9F-A0CC-472A-9C07-E45E6D5DE5D0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93054","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT207141","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207142","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT207141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4713","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:20.780","lastModified":"2026-06-17T00:48:04.270","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access."},{"lang":"es","value":"CoreDisplay en Apple OS X en versiones anteriores a 10.12 permite a atacantes ver pantallas arbitrarias de usuarios aprovechando el acceso de compartir pantalla."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4718","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:25.110","lastModified":"2026-06-17T00:48:04.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FontParser in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory via a crafted font file."},{"lang":"es","value":"Desbordamiento de búfer en FontParser en Apple iOS en versiones anteriores a 10, OS X en versiones anteriores a 10.12, tvOS en versiones anteriores a 10 y watchOS en versiones anteriores a 3 permite a atacantes remotos obtener información sensible del proceso de memoria a través de una fuente de archivo manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0","matchCriteriaId":"4BBE9AE6-0191-47AD-B3D2-ACF6F7938DE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.12.0","matchCriteriaId":"9A86B8F0-8D98-4F68-8175-0DE52B7C53E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0","matchCriteriaId":"DA2316B5-54BF-47F1-8C33-9B207DF55702"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0","matchCriteriaId":"BB820D9F-A0CC-472A-9C07-E45E6D5DE5D0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93054","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT207141","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207142","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT207141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4722","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:26.203","lastModified":"2026-06-17T00:48:05.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The IDS - Connectivity component in Apple iOS before 10 and OS X before 10.12 allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cause a denial of service via unspecified vectors."},{"lang":"es","value":"El componente IDS - Connectivity en Apple iOS en versiones anteriores a 10 y OS X en versiones anteriores a 10.12 permite a atacantes man-in-the-middle llevar a cabo ataques de suplantación Call Relay y provocar una denegación de servicio a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/93056","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/93056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4742","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:43.673","lastModified":"2026-06-17T00:48:08.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NSSecureTextField in Apple OS X before 10.12 does not enable Secure Input, which allows attackers to discover credentials via a crafted app."},{"lang":"es","value":"NSSecureTextField en Apple OS X en versiones anteriores a 10.12 no habilita Secure Input, lo que permite a atacantes descubrir credenciales a través de una app manipulada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4745","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:44.987","lastModified":"2026-06-17T00:48:08.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Kerberos 5 (aka krb5) PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user accounts via a timing side-channel attack."},{"lang":"es","value":"El módulo PAM de Kerberos 5 (también conocido como krb5) en Apple OS X en versiones anteriores a 10.12 no utiliza operaciones de tiempo constante para determinar la validación de nombre de usuario, lo que facilita a atacantes remotos enumerar cuentas de usuario a través de un ataque de sincronización de canal lateral."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4748","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:45.970","lastModified":"2026-06-17T00:48:08.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Perl in Apple OS X before 10.12 allows local users to bypass the taint-mode protection mechanism via a crafted environment variable."},{"lang":"es","value":"Perl en Apple OS X en versiones anteriores a 10.12 permite a usuarios locales eludir el mecanismo de protección a través de un entorno variable manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4752","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:48.970","lastModified":"2026-06-17T00:48:09.347","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CF_RETURNS_RETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation."},{"lang":"es","value":"La función SecKeyDeriveFromPassword en Apple OS X en versiones anteriores a 10.12 no utiliza la palabra clave CF_RETURNS_RETAINED, lo que permite a atacantes obtener información sensible desde el proceso de memoria desencadenando la obtención de clave."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/93055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/93055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4755","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:51.910","lastModified":"2026-06-17T00:48:09.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Terminal in Apple OS X before 10.12 uses weak permissions for the .bash_history and .bash_session files, which allows local users to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Terminal en Apple OS X en versiones anteriores a 10.12 usa permisos débiles para los archivos .bash_history y .bash_session, lo que permite a usuarios locales obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4758","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:52.830","lastModified":"2026-06-17T00:48:09.813","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to obtain sensitive information via a crafted web site."},{"lang":"es","value":"WebKit en Apple iOS en versiones anteriores a 10, iTunes en versiones anteriores a 12.5.1 en Windows y Safari en versiones anteriores a 10 no restringe adecuadamente al acceso a la variable de localización, lo que permite a atacantes remotos obtener información sensible a través de un sitio web manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"A02241CD-8C84-46CA-AF77-7F9032836D20"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4.3","matchCriteriaId":"FA364FEA-190C-4C19-BEFF-6171CDBDEFB7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://mksben.l0.cm/2016/09/safari-uxss-showModalDialog.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/93066","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036854","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207157","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207158","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://mksben.l0.cm/2016/09/safari-uxss-showModalDialog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4760","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:55.160","lastModified":"2026-06-17T00:48:10.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support."},{"lang":"es","value":"WebKit en Apple iOS en versiones anteriores a 10, iTunes en versiones anteriores a 12.5.1 en Windows y Safari en versiones anteriores a 10 permite a atacantes remotos llevar a cabo ataques de revinculación DNS contra sesiones no HTTP de Safari aprovechando el soporte HTTP/0.9."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4.3","matchCriteriaId":"FA364FEA-190C-4C19-BEFF-6171CDBDEFB7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"A02241CD-8C84-46CA-AF77-7F9032836D20"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93066","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036854","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207157","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207158","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4763","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T10:59:57.160","lastModified":"2026-06-17T00:48:10.420","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."},{"lang":"es","value":"WKWebView en WebKit en Apple iOS en versiones anteriores a 10, iTunes en versiones anteriores a 12.5.1 en Windows y Safari en versiones anteriores a 10 no verifica correctamente certificados X.509 desde servidores HTTPS, lo que permite a atacantes man-in-the-middle suplantar servidores y obtener información sensible a través de un certificado manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4.3","matchCriteriaId":"FA364FEA-190C-4C19-BEFF-6171CDBDEFB7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"A02241CD-8C84-46CA-AF77-7F9032836D20"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93066","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036854","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207157","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207158","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-4771","sourceIdentifier":"product-security@apple.com","published":"2016-09-25T11:00:03.677","lastModified":"2026-06-17T00:48:11.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Apple iOS before 10 and OS X before 10.12 allows local users to bypass intended file-access restrictions via a crafted directory pathname."},{"lang":"es","value":"El kernel en Apple iOS en versiones anteriores a 10 y OS X en versiones anteriores a 10.12 permite a usuarios locales eludir restricciones destinadas al acceso de archivo a través de un directorio de nombre de ruta manipulado."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.5","matchCriteriaId":"5133BB4B-15AA-4F2F-B469-C5BD71FCE9C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.11.6","matchCriteriaId":"FEEAF544-405E-4A75-9206-5CC4EDCE2F05"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"product-security@apple.com","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93056","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1036858","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207143","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/HT207170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5172","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-25T20:59:04.260","lastModified":"2026-06-17T00:48:54.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code."},{"lang":"es","value":"El analizador en Google V8, como se usa en Google Chrome en versiones anteriores a 53.0.2785.113, no maneja correctamente alcances, lo que permite a atacantes remotos obtener información sensible desde localizaciones de memoria arbitrarias a través de un código JavaScript manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"53.0.2785.101","matchCriteriaId":"AC271026-1CD7-42F7-8754-1C5144AD590B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.8.1","matchCriteriaId":"D107EC29-67E7-40C3-8E5A-324C9105C5E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1905.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3667","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92942","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036826","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2077283004","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/616386","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2077283004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/616386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5174","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-25T20:59:07.060","lastModified":"2026-06-17T00:48:54.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen transition, which allows remote attackers to cause a denial of service (unsuppressed popup) via a crafted web site."},{"lang":"es","value":"browser/ui/cocoa/browser_wendow_controller_private.mm en Google Chrome en versiones anteriores a 53.0.2785.113 no procesa peticiones de conmutación a pantalla completa durante una transición a pantalla completa, lo que permite a atacantes remotos provocar una denegación de servicio (venta emergente no suprimida) a través de un sitio web manipulado."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"53.0.2785.101","matchCriteriaId":"AC271026-1CD7-42F7-8754-1C5144AD590B"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1905.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3667","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/92942","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1036826","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/2053343003","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/579934","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/92942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/2053343003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/579934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201610-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2999","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:04.007","lastModified":"2026-06-17T00:44:47.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to obtain sensitive information via an unspecified brute-force attack."},{"lang":"es","value":"IBM Connections 4.x hasta la versión 4.5 CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados obtener información sensible a través de un ataque de fuerza bruta no especificado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.0.0","matchCriteriaId":"C38B614A-BC35-49B7-B129-C43A2FEC3389"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"psirt@us.ibm.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93147","source":"psirt@us.ibm.com"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3000","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:05.617","lastModified":"2026-06-17T00:44:47.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service (service degradation) via a crafted URL."},{"lang":"es","value":"El servicio de ayuda en IBM Connections 4.x hasta la versión 4.5 CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados provocar una denegación de servicio (degradación del servicio) a través de una URL manipulada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1786E8E0-3A05-4845-8184-BC980C8FDF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"548B3376-1304-4289-A9A8-1B967C0425FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"psirt@us.ibm.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93166","source":"psirt@us.ibm.com"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3001","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:07.290","lastModified":"2026-06-17T00:44:47.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3003 and CVE-2016-3006."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 4.x hasta la versión 4.5 CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML manipulados a través de una cadena embebida, una vulnerabilidad diferente a CVE-2016-3003 y CVE-2016-3006."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1786E8E0-3A05-4845-8184-BC980C8FDF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"548B3376-1304-4289-A9A8-1B967C0425FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"psirt@us.ibm.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93172","source":"psirt@us.ibm.com"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3003","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:08.697","lastModified":"2026-06-17T00:44:48.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3001 and CVE-2016-3006."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 4.x hasta la versión 4.5 CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML manipulados a través de una cadena embebida, una vulnerabilidad diferente a CVE-2016-3001 y CVE-2016-3006."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1786E8E0-3A05-4845-8184-BC980C8FDF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"548B3376-1304-4289-A9A8-1B967C0425FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"psirt@us.ibm.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93161","source":"psirt@us.ibm.com"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3006","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:10.227","lastModified":"2026-06-17T00:44:48.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3001 and CVE-2016-3003."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Connections 4.x hasta la versión 4.5 CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML manipulados a través de una cadena embebida, una vulnerabilidad diferente a CVE-2016-3001 y CVE-2016-3003."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1786E8E0-3A05-4845-8184-BC980C8FDF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"548B3376-1304-4289-A9A8-1B967C0425FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E36F2948-3B6C-4F31-A08C-C80E908FBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B309632B-7039-4E34-8766-96ECF00D5F34"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"psirt@us.ibm.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93167","source":"psirt@us.ibm.com"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/93167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21989067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-3040","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:13.247","lastModified":"2026-06-17T00:44:51.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de CSFR en IBM Connections 4.x hasta la versión 4.5 CR5, 5.0 en versiones anteriores a CR4 y 5.5 en versiones anteriores a CR1 permite a usuarios remotos autenticados secuestrar la autenticación de usuarios arbitrarios."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_privileged_identity_manager_virtual_appliance:2.0:*:*:*:*:*:*:*","matchCriteriaId":"846B19DE-2067-4156-BFEF-8628A3CBFADA"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989205","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92986","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5943","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:14.557","lastModified":"2026-06-17T00:50:16.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors."},{"lang":"es","value":"IBM Spectrum Control (anteriormente Tivoli Storage Productivity Center) 5.2.x en versiones anteriores a 5.2.11 permite a usuarios remotos autenticados eludir restricciones destinadas al acceso y leer detalles de tarea o editar propiedades, a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"89CB6B48-731E-432C-BE93-F91B809EE13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8F87A134-6FDE-4384-8B78-ACBABD208736"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DAC4151E-9870-4112-800E-6B63658C777F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"71AD625D-FE89-4A7C-A007-B3B084FB4286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"05DD45D2-8361-478B-87E6-E3303383B622"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"99641F6F-039E-46F2-8970-DFE41552EDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8B5E06A8-517D-4C41-B22D-9BE75C2508E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0D4052D3-0E5D-4599-A7C7-102B9872BDF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"27BDE9FE-0F20-4CA3-BFBE-AABCFC7DA3F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7F30531B-4833-4D0A-85D8-6C58F89195E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"A7BF386B-396F-4276-9D9A-BBFAB8692896"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"36ECB4CB-BCE5-4127-832E-A27BE9A4A736"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2FB125F9-9640-42BA-A414-C82BEC5BF3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B0F7CE21-5BDB-43C1-880E-283C60756A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"B1A87CE3-AAFE-4AA1-9EFE-4D7A8BECA93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"076C8CAE-AC61-4513-A16F-272924D21279"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93084","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-5944","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:15.903","lastModified":"2026-06-17T00:50:16.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Spectrum Control (anteriormente Tivoli Storage Productivity Center) 5.2.x en versiones anteriores a 5.2.11 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una cadena embebida."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2FB125F9-9640-42BA-A414-C82BEC5BF3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B0F7CE21-5BDB-43C1-880E-283C60756A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"B1A87CE3-AAFE-4AA1-9EFE-4D7A8BECA93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"076C8CAE-AC61-4513-A16F-272924D21279"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F9DAD0D8-E45A-40F5-B35E-1FFBFE93245A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC6814BD-5550-442D-9123-44E71064B129"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"33203119-EA71-42EA-AFC3-CD36F63D2D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FB4A06FB-9565-467C-9E4C-CD3905CF9535"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"411C4C6C-505E-49EB-BE30-F006536D1E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AD404B3A-A601-44AE-B939-3DDEAAD7608D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"735826E4-B2E3-4AD4-8FDD-47AB95E4BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EAD1F886-EE85-4CBC-BDCB-4CDF6147F77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C7C352E7-64FB-488B-A1F1-1981E86B3BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"41C05B81-7E1D-4CAE-98ED-9E1AAC467DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"BB1EDFA6-E8DF-46A2-A2C7-B0C28E606D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F94C6B21-B3BF-4C3B-8532-06D897D32E33"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93087","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5945","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:17.433","lastModified":"2026-06-17T00:50:16.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request."},{"lang":"es","value":"IBM Spectrum Control (anteriormente Tivoli Storage Productivity Center) 5.2.x en versiones anteriores a 5.2.11 permite a usuarios remotos autenticados cargar archivos no ejecutables a través de una petición HTTP manipulada,"}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2FB125F9-9640-42BA-A414-C82BEC5BF3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B0F7CE21-5BDB-43C1-880E-283C60756A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"B1A87CE3-AAFE-4AA1-9EFE-4D7A8BECA93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"076C8CAE-AC61-4513-A16F-272924D21279"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F9DAD0D8-E45A-40F5-B35E-1FFBFE93245A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC6814BD-5550-442D-9123-44E71064B129"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"33203119-EA71-42EA-AFC3-CD36F63D2D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FB4A06FB-9565-467C-9E4C-CD3905CF9535"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"411C4C6C-505E-49EB-BE30-F006536D1E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AD404B3A-A601-44AE-B939-3DDEAAD7608D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"735826E4-B2E3-4AD4-8FDD-47AB95E4BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EAD1F886-EE85-4CBC-BDCB-4CDF6147F77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C7C352E7-64FB-488B-A1F1-1981E86B3BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"41C05B81-7E1D-4CAE-98ED-9E1AAC467DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"BB1EDFA6-E8DF-46A2-A2C7-B0C28E606D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F94C6B21-B3BF-4C3B-8532-06D897D32E33"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93082","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5946","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:18.747","lastModified":"2026-06-17T00:50:16.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en IBM Spectrum Control (anteriormente Tivoli Storage Productivity Center) 5.2.x en versiones anteriores a 5.2.11 permite a usuarios remotos autenticados leer archivos arbitrarios a través de un .. (punto punto) en una URL."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2FB125F9-9640-42BA-A414-C82BEC5BF3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B0F7CE21-5BDB-43C1-880E-283C60756A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"B1A87CE3-AAFE-4AA1-9EFE-4D7A8BECA93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"076C8CAE-AC61-4513-A16F-272924D21279"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F9DAD0D8-E45A-40F5-B35E-1FFBFE93245A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC6814BD-5550-442D-9123-44E71064B129"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"33203119-EA71-42EA-AFC3-CD36F63D2D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FB4A06FB-9565-467C-9E4C-CD3905CF9535"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"411C4C6C-505E-49EB-BE30-F006536D1E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AD404B3A-A601-44AE-B939-3DDEAAD7608D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"735826E4-B2E3-4AD4-8FDD-47AB95E4BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EAD1F886-EE85-4CBC-BDCB-4CDF6147F77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C7C352E7-64FB-488B-A1F1-1981E86B3BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"41C05B81-7E1D-4CAE-98ED-9E1AAC467DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"BB1EDFA6-E8DF-46A2-A2C7-B0C28E606D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F94C6B21-B3BF-4C3B-8532-06D897D32E33"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93086","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5947","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:20.013","lastModified":"2026-06-17T00:50:17.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site."},{"lang":"es","value":"IBM Spectrum Control (anteriormente Tivoli Storage Productivity Center) 5.2.x en versiones anteriores a 5.2.11 permite a usuarios remotos autenticados llevar a cabo ataques de secuestro de clic a través de un sitio web manipulado."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F9DAD0D8-E45A-40F5-B35E-1FFBFE93245A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC6814BD-5550-442D-9123-44E71064B129"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"33203119-EA71-42EA-AFC3-CD36F63D2D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FB4A06FB-9565-467C-9E4C-CD3905CF9535"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"411C4C6C-505E-49EB-BE30-F006536D1E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AD404B3A-A601-44AE-B939-3DDEAAD7608D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"735826E4-B2E3-4AD4-8FDD-47AB95E4BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EAD1F886-EE85-4CBC-BDCB-4CDF6147F77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C7C352E7-64FB-488B-A1F1-1981E86B3BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"41C05B81-7E1D-4CAE-98ED-9E1AAC467DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"BB1EDFA6-E8DF-46A2-A2C7-B0C28E606D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F94C6B21-B3BF-4C3B-8532-06D897D32E33"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2FB125F9-9640-42BA-A414-C82BEC5BF3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B0F7CE21-5BDB-43C1-880E-283C60756A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"B1A87CE3-AAFE-4AA1-9EFE-4D7A8BECA93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:spectrum_control:5.2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"076C8CAE-AC61-4513-A16F-272924D21279"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93085","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21988625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5970","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:24.497","lastModified":"2026-06-17T00:50:18.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x en versiones anteriores a 2.0.2 FP8 permite a usuarios remotos autenticados leer archivos arbitrarios a través de .. (punto punto) en una URL."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_privileged_identity_manager_virtual_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"369FAC98-8591-47B0-A251-3EECC82F9B1B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989205","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93080","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5972","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:27.577","lastModified":"2026-06-17T00:50:19.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 uses weak permissions for unspecified resources, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors."},{"lang":"es","value":"IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x en versiones anteriores a 2.0.2 FP8 utiliza permisos débiles para fuentes no especificadas, lo que permite a usuarios remotos autenticados obtener información sensible o modificar datos a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_privileged_identity_manager_virtual_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"369FAC98-8591-47B0-A251-3EECC82F9B1B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989205","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93077","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5974","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:28.967","lastModified":"2026-06-17T00:50:19.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x en versiones anteriores a 2.0.2 FP8 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una cadena embebida."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_privileged_identity_manager_virtual_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"369FAC98-8591-47B0-A251-3EECC82F9B1B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989205","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5975","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:30.267","lastModified":"2026-06-17T00:50:19.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5978."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en el portal web en IBM Tealeaf Customer Experience en versiones anteriores a 8.7.1.8847 FP10, 8.8 en versiones anteriores a 8.8.0.9049 FP9, 9.0.0 y 9.0.1 en versiones anteriores a 9.0.1.1117 FP5, 9.0.1A en versiones anteriores a 9.0.1.5108_9.0.1A FP5, 9.0.2 en versiones anteriores a 9.0.2.1223 FP3 y 9.0.2A en versiones anteriores a 9.0.2.5224_9.0.2A FP3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una cadena embebida, una vulnerabilidad diferente a CVE-2016-5978."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*","versionEndIncluding":"8.7","matchCriteriaId":"2F356136-5E64-43D5-94D2-A08934DEBD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*","matchCriteriaId":"FBAC9796-BA52-48AF-9326-3C2343BE2342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6D705DD1-8F24-49B4-8D05-F0403A625016"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D66B990-2034-46D9-AF8D-DE69B3161F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"50EC1311-629F-401B-9AE3-8ECDE0CBF330"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2AFA47D5-AC5B-4A1B-83A6-EE5D49ECE489"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"F5FE2E49-88CF-4D61-8097-B3146A47BAED"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93135","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5976","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:32.017","lastModified":"2026-06-17T00:50:19.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to discover component passwords via unspecified vectors."},{"lang":"es","value":"El portal web en IBM Tealeaf Customer Experience en versiones anteriores a 8.7.1.8847 FP10, 8.8 en versiones anteriores a 8.8.0.9049 FP9, 9.0.0 y 9.0.1 en versiones anteriores a 9.0.1.1117 FP5, 9.0.1A en versiones anteriores a 9.0.1.5108_9.0.1A FP5, 9.0.2 en versiones anteriores a 9.0.2.1223 FP3 y 9.0.2A en versiones anteriores a 9.0.2.5224_9.0.2A FP3 permite a usuarios remotos autenticados descubrir contraseñas de componentes a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*","versionEndIncluding":"8.7","matchCriteriaId":"2F356136-5E64-43D5-94D2-A08934DEBD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*","matchCriteriaId":"FBAC9796-BA52-48AF-9326-3C2343BE2342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6D705DD1-8F24-49B4-8D05-F0403A625016"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D66B990-2034-46D9-AF8D-DE69B3161F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"50EC1311-629F-401B-9AE3-8ECDE0CBF330"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2AFA47D5-AC5B-4A1B-83A6-EE5D49ECE489"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"F5FE2E49-88CF-4D61-8097-B3146A47BAED"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93134","source":"psirt@us.ibm.com"},{"url":"http://www.securityfocus.com/bid/93136","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5977","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:33.627","lastModified":"2026-06-17T00:50:19.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en el portal web en IBM Tealeaf Customer Experience en versiones anteriores a 8.7.1.8847 FP10, 8.8 en versiones anteriores a 8.8.0.9049 FP9, 9.0.0 y 9.0.1 en versiones anteriores a 9.0.1.1117 FP5, 9.0.1A en versiones anteriores a 9.0.1.5108_9.0.1A FP5, 9.0.2 en versiones anteriores a 9.0.2.1223 FP3 y 9.0.2A en versiones anteriores a 9.0.2.5224_9.0.2A FP3 permite a usuarios remotos autenticados redirigir usuarios a sitios web arbitrarios y llevar a cabo ataques de phishing a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*","versionEndIncluding":"8.7","matchCriteriaId":"2F356136-5E64-43D5-94D2-A08934DEBD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*","matchCriteriaId":"FBAC9796-BA52-48AF-9326-3C2343BE2342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6D705DD1-8F24-49B4-8D05-F0403A625016"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D66B990-2034-46D9-AF8D-DE69B3161F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"50EC1311-629F-401B-9AE3-8ECDE0CBF330"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2AFA47D5-AC5B-4A1B-83A6-EE5D49ECE489"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"F5FE2E49-88CF-4D61-8097-B3146A47BAED"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93139","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5978","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:34.877","lastModified":"2026-06-17T00:50:19.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5975."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en el portal web en IBM Tealeaf Customer Experience en versiones anteriores a 8.7.1.8847 FP10, 8.8 en versiones anteriores a 8.8.0.9049 FP9, 9.0.0 y 9.0.1 en versiones anteriores a 9.0.1.1117 FP5, 9.0.1A en versiones anteriores a 9.0.1.5108_9.0.1A FP5, 9.0.2 en versiones anteriores a 9.0.2.1223 FP3 y 9.0.2A en versiones anteriores a 9.0.2.5224_9.0.2A FP3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una cadena embebida, una vulnerabilidad diferente a CVE-2016-5975."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:*","matchCriteriaId":"41B6A77E-1686-44A6-B1E4-AC63A0466AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*","matchCriteriaId":"FBAC9796-BA52-48AF-9326-3C2343BE2342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6D705DD1-8F24-49B4-8D05-F0403A625016"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"4A2BAB44-B859-4209-BAFD-088E9583F31B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D66B990-2034-46D9-AF8D-DE69B3161F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"50EC1311-629F-401B-9AE3-8ECDE0CBF330"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2AFA47D5-AC5B-4A1B-83A6-EE5D49ECE489"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"F5FE2E49-88CF-4D61-8097-B3146A47BAED"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93140","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5997","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T04:59:37.877","lastModified":"2026-06-17T00:50:21.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not apply password-quality rules to password changes, which makes it easier for remote attackers to obtain access via a brute-force attack."},{"lang":"es","value":"El portal web en IBM Tealeaf Customer Experience en versiones anteriores a 8.7.1.8847 FP10, 8.8 en versiones anteriores a 8.8.0.9049 FP9, 9.0.0 y 9.0.1 en versiones anteriores a 9.0.1.1117 FP5, 9.0.1A en versiones anteriores a 9.0.1.5108_9.0.1A FP5, 9.0.2 en versiones anteriores a 9.0.2.1223 FP3 y 9.0.2A en versiones anteriores a 9.0.2.5224_9.0.2A FP3 no aplica reglas de calidad de contraseñas para los cambios de contraseñas, lo que facilita a atacantes remotos obtener acceso a través de un ataque de fuerza bruta."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-640"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*","versionEndIncluding":"8.7","matchCriteriaId":"2F356136-5E64-43D5-94D2-A08934DEBD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*","matchCriteriaId":"FBAC9796-BA52-48AF-9326-3C2343BE2342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6D705DD1-8F24-49B4-8D05-F0403A625016"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D66B990-2034-46D9-AF8D-DE69B3161F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"50EC1311-629F-401B-9AE3-8ECDE0CBF330"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2AFA47D5-AC5B-4A1B-83A6-EE5D49ECE489"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"F5FE2E49-88CF-4D61-8097-B3146A47BAED"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93144","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4993","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T14:59:03.117","lastModified":"2026-06-17T00:48:34.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en el servidor web Undertow en WildFly 10.0.0, tal como se utiliza en Red Hat JBoss Enterprise Application Platform (EAP) 7.x en versiones anteriores a 7.0.2, permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de separación de respuesta HTTP a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-93"},{"lang":"en","value":"CWE-113"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1","matchCriteriaId":"10E93E7B-7373-469A-BAA0-D665064BE7DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8A9E6081-79BE-4FD0-A1C2-79840ACEDA7E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1838.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1839.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1840.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1841.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92894","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036758","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3454","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:3455","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:3456","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:3458","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344321","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1838.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1839.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1840.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1841.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5395","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T14:59:04.210","lastModified":"2026-06-17T00:49:19.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies."},{"lang":"es","value":"Vulnerabilidad de XSS en la funcionalidad de crear usuario en la herramienta de administración de políticas en Apache Ranger en versiones anteriores a 0.6.1 permite a administradores remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores relacionados con políticas."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ranger:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.0","matchCriteriaId":"5D3EE296-72E0-4D7A-8A3D-EED6D30FB55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ranger:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D6909D4B-7BE3-4F29-8982-A5377D63BB17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ranger:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0479F35C-191B-4C25-9133-19FD57CAC286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ranger:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"88754111-7402-4D9D-8EC5-41FE8247A671"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:ranger:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"90B9E6C0-9400-416B-9E31-309A9B988B6C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/92577","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6840","sourceIdentifier":"cve@mitre.org","published":"2016-09-26T14:59:07.243","lastModified":"2026-06-17T00:51:52.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLogin_CgiEntry and possibly other unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en la interfaz de gestión en Huawei OceanStor ISM en versiones anteriores a V200R001C04SPC200 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro loginName para cgi-bin/doLogin_CgiEntry y otros posibles vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:oceanstor_ism:v200r001c01:*:*:*:*:*:*:*","matchCriteriaId":"DA419418-2A55-4B84-A489-217291CEEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:oceanstor_ism:v200r001c02:*:*:*:*:*:*:*","matchCriteriaId":"209B550F-27B4-495E-A469-D80A6305F4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:oceanstor_ism:v200r001c03:*:*:*:*:*:*:*","matchCriteriaId":"A2102DAB-7909-4B4A-AFE7-A8E1B8CF10C8"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/138061/Huawei-ISM-Professional-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160818-01-ism-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92554","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/138061/Huawei-ISM-Professional-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160818-01-ism-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-8279","sourceIdentifier":"psirt@huawei.com","published":"2016-09-26T14:59:09.680","lastModified":"2026-06-17T00:54:05.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The video driver in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B362, CRR-UL20 before CRR-UL20C00B362, CRR-CL00 before CRR-CL00C92B362, and CRR-CL20 before CRR-CL20C92B362; P8 smartphones with software GRA-TL00 before GRA-TL00C01B366, GRA-UL00 before GRA-UL00C00B366, GRA-UL10 before GRA-UL10C00B366, and GRA-CL00 before GRA-CL00C92B366; and Honor 6 and Honor 6 Plus smartphones with software before 6.9.16 allows attackers to cause a denial of service (device reboot) via a crafted application."},{"lang":"es","value":"El controlador de vídeo en smartphones Huawei Mate S con software CRR-TL00 en versiones anteriores a CRR-TL00C01B362, CRR-UL20 en versiones anteriores a CRR-UL20C00B362, CRR-CL00 en versiones anteriores a CRR-CL00C92B362 y CRR-CL20 en versiones anteriores a CRR-CL20C92B362; smartphones P8 con software GRA-TL00 en versiones anteriores a GRA-TL00C01B366, GRA-UL00 en versiones anteriores a GRA-UL00C00B366, GRA-UL10 en versiones anteriores a GRA-UL10C00B366 y GRA-CL00 en versiones anteriores a GRA-CL00C92B366; y smartphones Honor 6 y Honor 6 Plus con software en versiones anteriores a 6.9.16 permite a atacantes provocar una denegación de servicio (reinicio del dispositivo) a través de una aplicación manipulada."}],"affected":[{"source":"psirt@huawei.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-cl00:*:*:*:*:*:*:*","matchCriteriaId":"A775C9F6-D759-4022-A499-FDABD19A0B18"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-tl00:*:*:*:*:*:*:*","matchCriteriaId":"2019AC75-E9C6-4AD0-B95F-2C4D03CCBBEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-ul00:*:*:*:*:*:*:*","matchCriteriaId":"8DE91607-4815-4460-8616-8C175981BC13"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:p8_firmware:gra-ul10:*:*:*:*:*:*:*","matchCriteriaId":"4E8D0A98-4F0D-485F-97B9-252C3A198659"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*","matchCriteriaId":"F43A4D21-F16A-4277-A7AF-9ADBC3429F4C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_s_firmware:crr-cl00:*:*:*:*:*:*:*","matchCriteriaId":"3017EDB7-E50F-4663-9C9B-C0CF00A98354"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_s_firmware:crr-cl20:*:*:*:*:*:*:*","matchCriteriaId":"35C14BBE-24E7-43B9-8A6D-15D166E66CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_s_firmware:crr-tl00:*:*:*:*:*:*:*","matchCriteriaId":"16EF3947-D9E7-4187-9B8B-A4C9F4A56E66"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:mate_s_firmware:crr-ul20:*:*:*:*:*:*:*","matchCriteriaId":"FC8FFBC4-9057-4847-9044-094C6280F28F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*","matchCriteriaId":"B240A6C3-B8D7-4755-A74C-BE37FDE7CBF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:honor6_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"6.9","matchCriteriaId":"875F68D6-2227-47DC-9BCE-09BF7E2A8C28"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:honor6:-:*:*:*:*:*:*:*","matchCriteriaId":"E479FB90-8646-40E5-B658-FFAEFA610E21"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:honor6_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"B2E79246-9823-44D9-AECA-C6993E3165B4"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-smartphone-en","source":"psirt@huawei.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93096","source":"psirt@huawei.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-smartphone-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-5746","sourceIdentifier":"security@opentext.com","published":"2016-09-26T15:59:00.140","lastModified":"2026-06-17T00:49:58.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf."},{"lang":"es","value":"libstorage, libstorage-ng y yast-storage no almacenan correctamente frases de contraseña para dispositivos de almacenamiento cifrado en un archivo temporal en disco, lo que podría permitir a usuarios locales obtener información sensible leyendo el archivo, según lo demostrado mediante /tmp/libstorage-XXXXXX/pwdf."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","baseScore":1.2,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:libstorage:-:*:*:*:*:*:*:*","matchCriteriaId":"29CF3C2C-E4D3-4C91-8CD4-E03637FA4BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:libstorage-ng:-:*:*:*:*:*:*:*","matchCriteriaId":"AB00F0BC-813B-44CA-B651-ADF33AB72578"},{"vulnerable":true,"criteria":"cpe:2.3:a:yast:yast-storage:-:*:*:*:*:*:*:*","matchCriteriaId":"0605BCFE-8372-49B3-9585-31371DE5DA2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00032.html","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/93169","source":"security@opentext.com"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=986971","source":"security@opentext.com"},{"url":"https://github.com/openSUSE/libstorage-ng/pull/123","source":"security@opentext.com"},{"url":"https://github.com/openSUSE/libstorage/pull/162","source":"security@opentext.com"},{"url":"https://github.com/openSUSE/libstorage/pull/163","source":"security@opentext.com"},{"url":"https://github.com/yast/yast-storage/pull/223","source":"security@opentext.com"},{"url":"https://github.com/yast/yast-storage/pull/224","source":"security@opentext.com"},{"url":"https://github.com/yast/yast-storage/pull/226","source":"security@opentext.com"},{"url":"https://github.com/yast/yast-storage/pull/227","source":"security@opentext.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=986971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openSUSE/libstorage-ng/pull/123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openSUSE/libstorage/pull/162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openSUSE/libstorage/pull/163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/yast/yast-storage/pull/223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/yast/yast-storage/pull/224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/yast/yast-storage/pull/226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/yast/yast-storage/pull/227","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/313.html\">CWE-313: Cleartext Storage in a File or on Disk</a>"}},{"cve":{"id":"CVE-2016-7142","sourceIdentifier":"cve@mitre.org","published":"2016-09-26T15:59:03.267","lastModified":"2026-06-17T00:52:40.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message."},{"lang":"es","value":"El módulo m_sasl en InspIRCd en versiones anteriores a 2.0.23, cuando es utilizado con un servicio que apoya la autenticación SASL_EXTERNAL, permite a atacantes remotos suplantar huellas dactilares de certificados y consecuentemente iniciar sesión como otro usuario a través de un mensaje SASL manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inspircd:inspircd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.22","matchCriteriaId":"E4CE1476-E442-4AE3-802C-D12CAA198932"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3662","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.inspircd.org/2016/09/03/v2023-released.html","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/04/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/09/05/8","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/inspircd/inspircd/commit/74fafb7f11b06747f69f182ad5e3769b665eea7a","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.inspircd.org/2016/09/03/v2023-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/04/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/09/05/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/inspircd/inspircd/commit/74fafb7f11b06747f69f182ad5e3769b665eea7a","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3639","sourceIdentifier":"cve@mitre.org","published":"2016-09-26T16:59:00.133","lastModified":"2026-06-17T00:46:07.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SAP HANA DB 1.00.091.00.1418659308 allows remote attackers to obtain sensitive topology information via an unspecified HTTP request, aka SAP Security Note 2176128."},{"lang":"es","value":"SAP HANA DB 1.00.091.00.1418659308 permite a atacantes remotos obtener información de topología sensible a través de una petición HTTP no especificada, también conocida como SAP Security Note 2176128."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:hana_db:1.00.091.00.1418659308:*:*:*:*:*:*:*","matchCriteriaId":"E325F2E6-599B-4A19-8731-4531FCB7398E"}]}]}],"references":[{"url":"http://onapsis.com/research/security-advisories/sap-hana-get-topology-information-disclosure","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/138428/SAP-HANA-1.00.091.00.1418659308-Information-Disclosure.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/83","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92547","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://onapsis.com/research/security-advisories/sap-hana-get-topology-information-disclosure","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/138428/SAP-HANA-1.00.091.00.1418659308-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/83","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6153","sourceIdentifier":"cve@mitre.org","published":"2016-09-26T16:59:03.523","lastModified":"2026-06-17T00:50:32.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files."},{"lang":"es","value":"os_unix.c en SQLite en versiones anteriores a 3.13.0 no implementa correctamente el algoritmo de búsqueda de directorio temporal, lo que podría permitir a usuarios locales obtener información sensible, provocar una denegación de servicio (caída de aplicación) o tener otro impacto no especificado aprovechando el uso de directorio de trabajo actual para archivos temporales."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.5,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12.2","matchCriteriaId":"575E53A9-1BF3-4059-A69D-11A46817D040"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*","matchCriteriaId":"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00053.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/01/1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/01/2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91546","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.sqlite.org/cgi/src/info/67985761aa93fb61","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00022.html","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGQTH7V45QVHFDXJAEECHEO3HHD644WZ/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4019-1/","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4019-2/","source":"cve@mitre.org"},{"url":"https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.sqlite.org/releaselog/3_13_0.html","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/01/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/01/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.sqlite.org/cgi/src/info/67985761aa93fb61","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGQTH7V45QVHFDXJAEECHEO3HHD644WZ/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4019-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4019-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.sqlite.org/releaselog/3_13_0.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6172","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T16:59:04.947","lastModified":"2026-06-17T00:50:34.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response."},{"lang":"es","value":"PowerDNS (también conocido como pdns) Authoritative Server en versiones anteriores a 4.0.1 permite a servidores DNS primarios remotos provocar una denegación de servicio (agotamiento de memoria y caída del servidor DNS secundario) a través de una gran respuesta (1) AXFR o (2) IXFR."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:authoritative_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"B6BCE24C-DB2C-4592-BE28-B1CCDC959DF5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00085.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3664","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/06/3","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91678","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036242","source":"secalert@redhat.com"},{"url":"https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-401","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"https://github.com/PowerDNS/pdns/issues/4128","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://github.com/PowerDNS/pdns/issues/4133","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://github.com/PowerDNS/pdns/pull/4134","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://github.com/sischkg/xfer-limit/blob/master/README.md","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/06/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/91678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://github.com/PowerDNS/pdns/issues/4128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/PowerDNS/pdns/issues/4133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/PowerDNS/pdns/pull/4134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/sischkg/xfer-limit/blob/master/README.md","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6826","sourceIdentifier":"cve@mitre.org","published":"2016-09-26T16:59:05.993","lastModified":"2026-06-17T00:51:50.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei AnyMail before 2.6.0301.0060 allows remote attackers to cause a denial of service (application crash) via a crafted compressed email attachment."},{"lang":"es","value":"Huawei AnyMail en versiones anteriores a 2.6.0301.0060 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un archivo adjunto de email comprimido manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:anyoffice_secureapp:2.5.0301.0190:*:*:*:*:*:*:*","matchCriteriaId":"D8DE39D2-8C7E-49DB-AF86-384DF2E963A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:anyoffice_secureapp:2.5.0501.0190:*:*:*:*:*:*:*","matchCriteriaId":"1A7FAC6B-5533-44B3-878D-A0E058F4597A"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-anymail-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-anymail-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6827","sourceIdentifier":"cve@mitre.org","published":"2016-09-26T16:59:07.040","lastModified":"2026-06-17T00:51:50.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated users to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Huawei FusionCompute en versiones anteriores a V100R005C10CP7002 almacena claves AES de texto plano en un archivo, lo que permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:fusioncompute:*:*:*:*:*:*:*:*","versionEndIncluding":"v100r003c10","matchCriteriaId":"46021731-EE04-4153-9D4B-FA13E9A91B39"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-fusioncompute-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92626","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-fusioncompute-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6901","sourceIdentifier":"cve@mitre.org","published":"2016-09-26T16:59:08.040","lastModified":"2026-06-17T00:51:57.797","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en routers Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200 y AR3600 con software en versiones anteriores a V200R007C00SPC900 y routers NetEngine 16EX con software en versiones anteriores a V200R007C00SPC900 permite a usuarios remotos autenticados provocar una denegación de servicio a través de especificadores de cadena de formato en vectores que involucran comandos parciales."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r005:*:*:*:*:*:*:*","matchCriteriaId":"1218BE7F-D708-4055-9C90-061A392871E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r006:*:*:*:*:*:*:*","matchCriteriaId":"EB3CC140-37A9-48B9-B4C3-5024E5B9CF5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r007c00:*:*:*:*:*:*:*","matchCriteriaId":"6768AB85-7F68-4C78-BC11-2EBE81AABC89"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar100:-:*:*:*:*:*:*:*","matchCriteriaId":"D1026E62-E92D-484A-AA47-EFEFCB40313B"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar120:-:*:*:*:*:*:*:*","matchCriteriaId":"B5BBD38E-5589-450D-BC91-A581272DEE19"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*","matchCriteriaId":"D4BA4150-8CA8-48BF-9D45-ABC8AC710060"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*","matchCriteriaId":"526371A8-11FE-4D00-AFBB-8E867A320B27"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*","matchCriteriaId":"2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*","matchCriteriaId":"50662078-4827-4706-AE29-170E2239C5AE"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar2500:-:*:*:*:*:*:*:*","matchCriteriaId":"14617073-D349-4ACE-81F7-57956AA96985"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*","matchCriteriaId":"9309E1AA-0C4E-422C-9307-A8DD0AE5D576"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*","matchCriteriaId":"D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar500:-:*:*:*:*:*:*:*","matchCriteriaId":"30A84EEE-E321-43DA-AC40-096491F9AA81"},{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar550:-:*:*:*:*:*:*:*","matchCriteriaId":"CED2E3EE-2B0D-4C11-AF55-D7FD011E52D1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:netengine_16ex_firmware:v200r005:*:*:*:*:*:*:*","matchCriteriaId":"42F8FCC1-8A62-44D4-93FD-1CAE470E9A76"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:netengine_16ex_firmware:v200r006:*:*:*:*:*:*:*","matchCriteriaId":"2BC975B7-6C07-42E3-9783-6B32F5617986"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:netengine_16ex_firmware:v200r007c00:*:*:*:*:*:*:*","matchCriteriaId":"137ADAFD-9C2E-430F-95FC-4FBDF71B8377"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:netengine_16ex:-:*:*:*:*:*:*:*","matchCriteriaId":"7F1D336A-FB14-4DA7-9EAE-DDE6E51C268F"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92618","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6913","sourceIdentifier":"cve@mitre.org","published":"2016-09-26T16:59:09.167","lastModified":"2026-06-17T00:51:59.127","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php."},{"lang":"es","value":"Vulnerabilidad de XSS en AlienVault OSSIM en versiones anteriores a 5.3 y USM en versiones anteriores a 5.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro back para ossim/conf/reload.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_and_event_management:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"9033C82B-B562-4D09-BDD7-9FCA59376073"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"D879CC03-D733-4880-958D-D7870F746EEF"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2016/Aug/122","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92632","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://www.alienvault.com/forums/discussion/7558/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://www.alienvault.com/forums/discussion/7558/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6038","sourceIdentifier":"psirt@us.ibm.com","published":"2016-09-26T17:59:00.173","lastModified":"2026-06-17T00:50:23.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka LWI), as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Eclipse Help en IBM Tivoli Lightweight Infrastructure (también conocido como LWI), tal como se utiliza en AIX 5.3, 6.1 y 7.1, permite a usuarios remotos autenticados leer archivos arbitrarios a través de una URL manipulada,"}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0402E20C-8B41-4A2A-BFF9-92EC843985F0"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/pconsole_mitigation.asc","source":"psirt@us.ibm.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93180","source":"psirt@us.ibm.com"},{"url":"http://www.securitytracker.com/id/1036887","source":"psirt@us.ibm.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/pconsole_mitigation.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6306","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T19:59:02.910","lastModified":"2026-06-17T00:50:47.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c."},{"lang":"es","value":"El analizador certificado en OpenSSL en versiones anteriores a 1.0.1u y 1.0.2 en versiones anteriores a 1.0.2i podría permitir a atacantes remotos provocar una denegación de servicio (lectura fuera de rango) a través de operaciones certificadas manipuladas, relacionado con s3_clnt.c y s3_srvr.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B3261B40-5CBE-4AA6-990A-0A7BE96E5518"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_mcrp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C6AFB9DD-DA50-4F9D-B19D-160CA487D002"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:certd:*:*:*","matchCriteriaId":"87037877-8506-4737-9F47-2CB687975B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:dfw:*:*:*","matchCriteriaId":"FD94C478-6F81-4F37-B7F3-61D8682EC593"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso_agent_option:10.0:*:*:*:*:*:*:*","matchCriteriaId":"531FE660-C1A9-4C83-90BE-E38AA493D4F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_web_scripting:12.0:*:*:*:*:*:*:*","matchCriteriaId":"F788DAEB-9865-45DE-B18A-FDD43E1EBB9D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.47","matchCriteriaId":"080F38F5-0A51-43BC-BC66-98545B31A0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.12.0","versionEndExcluding":"0.12.16","matchCriteriaId":"F90AAE35-9B46-4FEA-AF3A-5F28761EAC4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.6.0","matchCriteriaId":"303F780C-C971-4216-86D6-5026AAD56279"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.12.0","matchCriteriaId":"121E5D5D-B4D9-43F3-B5C9-74590192FAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.7.0","matchCriteriaId":"8291D42E-9E50-414D-9752-D70906D512B2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93153","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=52e623c4cb06fffa9d5e75c60b34b4bc130b12e9","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K90492697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=52e623c4cb06fffa9d5e75c60b34b4bc130b12e9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K90492697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6307","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T19:59:04.033","lastModified":"2026-06-17T00:50:48.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c."},{"lang":"es","value":"La implementación de máquina de estados en OpenSSL 1.1.0 en versiones anteriores a 1.1.0a asigna memoria antes de comprobar un exceso de longitud, lo que podría permitir a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de mensajes TLS manipulados, relacionado con statem/statem.c y statem/statem_lib.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/93152","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=4b390b6c3f8df925dc92a3dd6b022baa9a2f4650","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=4b390b6c3f8df925dc92a3dd6b022baa9a2f4650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6308","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T19:59:05.033","lastModified":"2026-06-17T00:50:48.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages."},{"lang":"es","value":"statem/statem_dtls.c en la implementación DTLS en OpenSSL 1.1.0 en versiones anteriores a 1.1.0a asigna memoria antes de comprobar el exceso de longitud, lo que podría permitir a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de mensajes DTLS manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/93151","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=df6b5e29ffea2d5a3e08de92fb765fdb21c7a21e","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=df6b5e29ffea2d5a3e08de92fb765fdb21c7a21e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-4058","sourceIdentifier":"cve@mitre.org","published":"2016-09-27T15:59:00.157","lastModified":"2026-06-17T00:46:48.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to \"special characters on pages.\""},{"lang":"es","value":"Vulnerabilidad de XSS en Huawei Policy Center en versiones anteriores a V100R003C10SPC020 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores relacionados con \"caracteres especiales en páginas\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:policy_center:v100r003c00:*:*:*:*:*:*:*","matchCriteriaId":"95CA0A4C-2571-4593-A075-9A6A7EABBB33"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:policy_center:v100r003c10:*:*:*:*:*:*:*","matchCriteriaId":"16D46E9E-7F34-49C4-B56F-9090157FAD6E"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-policycenter-en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86546","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-policycenter-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/86546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6146","sourceIdentifier":"cve@mitre.org","published":"2016-09-27T15:59:04.737","lastModified":"2026-06-17T00:50:32.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226."},{"lang":"es","value":"El NameServer in SAP TREX 7.10 Revision 63 permite a atacantes remotos obtener información TNS sensible a través de una consulta no especificada, vulnerabilidad también conocida como SAP Security Note 2234226."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:trex:7.10:revision_63:*:*:*:*:*:*","matchCriteriaId":"9F3A9BC2-1A94-433B-B3B2-DB4CB2839195"}]}]}],"references":[{"url":"http://onapsis.com/research/security-advisories/sap-trex-tns-information-disclosure-nameserver","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/138445/SAP-TREX-7.10-Revision-63-NameServer-TNS-Information-Disclosure.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/93","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://layersevensecurity.com/wp-content/uploads/2016/03/Layer-Seven-Security_SAP-Security-Notes_February-2016.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://onapsis.com/research/security-advisories/sap-trex-tns-information-disclosure-nameserver","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/138445/SAP-TREX-7.10-Revision-63-NameServer-TNS-Information-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Aug/93","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://layersevensecurity.com/wp-content/uploads/2016/03/Layer-Seven-Security_SAP-Security-Notes_February-2016.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-7498","sourceIdentifier":"secalert@redhat.com","published":"2016-09-27T15:59:13.673","lastModified":"2026-06-17T00:53:08.833","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state.  NOTE: this vulnerability exists because of a CVE-2015-3280 regression."},{"lang":"es","value":"OpenStack Compute (nova) 13.0.0 no elimina adecuadamente instancias desde nodos de cómputo, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de disco) mediante la eliminación de instancias durante el estado de cambio de tamaño. NOTA: esta vulnerabilidad existe debido a una regresión de CVE-2015-3280."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:compute_\\(nova\\):13.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9FDB25AF-C426-40D2-B2D4-EFACF2BE8B14"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/09/21/8","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/23/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93068","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-011.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/21/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/23/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-5061","sourceIdentifier":"cret@cert.org","published":"2016-09-29T10:59:00.160","lastModified":"2026-06-17T00:48:42.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTPAgent, (2) MacAgent, (3) getExternalURL, or (4) retrieveTrustedUrl page."},{"lang":"es","value":"Varias vulnerabilidades de XSS en el servidor web en Aternity en versiones anteriores a 9.0.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) HTTPAgent, (2) MacAgent, (3) getExternalURL o (4) RetrieveTrustedUrl página."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aternity:aternity:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"855D892C-F382-4A68-8FF1-9EDA399D8581"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/706359","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/93210","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/706359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/93210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5176","sourceIdentifier":"chrome-cve-admin@google.com","published":"2016-09-29T10:59:02.877","lastModified":"2026-06-17T00:48:54.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecified vectors."},{"lang":"es","value":"Google Chrome en versiones anteriores a 53.0.2785.113 permite a atacantes remotos eludir el mecanismo de protección SafeBrowsing a través de vectores no especificados."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"53.0.2785.101","matchCriteriaId":"AC271026-1CD7-42F7-8754-1C5144AD590B"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1905.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/93234","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/595838","source":"chrome-cve-admin@google.com"},{"url":"https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html","source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/595838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7090","sourceIdentifier":"cve@mitre.org","published":"2016-09-29T10:59:03.893","lastModified":"2026-06-17T00:52:34.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session."},{"lang":"es","value":"El servidor web integrado en los módulos de Siemens SCALANCE M-800 y S615 con firmware en versión anterior a 4.02 no establece el indicador de seguridad para la cookie de la sesión en una sesión https, lo que facilita a atacantes remotos capturar esta cookie interceptando esta transmisión dentro de una sesión http."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"4.01","matchCriteriaId":"508BA7F3-A692-4391-BD63-922615C4A0A3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*","matchCriteriaId":"DFB9921A-5204-40A3-88AB-B7755F5C6875"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"4.01","matchCriteriaId":"EDAEDA8A-F92C-49C1-BDAF-556A1472FD26"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*","matchCriteriaId":"E917CBBB-EF41-4113-B0CA-EB91889235E7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93115","source":"cve@mitre.org"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-342135.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-271-01","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/93115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-342135.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-271-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2016-6636","sourceIdentifier":"security_alert@emc.com","published":"2016-09-30T00:59:00.180","lastModified":"2026-06-17T00:51:30.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.1; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 mishandles redirect_uri subdomains, which allows remote attackers to obtain implicit access tokens via a modified subdomain."},{"lang":"es","value":"La implementación de autorización OAuth en Pivotal Cloud Foundry (PCF) en versiones anteriores a 242; UAA 2.x en versiones anteriores a 2.7.4.7, 3.x en versiones anteriores a 3.3.0.5 y 3.4.x en versiones anteriores a 3.4.4; UAA BOSH en versiones anteriores a 11.5 y 12.x en versiones anteriores a 12.5; Elastic Runtime en versiones anteriores a 1.6.40, 1.7.x en versiones anteriores a 1.7.21 y 1.8.x en versiones anteriores a 1.8.1 y Ops Manager 1.7.x en versiones anteriores a 1.7.13 y 1.8.x en versiones anteriores a 1.8.1 no maneja adecuadamente subdominios redirect_uri, lo que permite a atacantes remotos obtener tokens de acceso implícito a través de un subdominio modificado."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*","versionEndIncluding":"12.3","matchCriteriaId":"1D172CC2-124E-4179-A82E-857290D32FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry:*:*:*:*:*:*:*:*","versionEndIncluding":"241","matchCriteriaId":"27E43458-95D7-4A85-B8E7-3D452A9CFD25"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F4CC5918-BC38-46E3-8000-5FE87A65C0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"36926681-35F4-4619-9613-155DEEEA3C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"41FF3C2B-E96F-4DF7-A5C4-703206CB729E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F9CB3C2D-3080-4A3D-8D8D-1381B5D98920"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"782781EB-147C-4B00-84C5-1D8443BFA2D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"35A56755-EEB2-4C93-B180-3918A36965AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E4009F10-08AF-470B-B903-38B8A6DBF332"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"2B2E8F04-53E6-4A3C-BE4B-8D0DDA22CA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"790DAB24-893A-463F-8358-171DACD75074"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"3645A1A8-4945-447F-A968-101D5938F9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"0E52C9B9-8F94-48D8-ADA6-96918F6AAD36"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*","matchCriteriaId":"3948FC2F-AF3B-4AF3-968D-F124D03A213A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*","matchCriteriaId":"4BA44F9B-97D5-48C0-91E9-6D3FEC8B7773"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*","matchCriteriaId":"7B414F88-6541-48C6-B9D6-4DDA035A0037"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*","matchCriteriaId":"66235C7F-D5EE-4989-8D24-6D0781954234"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*","matchCriteriaId":"12E75B49-2419-4313-A648-B5283DA620E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17:*:*:*:*:*:*:*","matchCriteriaId":"A2C07910-C462-46C1-83CB-39B3FD8D25BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C6B9243E-31EF-48AB-BAB5-CCC3704A219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.19:*:*:*:*:*:*:*","matchCriteriaId":"2BCB1D4B-F44C-41A1-90CA-62FD37003A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.20:*:*:*:*:*:*:*","matchCriteriaId":"F623783F-46DF-454E-BD83-5D2AE35EA9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.21:*:*:*:*:*:*:*","matchCriteriaId":"6BD9D35B-3E85-49FD-BA0A-D9020C5F280E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.22:*:*:*:*:*:*:*","matchCriteriaId":"A28CEEDF-FA40-4922-87A6-35DEBF184DC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.23:*:*:*:*:*:*:*","matchCriteriaId":"D4F08111-51B1-4866-8695-C0877FC77D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.25:*:*:*:*:*:*:*","matchCriteriaId":"620EAB8D-3754-494D-9912-724A0FE1E80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.26:*:*:*:*:*:*:*","matchCriteriaId":"ADBA74BD-EF83-4F29-8040-FB5B35D38C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.27:*:*:*:*:*:*:*","matchCriteriaId":"A1E00BE6-B2B6-4C02-9510-1F3DCC081173"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.28:*:*:*:*:*:*:*","matchCriteriaId":"A4D9E726-CF92-4DE5-8A04-02428328CC8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.29:*:*:*:*:*:*:*","matchCriteriaId":"5E1CAC4E-3CD6-4D0C-8544-9481E57FD338"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.30:*:*:*:*:*:*:*","matchCriteriaId":"D1D0F13A-D149-492D-A484-B7F4235B2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.31:*:*:*:*:*:*:*","matchCriteriaId":"160A9972-DCF2-46A9-8025-938C492E5A0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.32:*:*:*:*:*:*:*","matchCriteriaId":"43978845-CC25-4975-8155-AC0999A4268B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.33:*:*:*:*:*:*:*","matchCriteriaId":"7B1A6848-16B9-47EC-B7C8-7740086398F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.34:*:*:*:*:*:*:*","matchCriteriaId":"D9708D36-4A9B-484A-A627-69A85D66EDF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.35:*:*:*:*:*:*:*","matchCriteriaId":"F0AB1C89-79D2-4997-A00D-E6E62243278B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.36:*:*:*:*:*:*:*","matchCriteriaId":"C071EA95-4AE2-43DC-900F-3DDD38959754"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.37:*:*:*:*:*:*:*","matchCriteriaId":"A6FF1F58-580A-4035-9427-1B4E96FC9E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.38:*:*:*:*:*:*:*","matchCriteriaId":"71499439-2748-4B4F-8659-AE4F67CCC8AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.39:*:*:*:*:*:*:*","matchCriteriaId":"50161ECB-FEEA-4E1C-8DF9-5F3F7D944895"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"85E08C11-76E1-4F91-8061-5DA1BABD8767"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"E3B75A7F-EAAC-4D81-9A10-D8DB45828EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"FA53D5B4-75BF-445F-96AA-4DC308B76E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6DD5D5D9-604D-4917-99D0-1F41784A6835"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"6B2BF60D-EEEE-4F4C-A19F-108C78366089"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"5EED880C-5EF5-4FEA-A4BD-58CA61C12A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"DDA80BA5-66B0-4A6C-B552-175DBB930EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"BCDBAF27-D5DC-4379-A76E-7BD2CD98EB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"D957FD98-C2B4-48C2-81A0-37B2581E9F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0DADB2DA-A12F-426E-9DEB-3628B081F78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.10:*:*:*:*:*:*:*","matchCriteriaId":"99C97080-9BD3-4F17-A0E4-80F9F4CD7DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.11:*:*:*:*:*:*:*","matchCriteriaId":"E764D26C-D2C4-496C-936F-BF6793BF7C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.12:*:*:*:*:*:*:*","matchCriteriaId":"1E574EDD-AD33-4A00-8E14-76F0134EC00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.13:*:*:*:*:*:*:*","matchCriteriaId":"A2274274-C1F8-4E42-AF7A-BDBF379E823E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.14:*:*:*:*:*:*:*","matchCriteriaId":"DCB25167-8350-4362-876C-690F5B5B057C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.15:*:*:*:*:*:*:*","matchCriteriaId":"28F89423-3AEE-475A-BBBA-B895D9732A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.16:*:*:*:*:*:*:*","matchCriteriaId":"B4B5CB0D-09C9-4CB2-B842-CA68400CDAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.17:*:*:*:*:*:*:*","matchCriteriaId":"F047032B-218E-41BF-9F46-4682D415960E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.18:*:*:*:*:*:*:*","matchCriteriaId":"B291CCA0-EAE5-4900-ABF3-9A9D76910BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.19:*:*:*:*:*:*:*","matchCriteriaId":"DB8DAD87-111B-4F17-85CC-65C395851079"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.20:*:*:*:*:*:*:*","matchCriteriaId":"248878D6-7987-4608-9A28-66F3F7EFB976"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"258FAFB4-2B67-456B-BE78-1562A3D5E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2D55721-7B40-4277-9E5A-4A9688D12ADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7B931453-BA62-45A2-8574-A590E2DE55DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"BA7E6331-33BC-4F3D-86C7-4DDBCB2B3B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"9FCBC4AE-B126-4EF6-B75E-062423E3F161"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"ED35AA0C-9427-492A-972A-D82972BBD9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"7412837F-8F31-48A5-81AF-51E7A4A40310"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"6A8A33E4-AFCD-436B-8635-7F45F4B043F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"79217281-FDA5-44AD-82A9-7375F9562345"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"E7FB48BC-5523-4B18-860C-A1DA648F2C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.9:*:*:*:*:*:*:*","matchCriteriaId":"2B630514-7848-435E-B9BD-9350BA671D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.10:*:*:*:*:*:*:*","matchCriteriaId":"683152A4-2927-4735-8BFF-B9B499B44D15"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC7AEA69-D9C5-4CE8-BD67-9E5E5E7EF343"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.12:*:*:*:*:*:*:*","matchCriteriaId":"ADD6F12D-6324-48E3-A508-70A7B122CA3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C015DE32-1D60-49EA-889D-B8FE453CF02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"555D749F-4228-4B8C-8E0F-F9D6401E79B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"58AEF0BF-8073-435E-9AE1-07A7B0B4B497"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"046215E7-464A-41E6-B310-9C56AB8A4243"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"99BAEFFA-DD36-4CE7-B8D5-906509346720"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8D624768-9C90-4BE3-8715-78CC408C02AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B604B862-5213-4A4D-9147-A5D90EF13923"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0C8A2F1-A40D-4041-BF2B-59A8DC81581A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"ACFDEF8D-9BE5-43ED-8E1D-2B63A1294EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"504AA7E0-D1F5-4097-B53B-F0E36328B1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0DCD6CB7-5D49-4897-8353-44E5B08D9375"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"916733EA-F51A-49E2-9D47-9B713B36C847"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"03D97B63-F59C-47FD-9919-3B543F0C4BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2BF268FB-5CAA-4441-A5EA-F65080A65815"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"597CA1EF-4E57-4676-B772-239EFB684C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D44FEC0-341E-4AD4-B0BC-0B10FDB6DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CDB08635-4792-4483-8A5D-B07B3CC6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EAF6E32B-0B37-47CB-A6B3-AC226DC7B032"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3D410B4D-D427-4F18-8962-8E232378B2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C5FE703B-B6E7-4936-B675-7FDCECD84A05"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"423A1AAF-B173-4FCB-A34A-616A7EC178CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EEC3C020-A0A3-4D8D-ABFE-EA3C52FAB4D7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93246","source":"security_alert@emc.com"},{"url":"https://pivotal.io/security/cve-2016-6636","source":"security_alert@emc.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://pivotal.io/security/cve-2016-6636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6647","sourceIdentifier":"security_alert@emc.com","published":"2016-09-30T00:59:03.007","lastModified":"2026-06-17T00:51:31.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en EMC ViPR SRM en versiones anteriores a 4.0.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:vipr_srm:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"FA4802D8-56EF-45CF-8621-CA8BB7C5D9A0"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2016/Sep/62","source":"security_alert@emc.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93187","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id/1036904","source":"security_alert@emc.com"},{"url":"http://seclists.org/bugtraq/2016/Sep/62","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0617","sourceIdentifier":"secalert_us@oracle.com","published":"2016-09-30T14:59:00.190","lastModified":"2026-06-17T00:37:53.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente kernel-uek en Oracle Linux 6 permite a usuarios locales afectar la disponibilidad a través de vectores no especificados."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:C","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-10T17:50:11.020395Z","id":"CVE-2016-0617","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"634CE616-76A3-4202-A4F6-6BB5042A859E"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034968","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1034968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3042","sourceIdentifier":"psirt@us.ibm.com","published":"2016-10-01T01:59:02.037","lastModified":"2026-06-17T00:44:51.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving OpenID Connect clients."},{"lang":"es","value":"Vulnerabilidad de XSS en la Web UI en IBM WebSphere Application Server (WAS) Liberty en versiones anteriores a 16.0.0.3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores que implican clientes de OpenID Connect ."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*","matchCriteriaId":"DB9E1C79-AD2C-4F13-A613-21095FD3021F"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI64790","source":"psirt@us.ibm.com","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986716","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92985","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI64790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21986716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3619","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T16:09:00.180","lastModified":"2026-06-17T00:46:05.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the \"-c none\" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image."},{"lang":"es","value":"La función DumpModeEncode en tif_dumpmode.c en la herramienta bmp2tiff en LibTIFF 4.0.6 y versiones anteriores, cuando la opción \"-c none\" es usada, permite a atacantes remotos provocar una denegación de servicio (sobre lectura del búfer) a través de una imagen BMP manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"33708995-494C-476D-B0E3-1E78B9328699"}]}]}],"references":[{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2567","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/07/1","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/85919","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035508","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"cve@mitre.org"},{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/07/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/85919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3622","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T16:09:04.133","lastModified":"2026-06-17T00:46:05.757","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image."},{"lang":"es","value":"La función fpAcc en tif_predict.c en la herramienta tiff2rgba en LibTIFF 4.0.6 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (error de división por cero) a través de una imagen TIFF manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-369"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"33708995-494C-476D-B0E3-1E78B9328699"}]}]}],"references":[{"url":"http://www.debian.org/security/2017/dsa-3762","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/07/4","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/85917","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035508","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2017/dsa-3762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/04/07/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/85917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-3625","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T16:09:07.977","lastModified":"2026-06-17T00:46:06.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image."},{"lang":"es","value":"tif_read.c en la herramienta tiff2bw en LibTIFF 4.0.6 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) a través de una imagen TIFF manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.6","matchCriteriaId":"7DBB051D-E94D-4553-88A6-750BE80B7617"}]}]}],"references":[{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2566","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/08/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"cve@mitre.org"},{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/08/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-16","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7397","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T16:09:14.870","lastModified":"2026-06-17T00:52:59.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the \"value\" field of the SMTP user settings in the notifications configuration tab."},{"lang":"es","value":"El componente Frontend en Sophos UTM con firmware 9.405-5 y versiones anteriores permite a administradores locales obtener información sensible de contraseñas leyendo el campo \"value\" de los ajustes de usuario SMTP en la pestaña de configuración de notificaciones."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:unified_threat_management_software:*:*:*:*:*:*:*:*","versionEndIncluding":"9.405-5","matchCriteriaId":"5363455B-6320-4531-9599-EEE5F99ECD44"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/539518/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/93266","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036931","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/539518/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7442","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T16:09:16.167","lastModified":"2026-06-17T00:53:04.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the \"value\" field of the proxy user settings in \"system settings / scan settings / anti spam\" configuration tab."},{"lang":"es","value":"El componente Frontend en Sophos UTM con firmware 9.405-5 y en versiones anteriores permite a administradores locales obtener información sensible de contraseñas leyendo el campo \"value\" de los ajustes de usuario del proxy en pestaña de configuración \"system settings / scan settings / anti spam\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:unified_threat_management_software:*:*:*:*:*:*:*:*","versionEndIncluding":"9.405-5","matchCriteriaId":"5363455B-6320-4531-9599-EEE5F99ECD44"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/539518/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/93266","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036931","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/539518/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1371","sourceIdentifier":"psirt@cisco.com","published":"2016-10-03T18:59:02.733","lastModified":"2026-06-17T00:41:49.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable."},{"lang":"es","value":"ClamAV (también conocido como Clam AntiVirus) en versiones anteriores a 0.99.2 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un ejecutable mew empaquetado manipulado."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.99.1","matchCriteriaId":"79EBFCFC-258F-4434-A130-09B40727899E"}]}]}],"references":[{"url":"http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93222","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3093-1","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.clamav.net/show_bug.cgi?id=11514","source":"psirt@cisco.com","tags":["Issue Tracking"]},{"url":"https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/","source":"psirt@cisco.com","tags":["Exploit","Technical Description","Third Party Advisory"]},{"url":"http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3093-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.clamav.net/show_bug.cgi?id=11514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Technical Description","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1372","sourceIdentifier":"psirt@cisco.com","published":"2016-10-03T18:59:03.797","lastModified":"2026-06-17T00:41:49.127","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file."},{"lang":"es","value":"ClamAV (también conocido como Clam AntiVirus) en versiones anteriores a 0.99.2 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un archivo 7z manipulado."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.99.1","matchCriteriaId":"79EBFCFC-258F-4434-A130-09B40727899E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]}],"references":[{"url":"http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93221","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3093-1","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.clamav.net/show_bug.cgi?id=11514","source":"psirt@cisco.com","tags":["Issue Tracking"]},{"url":"https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/","source":"psirt@cisco.com","tags":["Exploit","Technical Description","Third Party Advisory"]},{"url":"http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3093-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.clamav.net/show_bug.cgi?id=11514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Technical Description","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-5398","sourceIdentifier":"secalert@redhat.com","published":"2016-10-03T18:59:06.347","lastModified":"2026-06-17T00:49:20.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite before 6.3.3 allows remote authenticated users to inject arbitrary web script or HTML by levering permission to create business processes."},{"lang":"es","value":"Vulnerabilidad de XSS en Business Process Editor en Red Hat JBoss BPM Suite en versiones anteriores a 6.3.3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios apalancando los permisos para crear procesos de negocio."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_bpm_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.2","matchCriteriaId":"2DC83704-41A4-4FB1-B459-55812F67629E"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1968.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1969.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93219","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358523","source":"secalert@redhat.com","tags":["Issue Tracking","VDB Entry","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1968.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1969.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-6494","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T18:59:10.523","lastModified":"2026-06-17T00:51:16.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files."},{"lang":"es","value":"El cliente en MongoDB utiliza permisos accesibles a todos en archivos históricos .dbshell, lo que podría permitir a usuarios locales obtener información sensible leyendo estos archivos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.15","matchCriteriaId":"1A2D34F9-FBC8-477D-B7B6-620597C2476C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2","versionEndExcluding":"3.2.14","matchCriteriaId":"6587C16E-A810-4110-AFEF-F97BF27040B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3","versionEndExcluding":"3.3.14","matchCriteriaId":"A37D6883-E16A-46B1-ADBE-4F7E8EB7BD54"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*","matchCriteriaId":"772E9557-A371-4664-AE2D-4135AAEB89AA"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/07/29/4","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/29/8","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92204","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832908","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362553","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://github.com/mongodb/mongo/commit/035cf2afc04988b22cb67f4ebfd77e9b344cb6e0","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://jira.mongodb.org/browse/SERVER-25335","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MCE2ZLFBNOK3TTWSTXZJQGZVP4EEJDL/","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/07/29/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/29/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://github.com/mongodb/mongo/commit/035cf2afc04988b22cb67f4ebfd77e9b344cb6e0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://jira.mongodb.org/browse/SERVER-25335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MCE2ZLFBNOK3TTWSTXZJQGZVP4EEJDL/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7570","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T18:59:15.230","lastModified":"2026-06-17T00:53:15.727","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Drupal 8.x before 8.1.10 does not properly check for \"Administer comments\" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes."},{"lang":"es","value":"Drupal 8.x en versiones anteriores a 8.1.10 no valida adecuadamente el permiso para \"Administrar comentarios\", lo que permite a usuarios remotos autenticados configurar la visibilidad de los comentarios para nodos arbitrarios aprovechando los derechos para editar estos nodos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3C20DAD7-13A7-40F7-B6E0-965DB4E14508"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha10:*:*:*:*:*:*","matchCriteriaId":"144694E6-3287-4F4D-A687-7F495133DBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha11:*:*:*:*:*:*","matchCriteriaId":"581D686B-1061-4271-BEF4-17A429BD666A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha12:*:*:*:*:*:*","matchCriteriaId":"E3E45AA6-5FAF-4C63-91F5-0765CE60191A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha13:*:*:*:*:*:*","matchCriteriaId":"FE5D81CF-AE7B-4A9C-AD8F-9A19D2AC35DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha14:*:*:*:*:*:*","matchCriteriaId":"A27535A5-7C4F-4548-A4B8-5FFBD58361D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha15:*:*:*:*:*:*","matchCriteriaId":"17BC6508-3518-4BB5-B29F-4E6CB6DE9D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"8CBB5620-5847-443F-8356-B66EE93A3779"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"3E81260D-E0D2-4FD2-AAED-99945404EB00"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"5A7D34E6-76E0-4BCB-A4C8-9401C7331EF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"201E2EA9-B811-4BB2-867A-6F12DC472911"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"C957B189-10C2-4D42-B5B9-03F7DE287C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"A7E21838-CDEC-41B2-AE40-C78DE8984B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha8:*:*:*:*:*:*","matchCriteriaId":"639F0284-85D1-40B0-B337-77632E7A664B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha9:*:*:*:*:*:*","matchCriteriaId":"5F4B611A-3628-41EA-878D-BF9D6C34AA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"856E46E5-1BF3-42F4-AFCB-81275B1EF265"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta10:*:*:*:*:*:*","matchCriteriaId":"B351F769-598F-4E3E-99EA-94A5516995A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta11:*:*:*:*:*:*","matchCriteriaId":"220900E6-5859-4CA9-831E-3FF3C128F060"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta12:*:*:*:*:*:*","matchCriteriaId":"0D55D51E-DE2D-469C-9F9C-F312A02EE921"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta13:*:*:*:*:*:*","matchCriteriaId":"259B5FE7-2808-4F61-B98C-73ECC7F9503C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta14:*:*:*:*:*:*","matchCriteriaId":"BA263BE6-2088-4E18-914B-96CFAA0093E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta15:*:*:*:*:*:*","matchCriteriaId":"906AED87-8C5C-4214-B5AD-43E5573E357A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta16:*:*:*:*:*:*","matchCriteriaId":"E150FDA8-5271-465C-8DE0-F44E9FC81E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"4E036D4F-BD94-4F77-883C-165B3F0802C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7A7068F8-810D-4720-9E0E-06DB1DD366ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"443183F6-9EF5-41AE-8AD0-B304BBF1670A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"58C5EF43-E24F-4BDB-9496-16DE4EEF3E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta7:*:*:*:*:*:*","matchCriteriaId":"B00B494B-736A-47A7-ACF3-81368C033086"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta9:*:*:*:*:*:*","matchCriteriaId":"E275F22B-7A46-4107-BE6F-6C4D7EAA46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"63530139-7EF2-4210-9870-B06175ECBC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ED085089-51D6-4E5C-96E8-CC5C7C55CC97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"36FC67CE-9C45-4842-81AF-EEAE557D70D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5FE6AC83-B248-4491-A320-836C65E64D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"99D7F3C7-3EC6-48D2-A8D5-1F987FD74A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"434D4D80-44C0-4278-A09B-005A599F4658"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2CF1BC91-4A24-40FC-8EEC-E4FAD624C2CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"43067661-B562-41BC-B272-8A79075291B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EA9EF375-AE7C-4900-A992-C635228889E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"53FA0C7F-000A-4CB4-86E3-DEC0C9DCA1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E39B2B71-C1B8-4A16-88FE-D691CC3C9BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"535BC461-E9B1-4124-8125-1D9F91CF4F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"06F63C7F-CE02-428D-90CD-05B726C0026D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F18278D5-A30B-4624-AC64-CA39F92EB8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3F72CAF-2BCA-454D-B8AC-951EC566A965"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E0C7CB5D-CE55-4628-957D-3D2C5EE2353B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C9E1FBB4-D63F-4AA0-ADE3-70527F4D84A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9D2D1BF3-879B-44C5-B3A0-2E91B27BFF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D2BB7835-2BFD-4182-B112-7E8A9FF2449C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"80CE2090-A5AF-47B8-BB7D-727FFF093413"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"8B28527E-92CB-4171-8EE3-9187C3F44EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3CB85396-4D94-4752-A134-A1644C707777"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F6802D01-6220-4EBE-B267-10DC14E6D186"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93101","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036886","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.drupal.org/SA-CORE-2016-004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.drupal.org/SA-CORE-2016-004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7571","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T18:59:16.780","lastModified":"2026-06-17T00:53:15.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception."},{"lang":"es","value":"Vulnerabilidad de XSS en Drupal 8.x en versiones anteriores a 8.1.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores que involucran una excepción HTTP."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3C20DAD7-13A7-40F7-B6E0-965DB4E14508"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha10:*:*:*:*:*:*","matchCriteriaId":"144694E6-3287-4F4D-A687-7F495133DBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha11:*:*:*:*:*:*","matchCriteriaId":"581D686B-1061-4271-BEF4-17A429BD666A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha12:*:*:*:*:*:*","matchCriteriaId":"E3E45AA6-5FAF-4C63-91F5-0765CE60191A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha13:*:*:*:*:*:*","matchCriteriaId":"FE5D81CF-AE7B-4A9C-AD8F-9A19D2AC35DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha14:*:*:*:*:*:*","matchCriteriaId":"A27535A5-7C4F-4548-A4B8-5FFBD58361D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha15:*:*:*:*:*:*","matchCriteriaId":"17BC6508-3518-4BB5-B29F-4E6CB6DE9D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"8CBB5620-5847-443F-8356-B66EE93A3779"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"3E81260D-E0D2-4FD2-AAED-99945404EB00"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"5A7D34E6-76E0-4BCB-A4C8-9401C7331EF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"201E2EA9-B811-4BB2-867A-6F12DC472911"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"C957B189-10C2-4D42-B5B9-03F7DE287C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"A7E21838-CDEC-41B2-AE40-C78DE8984B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha8:*:*:*:*:*:*","matchCriteriaId":"639F0284-85D1-40B0-B337-77632E7A664B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha9:*:*:*:*:*:*","matchCriteriaId":"5F4B611A-3628-41EA-878D-BF9D6C34AA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"856E46E5-1BF3-42F4-AFCB-81275B1EF265"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta10:*:*:*:*:*:*","matchCriteriaId":"B351F769-598F-4E3E-99EA-94A5516995A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta11:*:*:*:*:*:*","matchCriteriaId":"220900E6-5859-4CA9-831E-3FF3C128F060"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta12:*:*:*:*:*:*","matchCriteriaId":"0D55D51E-DE2D-469C-9F9C-F312A02EE921"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta13:*:*:*:*:*:*","matchCriteriaId":"259B5FE7-2808-4F61-B98C-73ECC7F9503C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta14:*:*:*:*:*:*","matchCriteriaId":"BA263BE6-2088-4E18-914B-96CFAA0093E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta15:*:*:*:*:*:*","matchCriteriaId":"906AED87-8C5C-4214-B5AD-43E5573E357A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta16:*:*:*:*:*:*","matchCriteriaId":"E150FDA8-5271-465C-8DE0-F44E9FC81E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"4E036D4F-BD94-4F77-883C-165B3F0802C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7A7068F8-810D-4720-9E0E-06DB1DD366ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"443183F6-9EF5-41AE-8AD0-B304BBF1670A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"58C5EF43-E24F-4BDB-9496-16DE4EEF3E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta7:*:*:*:*:*:*","matchCriteriaId":"B00B494B-736A-47A7-ACF3-81368C033086"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta9:*:*:*:*:*:*","matchCriteriaId":"E275F22B-7A46-4107-BE6F-6C4D7EAA46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"63530139-7EF2-4210-9870-B06175ECBC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ED085089-51D6-4E5C-96E8-CC5C7C55CC97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"36FC67CE-9C45-4842-81AF-EEAE557D70D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5FE6AC83-B248-4491-A320-836C65E64D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"99D7F3C7-3EC6-48D2-A8D5-1F987FD74A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"434D4D80-44C0-4278-A09B-005A599F4658"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2CF1BC91-4A24-40FC-8EEC-E4FAD624C2CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"43067661-B562-41BC-B272-8A79075291B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EA9EF375-AE7C-4900-A992-C635228889E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"53FA0C7F-000A-4CB4-86E3-DEC0C9DCA1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E39B2B71-C1B8-4A16-88FE-D691CC3C9BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"535BC461-E9B1-4124-8125-1D9F91CF4F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"06F63C7F-CE02-428D-90CD-05B726C0026D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F18278D5-A30B-4624-AC64-CA39F92EB8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3F72CAF-2BCA-454D-B8AC-951EC566A965"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E0C7CB5D-CE55-4628-957D-3D2C5EE2353B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C9E1FBB4-D63F-4AA0-ADE3-70527F4D84A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9D2D1BF3-879B-44C5-B3A0-2E91B27BFF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D2BB7835-2BFD-4182-B112-7E8A9FF2449C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"80CE2090-A5AF-47B8-BB7D-727FFF093413"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"8B28527E-92CB-4171-8EE3-9187C3F44EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3CB85396-4D94-4752-A134-A1644C707777"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F6802D01-6220-4EBE-B267-10DC14E6D186"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93101","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036886","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.drupal.org/SA-CORE-2016-004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.drupal.org/SA-CORE-2016-004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7572","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T18:59:18.360","lastModified":"2026-06-17T00:53:15.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for \"Export configuration\" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors."},{"lang":"es","value":"La ruta system.temporary en Drupal 8.x en versiones anteriores a 8.1.10 no valida adecuadamente el permiso para \"Exportar configuración\", lo que permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y leer una exportación de configuración completa a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3C20DAD7-13A7-40F7-B6E0-965DB4E14508"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha10:*:*:*:*:*:*","matchCriteriaId":"144694E6-3287-4F4D-A687-7F495133DBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha11:*:*:*:*:*:*","matchCriteriaId":"581D686B-1061-4271-BEF4-17A429BD666A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha12:*:*:*:*:*:*","matchCriteriaId":"E3E45AA6-5FAF-4C63-91F5-0765CE60191A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha13:*:*:*:*:*:*","matchCriteriaId":"FE5D81CF-AE7B-4A9C-AD8F-9A19D2AC35DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha14:*:*:*:*:*:*","matchCriteriaId":"A27535A5-7C4F-4548-A4B8-5FFBD58361D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha15:*:*:*:*:*:*","matchCriteriaId":"17BC6508-3518-4BB5-B29F-4E6CB6DE9D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"8CBB5620-5847-443F-8356-B66EE93A3779"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"3E81260D-E0D2-4FD2-AAED-99945404EB00"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"5A7D34E6-76E0-4BCB-A4C8-9401C7331EF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"201E2EA9-B811-4BB2-867A-6F12DC472911"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"C957B189-10C2-4D42-B5B9-03F7DE287C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"A7E21838-CDEC-41B2-AE40-C78DE8984B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha8:*:*:*:*:*:*","matchCriteriaId":"639F0284-85D1-40B0-B337-77632E7A664B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:alpha9:*:*:*:*:*:*","matchCriteriaId":"5F4B611A-3628-41EA-878D-BF9D6C34AA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"856E46E5-1BF3-42F4-AFCB-81275B1EF265"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta10:*:*:*:*:*:*","matchCriteriaId":"B351F769-598F-4E3E-99EA-94A5516995A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta11:*:*:*:*:*:*","matchCriteriaId":"220900E6-5859-4CA9-831E-3FF3C128F060"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta12:*:*:*:*:*:*","matchCriteriaId":"0D55D51E-DE2D-469C-9F9C-F312A02EE921"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta13:*:*:*:*:*:*","matchCriteriaId":"259B5FE7-2808-4F61-B98C-73ECC7F9503C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta14:*:*:*:*:*:*","matchCriteriaId":"BA263BE6-2088-4E18-914B-96CFAA0093E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta15:*:*:*:*:*:*","matchCriteriaId":"906AED87-8C5C-4214-B5AD-43E5573E357A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta16:*:*:*:*:*:*","matchCriteriaId":"E150FDA8-5271-465C-8DE0-F44E9FC81E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"4E036D4F-BD94-4F77-883C-165B3F0802C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7A7068F8-810D-4720-9E0E-06DB1DD366ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"443183F6-9EF5-41AE-8AD0-B304BBF1670A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"58C5EF43-E24F-4BDB-9496-16DE4EEF3E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta7:*:*:*:*:*:*","matchCriteriaId":"B00B494B-736A-47A7-ACF3-81368C033086"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:beta9:*:*:*:*:*:*","matchCriteriaId":"E275F22B-7A46-4107-BE6F-6C4D7EAA46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"63530139-7EF2-4210-9870-B06175ECBC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ED085089-51D6-4E5C-96E8-CC5C7C55CC97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"36FC67CE-9C45-4842-81AF-EEAE557D70D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5FE6AC83-B248-4491-A320-836C65E64D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"99D7F3C7-3EC6-48D2-A8D5-1F987FD74A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"434D4D80-44C0-4278-A09B-005A599F4658"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2CF1BC91-4A24-40FC-8EEC-E4FAD624C2CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"43067661-B562-41BC-B272-8A79075291B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EA9EF375-AE7C-4900-A992-C635228889E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"53FA0C7F-000A-4CB4-86E3-DEC0C9DCA1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E39B2B71-C1B8-4A16-88FE-D691CC3C9BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"535BC461-E9B1-4124-8125-1D9F91CF4F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"06F63C7F-CE02-428D-90CD-05B726C0026D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F18278D5-A30B-4624-AC64-CA39F92EB8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3F72CAF-2BCA-454D-B8AC-951EC566A965"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E0C7CB5D-CE55-4628-957D-3D2C5EE2353B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C9E1FBB4-D63F-4AA0-ADE3-70527F4D84A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9D2D1BF3-879B-44C5-B3A0-2E91B27BFF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D2BB7835-2BFD-4182-B112-7E8A9FF2449C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"80CE2090-A5AF-47B8-BB7D-727FFF093413"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"8B28527E-92CB-4171-8EE3-9187C3F44EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3CB85396-4D94-4752-A134-A1644C707777"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F6802D01-6220-4EBE-B267-10DC14E6D186"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93101","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036886","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.drupal.org/SA-CORE-2016-004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.drupal.org/SA-CORE-2016-004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-8085","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T21:59:03.800","lastModified":"2026-06-17T00:34:01.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 make it easier for remote authenticated administrators to obtain and decrypt passwords by leveraging selection of a reversible encryption algorithm."},{"lang":"es","value":"Routers Huawei AR con software en versiones anteriores a V200R007C00SPC100; routers Quidway S9300 con software en versiones anteriores a V200R009C00; routers S12700 con software en versiones anteriores aV200R008C00SPC500; routers S9300, Quidway S5300 y S5300 con software en versiones anteriores aV200R007C00 y routers S5700 con software en versiones anteriores aV200R007C00SPC500 facilita a administradores remotos autenticados obtener y descifrar contraseñas aprovechando la selección de un algoritmos de cifrado reversible."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9300_firmware:v200r005c00spc300:*:*:*:*:*:*:*","matchCriteriaId":"A066F4B8-2258-4ED2-A166-02FCA7C9F3A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9300_firmware:v200r006c00spc500:*:*:*:*:*:*:*","matchCriteriaId":"DDA38762-CACE-403B-8DE5-42E0306FEB28"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:*","matchCriteriaId":"AD2EC926-50C6-4CBE-BB6F-56F3A6287DEE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:*","matchCriteriaId":"7D81469B-EC6C-493D-B632-4DF821A1F304"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s12700_firmware:v200r006c00:*:*:*:*:*:*:*","matchCriteriaId":"D6F2C4C7-3438-42B8-8999-C17E45C8CF49"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*","matchCriteriaId":"138C1E57-176C-46B1-9704-D9C8391CC802"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:quidway_s9300_firmware:v200r001c00spc300:*:*:*:*:*:*:*","matchCriteriaId":"DB8B2442-4A0E-4C7A-8D21-A1E09BD1A204"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:quidway_s9300_firmware:v200r002c00spc100:*:*:*:*:*:*:*","matchCriteriaId":"3022A5BA-DD0D-47D8-8EFA-A617743C133A"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:quidway_s9300_firmware:v200r003c00spc500:*:*:*:*:*:*:*","matchCriteriaId":"7B2FFB6E-1895-4796-B445-4A4193DEFEAE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:quidway_s9300:-:*:*:*:*:*:*:*","matchCriteriaId":"2E756FE8-F106-4BFD-B33B-CC198363D2FD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r001:*:*:*:*:*:*:*","matchCriteriaId":"0A265FD5-0984-4698-97EB-2904C289561D"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r002:*:*:*:*:*:*:*","matchCriteriaId":"EFF757E5-F689-49CF-9972-ED5A3D825891"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r003:*:*:*:*:*:*:*","matchCriteriaId":"08EAB0B6-9363-4632-814A-D51DD3087346"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r005c10:*:*:*:*:*:*:*","matchCriteriaId":"65081FFE-ECBD-42EE-885A-7E29AB844FBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r005c20:*:*:*:*:*:*:*","matchCriteriaId":"5356CB25-52E6-4786-B024-07F7B53E00A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r005c30:*:*:*:*:*:*:*","matchCriteriaId":"53A40184-F3A0-472C-B4DE-7AD6D73BEA17"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar:-:*:*:*:*:*:*:*","matchCriteriaId":"D1D2EB9C-FA8B-4B3F-89BE-AC2611EE4373"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:quidway_s5300_firmware:v200r001c00spc300:*:*:*:*:*:*:*","matchCriteriaId":"B5B529C9-04F5-48C3-9346-C7E0104ED0C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:quidway_s5300:-:*:*:*:*:*:*:*","matchCriteriaId":"4C872196-628D-42A2-AC58-69CD8784CE5D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r001c00:*:*:*:*:*:*:*","matchCriteriaId":"336AA440-AEF4-482B-A037-8976DC38BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r002c00:*:*:*:*:*:*:*","matchCriteriaId":"3B2DE9FE-5EC9-462E-86F0-EE772C944DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r003c00:*:*:*:*:*:*:*","matchCriteriaId":"4907FBB8-5157-460D-9240-DD7D610C0FCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*","matchCriteriaId":"DCF23DAE-1215-41B2-88C5-4436D846266C"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*","matchCriteriaId":"5973A534-F961-4A97-B20E-994BA28AFE29"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*","matchCriteriaId":"E22D3CFF-3353-4EE2-8933-84F395469D0D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300_firmware:v200r002c00:*:*:*:*:*:*:*","matchCriteriaId":"8FD118E1-317E-4903-A4D0-51EBCFA58C5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300_firmware:v200r005c00spc500:*:*:*:*:*:*:*","matchCriteriaId":"1AC26C2F-71A8-433A-B062-789F2E32605C"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300_firmware:v200r006c00spc500:*:*:*:*:*:*:*","matchCriteriaId":"A17ED5D3-1698-4AED-9640-F9CE026AD217"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5300:-:*:*:*:*:*:*:*","matchCriteriaId":"2CFEF08E-54C5-4D60-AFF0-37B00D6E2DDD"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-455876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/76897","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-455876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/76897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8086","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T21:59:04.893","lastModified":"2026-06-17T00:34:01.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage."},{"lang":"es","value":"Routers Huawei AR con software en versiones anteriores a V200R007C00SPC100; routers Quidway S9300 con software en versiones anteriores a V200R009C00; routers S12700 con software en versiones anteriores a V200R008C00SPC500; routers S9300, Quidway S5300 y S5300 con software en versiones anteriores a V200R007C00 y routers S5700 con software en versiones anteriores a V200R007C00SPC500 facilita a administradores remotos autenticados obtener las claves de cifrado y contraseñas de texto cifrado a través de vectores relacionados con el almacenamiento de claves."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:quidway_s5300_firmware:v200r001c00spc300:*:*:*:*:*:*:*","matchCriteriaId":"B5B529C9-04F5-48C3-9346-C7E0104ED0C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:quidway_s5300:-:*:*:*:*:*:*:*","matchCriteriaId":"4C872196-628D-42A2-AC58-69CD8784CE5D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:quidway_s9300_firmware:v200r001c00spc300:*:*:*:*:*:*:*","matchCriteriaId":"DB8B2442-4A0E-4C7A-8D21-A1E09BD1A204"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:quidway_s9300_firmware:v200r002c00spc100:*:*:*:*:*:*:*","matchCriteriaId":"3022A5BA-DD0D-47D8-8EFA-A617743C133A"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:quidway_s9300_firmware:v200r003c00spc500:*:*:*:*:*:*:*","matchCriteriaId":"7B2FFB6E-1895-4796-B445-4A4193DEFEAE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:quidway_s9300:-:*:*:*:*:*:*:*","matchCriteriaId":"2E756FE8-F106-4BFD-B33B-CC198363D2FD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r001c00:*:*:*:*:*:*:*","matchCriteriaId":"336AA440-AEF4-482B-A037-8976DC38BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r002c00:*:*:*:*:*:*:*","matchCriteriaId":"3B2DE9FE-5EC9-462E-86F0-EE772C944DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r003c00:*:*:*:*:*:*:*","matchCriteriaId":"4907FBB8-5157-460D-9240-DD7D610C0FCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*","matchCriteriaId":"DCF23DAE-1215-41B2-88C5-4436D846266C"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*","matchCriteriaId":"5973A534-F961-4A97-B20E-994BA28AFE29"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*","matchCriteriaId":"E22D3CFF-3353-4EE2-8933-84F395469D0D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:*","matchCriteriaId":"7D81469B-EC6C-493D-B632-4DF821A1F304"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s12700_firmware:v200r006c00:*:*:*:*:*:*:*","matchCriteriaId":"D6F2C4C7-3438-42B8-8999-C17E45C8CF49"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*","matchCriteriaId":"138C1E57-176C-46B1-9704-D9C8391CC802"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r001:*:*:*:*:*:*:*","matchCriteriaId":"0A265FD5-0984-4698-97EB-2904C289561D"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r002:*:*:*:*:*:*:*","matchCriteriaId":"EFF757E5-F689-49CF-9972-ED5A3D825891"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r003:*:*:*:*:*:*:*","matchCriteriaId":"08EAB0B6-9363-4632-814A-D51DD3087346"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r005c10:*:*:*:*:*:*:*","matchCriteriaId":"65081FFE-ECBD-42EE-885A-7E29AB844FBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r005c20:*:*:*:*:*:*:*","matchCriteriaId":"5356CB25-52E6-4786-B024-07F7B53E00A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ar_firmware:v200r005c30:*:*:*:*:*:*:*","matchCriteriaId":"53A40184-F3A0-472C-B4DE-7AD6D73BEA17"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ar:-:*:*:*:*:*:*:*","matchCriteriaId":"D1D2EB9C-FA8B-4B3F-89BE-AC2611EE4373"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300_firmware:v200r002c00:*:*:*:*:*:*:*","matchCriteriaId":"8FD118E1-317E-4903-A4D0-51EBCFA58C5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300_firmware:v200r005c00spc500:*:*:*:*:*:*:*","matchCriteriaId":"1AC26C2F-71A8-433A-B062-789F2E32605C"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s5300_firmware:v200r006c00spc500:*:*:*:*:*:*:*","matchCriteriaId":"A17ED5D3-1698-4AED-9640-F9CE026AD217"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s5300:-:*:*:*:*:*:*:*","matchCriteriaId":"2CFEF08E-54C5-4D60-AFF0-37B00D6E2DDD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9300_firmware:v200r005c00spc300:*:*:*:*:*:*:*","matchCriteriaId":"A066F4B8-2258-4ED2-A166-02FCA7C9F3A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:s9300_firmware:v200r006c00spc500:*:*:*:*:*:*:*","matchCriteriaId":"DDA38762-CACE-403B-8DE5-42E0306FEB28"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:*","matchCriteriaId":"AD2EC926-50C6-4CBE-BB6F-56F3A6287DEE"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-455876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/76897","source":"cve@mitre.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-455876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/76897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6905","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T21:59:05.957","lastModified":"2026-06-17T00:51:58.263","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image."},{"lang":"es","value":"La función read_image_tga en gd_tga.c en el GD Graphics Library (también conocido como libgd) en versiones anteriores a 2.2.3 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de fuera de límites) a través de una imagen TGA manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2","matchCriteriaId":"CABE614C-FFD3-4B02-B5DF-658185F8D874"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://libgd.github.io/release-2.2.3.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/08/23/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91743","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libgd/libgd/issues/248","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libgd/libgd/pull/251","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://libgd.github.io/release-2.2.3.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/08/23/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libgd/libgd/issues/248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/libgd/libgd/pull/251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-7046","sourceIdentifier":"cve@mitre.org","published":"2016-10-03T21:59:07.127","lastModified":"2026-06-17T00:52:12.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL."},{"lang":"es","value":"Red Hat JBoss Enterprise Application Platform (EAP) 7, cuando funciona como un proxy inverso con tamaños de búfer predeterminado, permite a atacantes remotos provocar una denegación de servicio (consumo de CPU y disco) a través de una URL larga."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*","matchCriteriaId":"88BF3B2C-B121-483A-AEF2-8082F6DA5310"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-2640.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2641.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2642.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2657.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/93173","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3454","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3455","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3456","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3458","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376646","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2640.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2641.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2642.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2657.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2016-8277","sourceIdentifier":"psirt@huawei.com","published":"2016-10-03T21:59:10.583","lastModified":"2026-06-17T00:54:04.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote authenticated users to cause a denial of service (device restart) via an unspecified command parameter."},{"lang":"es","value":"Gateways de seguridad unificada Huawei USG9520, USG9560 y USG9580 con software en versiones anteriores a V300R001C01SPCa00 permiten a usuarios remotos autenticados provocar una denegación de servicio (reinicio del dispositivo) a través de un parámetro de comando no especificado."}],"affected":[{"source":"psirt@huawei.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:usg9520:v300r001c01:*:*:*:*:*:*:*","matchCriteriaId":"AFDA4024-6672-4E0A-BB78-A5F434A09DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:usg9560:v300r001c01:*:*:*:*:*:*:*","matchCriteriaId":"4182E83F-0C59-473F-B359-350741D0DF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:usg9580:v300r001c01:*:*:*:*:*:*:*","matchCriteriaId":"D13D385A-3BD1-4641-AE38-4653EFD9CBF8"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-firewall-en","source":"psirt@huawei.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93097","source":"psirt@huawei.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-firewall-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-8280","sourceIdentifier":"psirt@huawei.com","published":"2016-10-03T21:59:12.723","lastModified":"2026-06-17T00:54:05.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Huawei eSight en versiones anteriores a V300R003C20SPC005 permite a usuarios remotos autenticados leer archivos arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@huawei.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:esight:v300r002c00:*:*:*:*:*:*:*","matchCriteriaId":"F701D3F5-B7A3-483B-8A9B-51E7E1B667A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:esight:v300r003c10:*:*:*:*:*:*:*","matchCriteriaId":"06BBACC1-E4AE-4552-BABE-4A434E83BD74"},{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:esight:v300r003c20:*:*:*:*:*:*:*","matchCriteriaId":"ACDFB704-3758-4507-9310-AA938809002A"}]}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160928-01-pathtraversal-en","source":"psirt@huawei.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93190","source":"psirt@huawei.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160928-01-pathtraversal-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6550","sourceIdentifier":"cret@cert.org","published":"2016-10-05T01:59:38.903","lastModified":"2026-06-17T00:51:21.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."},{"lang":"es","value":"La aplicación U de BB&T 1.5.4 y versiones anteriores para iOS no verifica adecuadamente los certificados X.509 de servidores SSL, lo que permite a atacantes man-in-the-middle suplantar servidores y obtener información sensible a través de un certificado manipulado."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:P/A:N","baseScore":4.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bb\\&t:the_u:*:*:*:*:*:iphone_os:*:*","versionEndIncluding":"1.5.4","matchCriteriaId":"37F8BDF9-F755-404E-AB99-425D2CADF84E"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/338624","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/93259","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/338624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/93259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5892","sourceIdentifier":"psirt@us.ibm.com","published":"2016-10-05T10:59:15.547","lastModified":"2026-06-17T00:50:13.833","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM 10x, as used in Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications before 1.0.0.5_2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en IBM 10x, tal como se utiliza en Multi-Enterprise Integration Gateway 1.x hasta la versión 1.0.0.1 y B2B Advanced Communications en versiones anteriores a 1.0.0.5_2, permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:multi-enterprise_integration_gateway:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"74C974C2-6873-4BF3-8687-3D7C8B026B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:multi-enterprise_integration_gateway:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6D93A0F0-E1F8-41C8-9757-3313011C0E5D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:b2b_advanced_communications:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.5_1","matchCriteriaId":"B7F4F90F-074B-4655-9B70-DA7EFE0F74DC"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21991148","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93277","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21991148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5901","sourceIdentifier":"psirt@us.ibm.com","published":"2016-10-05T10:59:16.877","lastModified":"2026-06-17T00:50:14.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative fix 2016.09 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de XSS en una página de prueba en IBM Business Process Manager Advanced 8.5.6.0 hasta la versión 8.5.7.0 anterior al arreglo acumulativo 2016.09 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*","matchCriteriaId":"66A4A455-A75B-4363-AC6D-DAD50287EB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*","matchCriteriaId":"240E404A-0420-4731-8DFE-076746B14807"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*","matchCriteriaId":"66327978-D257-4ADE-8AEA-22547B0E4541"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*","matchCriteriaId":"8F88ED9A-7D7F-4C1F-87AA-555C941DE583"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR56391","source":"psirt@us.ibm.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990852","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93353","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR56391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21990852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6420","sourceIdentifier":"psirt@cisco.com","published":"2016-10-05T10:59:20.550","lastModified":"2026-06-17T00:51:00.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467."},{"lang":"es","value":"Cisco FireSIGHT System Software 4.10.3 hasta la versión 5.4.0 en Firepower Management Center permite a usuarios remotos autenticados eludir comprobaciones de autorización y obtener privilegios a través de una petición HTTP manipulada, vulnerabilidad también conocida como Bug ID CSCur25467."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"CD6BDAC5-17DA-4937-8FC7-89FA830FC32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CCC4B09D-E3B2-40B2-8704-010EDF605675"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F1049BCE-4A7B-4636-9090-17724D5AFBA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1BEF2B98-243F-4796-A98C-A978C4CCAD91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0EB13B96-D431-49BD-ADAB-9AE5DB559935"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93204","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036919","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6652","sourceIdentifier":"security_alert@emc.com","published":"2016-10-05T16:59:04.757","lastModified":"2026-06-17T00:51:32.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Pivotal Spring Data JPA en versiones anteriores a 1.9.6 (Gosling SR6) y 1.10.x en versiones anteriores a 1.10.4 (Hopper SR4), cuando se utiliza con un repositorio que define una consulta String usando la anotación @Query, permite a atacantes ejecutar comandos JPQL arbitrarios a través de una instancia de clase con una llamada a la función."}],"affected":[{"source":"security_alert@emc.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:spring_data_jpa:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.4","matchCriteriaId":"A9D14B1D-9109-44A3-857D-DC0B5D231EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivotal_software:spring_data_jpa:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"6731D068-C551-4607-A722-E2AD21268531"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93276","source":"security_alert@emc.com"},{"url":"https://github.com/spring-projects/spring-data-jpa/commit/b8e7fe","source":"security_alert@emc.com","tags":["Patch"]},{"url":"https://jira.spring.io/browse/DATAJPA-965","source":"security_alert@emc.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://pivotal.io/security/cve-2016-6652","source":"security_alert@emc.com","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-01","source":"security_alert@emc.com"},{"url":"http://www.securityfocus.com/bid/93276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/spring-projects/spring-data-jpa/commit/b8e7fe","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://jira.spring.io/browse/DATAJPA-965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://pivotal.io/security/cve-2016-6652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-01","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7907","sourceIdentifier":"secalert@redhat.com","published":"2016-10-05T16:59:10.070","lastModified":"2026-06-17T00:53:44.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags."},{"lang":"es","value":"La función imx_fec_do_tx function in hw/net/imx_fec.c en QEMU (también conocido como Quick Emulator) no limita adecuadamente el recuento del descriptor de búfer cuando trasmite paquetes, lo que permite a administradores locales del SO invitado provocar una denegación de servicio (bucle infinito y caída del proceso QEMU) a través de vectores relacionados con un descriptor de búfer con una longitud de 0 y valores manipulados en bd.flags."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.1.1","matchCriteriaId":"A965C2D1-C447-4324-95A4-27285ECF8909"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*","matchCriteriaId":"9F615830-8EC7-41C0-9A77-6C7D4E718429"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"15D5C1F9-C3B4-4733-8782-0E54AE543C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.9.0:rc2:*:*:*:*:*:*","matchCriteriaId":"286D3DE9-9796-42AE-88E1-F6E04BF8B449"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.9.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B54248FC-FD5C-445E-BD8F-886D9D8736D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.9.0:rc4:*:*:*:*:*:*","matchCriteriaId":"89FB8D92-4A3A-4B52-93B0-6F809D313C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.9.0:rc5:*:*:*:*:*:*","matchCriteriaId":"06A8F83F-3551-4F3B-A0C9-EE6B8BA5436A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/4","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93274","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg05556.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg05556.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-7908","sourceIdentifier":"secalert@redhat.com","published":"2016-10-05T16:59:11.117","lastModified":"2026-06-17T00:53:44.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags."},{"lang":"es","value":"La función mcf_fec_do_tx en hw/net/mcf_fec.c en QEMU (también conocido Quick Emulator) no limita adecuadamente el recuento del descriptor de búfer cuando está transmitiendo paquetes, lo que permite a administradores locales del SO invitado provocar una denegación de servicio (bucle infinito y caída del proceso QEMU) a través de vectores relacionados con un descriptor de búfer con una longitud de 0 y valores manipulados en bd.flags."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"F83E2010-6463-407A-928D-DB71A705A04C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=070c4b92b8cd5390889716677a0b92444d6e087a","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/5","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93273","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg05557.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=070c4b92b8cd5390889716677a0b92444d6e087a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg05557.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-7909","sourceIdentifier":"secalert@redhat.com","published":"2016-10-05T16:59:12.243","lastModified":"2026-06-17T00:53:44.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0."},{"lang":"es","value":"La función pcnet_rdra_addr en hw/net/pcnet.c en QEMU (también conocido como Quick Emulator) permite a administradores locales del SO invitado provocar una denegación de servicio (bucle infinito y caída de proceso QEMU) estableciendo el descriptor de la longitud del anillo (1) recibir o (2) transmitir a 0."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"F83E2010-6463-407A-928D-DB71A705A04C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/6","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93275","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg07942.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/03/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg07942.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6416","sourceIdentifier":"psirt@cisco.com","published":"2016-10-05T17:59:05.900","lastModified":"2026-06-17T00:50:59.593","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to cause a denial of service via a flood of FTP traffic, aka Bug IDs CSCuz82907, CSCuz84330, and CSCuz86065."},{"lang":"es","value":"El servicio FTP en Cisco AsyncOS en dispositivos Email Security Appliance (ESA) 9.6.0-000 hasta la versión 9.9.6-026, dispositivos Web Security Appliance (WSA) 9.0.0-162 hasta la versión 9.5.0-444 y dispositivos Content Security Management Appliance (SMA) permite a atacantes remotos provocar una denegación de servicio a través de inundación de tráfico FTP, vulnerabilidad también conocida como Bug IDs CSCuz82907, CSCuz84330 y CSCuz86065."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_security_management_appliance:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"07DCBDF0-1E0D-420C-A0BA-2C4C38D13D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-004:*:*:*:*:*:*:*","matchCriteriaId":"F40DB32E-31F8-44B2-896E-26232EA41873"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-031:*:*:*:*:*:*:*","matchCriteriaId":"0B68AE1E-AD02-465E-AC86-FF23591D3882"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-033:*:*:*:*:*:*:*","matchCriteriaId":"EA33E2AF-87FE-4F04-AC02-98068C81D92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-103:*:*:*:*:*:*:*","matchCriteriaId":"2F57F5AB-DA2D-49AC-8C61-DD06DF9E8E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_security_management_appliance:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5B272AFD-80B1-43C3-AE0F-CBD9A9ED2581"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_security_management_appliance:9.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D122AF7B-1195-4F83-B8CC-50E22C4417C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:email_security_appliance:9.6.0-000:*:*:*:*:*:*:*","matchCriteriaId":"98D691BA-8205-4C49-851B-2FDC1F22F641"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:email_security_appliance:9.6.0-042:*:*:*:*:*:*:*","matchCriteriaId":"ED373FBD-1BB7-4532-946F-9DA2DF33A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:email_security_appliance:9.6.0-051:*:*:*:*:*:*:*","matchCriteriaId":"7A450E5F-D02B-4F4D-9844-794D6A39D923"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:email_security_appliance:9.7.1-066:*:*:*:*:*:*:*","matchCriteriaId":"72DADB2C-D86D-44B5-B87B-289990A7D9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:email_security_appliance:9.9.6-026:*:*:*:*:*:*:*","matchCriteriaId":"F508B007-27AD-483F-B220-B62C84892617"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:email_security_appliance:9.9_base:*:*:*:*:*:*:*","matchCriteriaId":"B95BBCED-65C8-4433-884B-0088B8B15E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.0.0-162:*:*:*:*:*:*:*","matchCriteriaId":"C5BF001A-7ADB-4976-8A50-0EFC53FB6AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.1.0-000:*:*:*:*:*:*:*","matchCriteriaId":"7703E48F-6AAE-42DF-91E4-7205E9A7AD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.1.0-070:*:*:*:*:*:*:*","matchCriteriaId":"8782B7BC-03C5-4866-9807-14EF9A818EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.1_base:*:*:*:*:*:*:*","matchCriteriaId":"A8677C11-CD70-4A92-9E06-7ABC4753F13A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.5.0-235:*:*:*:*:*:*:*","matchCriteriaId":"3BEBC56B-BC37-4A5C-90D9-D412B978A743"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.5.0-284:*:*:*:*:*:*:*","matchCriteriaId":"4BA50ED3-74F8-4B13-BFA9-97EA6B43C701"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.5.0-444:*:*:*:*:*:*:*","matchCriteriaId":"56127D49-142B-4660-9FEF-715E419E1643"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:web_security_appliance:9.5_base:*:*:*:*:*:*:*","matchCriteriaId":"1D0113C0-9BD3-49DD-AAA3-57BF6148D054"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-aos","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93198","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036915","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036916","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036917","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-aos","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6418","sourceIdentifier":"psirt@cisco.com","published":"2016-10-05T17:59:07.757","lastModified":"2026-06-17T00:50:59.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 hasta la versión 3.4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, vulnerabilidad también conocida como Bug ID CSCva14552."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4420412D-D474-4A90-BDA7-D8974EC92E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"97A47684-7FA7-461A-8D09-D3025809509D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"087C034D-3393-4141-8E70-68BFCA4DE8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"608C1F7C-3B52-4219-8CDF-DCBB920AFD38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:videoscape_distribution_suite_service_manager:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7B1A62C2-EF71-497D-92DA-5C159AF1BFA3"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-vds","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93207","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-vds","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6421","sourceIdentifier":"psirt@cisco.com","published":"2016-10-05T20:59:09.027","lastModified":"2026-06-17T00:51:00.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a crafted OSPF Link State Advertisement (LSA) update, aka Bug ID CSCvb05643."},{"lang":"es","value":"Cisco IOS XR 5.2.2 permite a atacantes remotos provocar una denegación de servicio (reinicio del proceso) a través de una actualización OSPF Link State Advertisement (LSA) manipulada, vulnerabilidad también conocida como Bug ID CSCvb05643."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"AB5452CA-E4DF-49FD-A677-3F6257F14707"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-ospf","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93212","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036909","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-ospf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6423","sourceIdentifier":"psirt@cisco.com","published":"2016-10-05T20:59:10.120","lastModified":"2026-06-17T00:51:00.327","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The IKEv2 client and initiator implementations in Cisco IOS 15.5(3)M and IOS XE allow remote IKEv2 servers to cause a denial of service (device reload) via crafted IKEv2 packets, aka Bug ID CSCux97540."},{"lang":"es","value":"Las implementaciones cliente e iniciador IKEv2 en Cisco IOS 15.5(3)M e IOS XE permiten a servidores IKEv2 remotos provocar una denegación de servicio (recarga del dispositivo) a través de paquetes IKEv2 manipulados, vulnerabilidad también conocida como ID CSCux97540."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:C","baseScore":6.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:15.5\\(3\\)m:*:*:*:*:*:*:*","matchCriteriaId":"716EC9AA-0569-4FA7-A244-1A14FA15C5AD"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ios-ikev","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93411","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036955","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ios-ikev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1454","sourceIdentifier":"psirt@cisco.com","published":"2016-10-06T10:59:03.913","lastModified":"2026-06-17T00:42:00.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and CSCux11417."},{"lang":"es","value":"Cisco NX-OS 4.0 hasta la versión 7.3 y 11.0 hasta la versión 11.2 en dispositivos 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700 y 9000 permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) aprovechando una relación entre iguales para enviar un mensaje BGP UPDATE manipulado, vulnerabilidad también conocida como Bug IDs CSCuq77105 y CSCux11417."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0\\(2\\)u6\\(7\\)","matchCriteriaId":"AB47B822-A7B9-476C-9E4B-3CE4DFFFC773"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1","versionEndExcluding":"7.0\\(3\\)i4\\(1\\)","matchCriteriaId":"833C6207-758F-400C-B7D5-785EA9ABFB16"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:*","matchCriteriaId":"528ED62B-D739-4E06-AC64-B506FD73BBAB"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*","matchCriteriaId":"FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_31108pc-v:-:*:*:*:*:*:*:*","matchCriteriaId":"4E930332-CDDD-48D5-93BC-C22D693BBFA2"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:*","matchCriteriaId":"7BF4B8FE-E134-4491-B5C2-C1CFEB64731B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:*","matchCriteriaId":"F4226DA0-9371-401C-8247-E6E636A116C3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3132q:-:*:*:*:*:*:*:*","matchCriteriaId":"D3DBBFE9-835C-4411-8492-6006E74BAC65"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:*","matchCriteriaId":"B3293438-3D18-45A2-B093-2C3F65783336"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*","matchCriteriaId":"FA782EB3-E8E6-4DCF-B39C-B3CBD46E4384"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3172:-:*:*:*:*:*:*:*","matchCriteriaId":"7817F4E6-B2DA-4F06-95A4-AF329F594C02"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*","matchCriteriaId":"652A2849-668D-4156-88FB-C19844A59F33"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*","matchCriteriaId":"6ACD09AC-8B28-4ACB-967B-AB3D450BC137"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1\\(4\\)n1\\(1\\)","matchCriteriaId":"C0C2141E-5E85-48FF-A943-3738E1BCB66B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2","versionEndExcluding":"7.2\\(2\\)n1\\(1\\)","matchCriteriaId":"BF84E65C-9C89-4B70-B0A1-1E2D321669B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3","versionEndExcluding":"7.3\\(0\\)n1\\(1\\)","matchCriteriaId":"B7805FDE-707F-4962-8425-4ADF1BEE18A1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5548p:-:*:*:*:*:*:*:*","matchCriteriaId":"05F23216-2704-48DE-90AD-3D779C1773F7"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5548up:-:*:*:*:*:*:*:*","matchCriteriaId":"0113ED40-1D88-4F73-AB6B-FA33A4A6F80A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5596t:-:*:*:*:*:*:*:*","matchCriteriaId":"F5811A16-161B-4C17-AC71-93CF53A7B2E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5596up:-:*:*:*:*:*:*:*","matchCriteriaId":"355F2487-B51E-49A6-88B1-DF0BA826B896"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:56128p:-:*:*:*:*:*:*:*","matchCriteriaId":"736C78B5-EE17-432A-9EAE-02543A12C174"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5624q:-:*:*:*:*:*:*:*","matchCriteriaId":"87396D43-398D-4262-B195-9AF90A8E3BF9"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5648q:-:*:*:*:*:*:*:*","matchCriteriaId":"2113D681-B5CA-4C89-B072-67778753E885"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5672up:-:*:*:*:*:*:*:*","matchCriteriaId":"E3341B59-C9DC-4152-AF41-5CFFE54D877B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5672up-16g:-:*:*:*:*:*:*:*","matchCriteriaId":"4CE3E3B1-6269-40CF-9C79-87BB2756C25E"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5696q:-:*:*:*:*:*:*:*","matchCriteriaId":"4E574BDD-0A58-42A5-9046-DF48C2502B3E"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*","matchCriteriaId":"A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*","matchCriteriaId":"4F557E38-09F6-42C6-BABA-3C3168B38BBA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2","matchCriteriaId":"0E9D6862-7F78-47D2-B273-8EE4EAE216F5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_5010:-:*:*:*:*:*:*:*","matchCriteriaId":"E275D31F-4FA1-428E-AB4A-D2802FF0CF1A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_5020:-:*:*:*:*:*:*:*","matchCriteriaId":"BA7F5823-41A8-47C8-A154-02C6C31EF76A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2\\(2\\)d1\\(1\\)","matchCriteriaId":"DA46BF2A-EBD2-4209-9BA0-10E91731546B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3","versionEndExcluding":"7.3\\(1\\)d1\\(1\\)","matchCriteriaId":"711D9952-EEDA-443A-9950-DDE17532C8AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*","matchCriteriaId":"B22B3865-30E9-4B5A-A37D-DC33F1150FFE"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*","matchCriteriaId":"459A7F11-52BF-4AD6-B495-4C4D6C050493"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_7000_4-slot:-:*:*:*:*:*:*:*","matchCriteriaId":"FEACA55F-4335-4478-B608-EB92EE1D6C6D"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*","matchCriteriaId":"DB73543E-9B5B-4BA9-8FB4-666AF5AC8B6B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_7700_10-slot:-:*:*:*:*:*:*:*","matchCriteriaId":"E5ABB175-81BE-4C46-BD2D-70016508BE22"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_7700_18-slot:-:*:*:*:*:*:*:*","matchCriteriaId":"71F93299-A715-4E97-87FE-B1E248EA98BD"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_7700_2-slot:-:*:*:*:*:*:*:*","matchCriteriaId":"3D71B228-FFE5-45F7-ADCF-6D359ADA6D31"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_7700_6-slot:-:*:*:*:*:*:*:*","matchCriteriaId":"9F3AD807-5A0F-4DF5-9A7A-748205F409E7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2\\(1\\)sv3\\(1.15\\)","matchCriteriaId":"07CE8677-C7A8-4C14-A375-B345A3A1F75B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_1000v_for_vmware_vsphere:-:*:*:*:*:*:*:*","matchCriteriaId":"DFEFE545-DDDC-491C-8F47-DEC79C735873"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1","versionEndExcluding":"7.0\\(3\\)i4\\(1\\)","matchCriteriaId":"833C6207-758F-400C-B7D5-785EA9ABFB16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionEndExcluding":"11.1\\(1j\\)","matchCriteriaId":"EB693F6F-3D70-43C1-88F8-B38F22522288"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*","matchCriteriaId":"4283E433-7F8C-4410-B565-471415445811"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*","matchCriteriaId":"D5B2E4C1-2627-4B9D-8E92-4B483F647651"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*","matchCriteriaId":"11411BFD-3F4D-4309-AB35-A3629A360FB0"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*","matchCriteriaId":"E663DE91-C86D-48DC-B771-FA72A8DF7A7C"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*","matchCriteriaId":"A90184B3-C82F-4CE5-B2AD-97D5E4690871"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*","matchCriteriaId":"07DE6F63-2C7D-415B-8C34-01EC05C062F3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*","matchCriteriaId":"F423E45D-A6DD-4305-9C6A-EAB26293E53A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*","matchCriteriaId":"F70D81F1-8B12-4474-9060-B4934D8A3873"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*","matchCriteriaId":"113772B6-E9D2-4094-9468-3F4E1A87D07D"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:*","matchCriteriaId":"785FD17C-F32E-4042-9DDE-A89B3AAE0334"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*","matchCriteriaId":"4364ADB9-8162-451D-806A-B98924E6B2CF"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*","matchCriteriaId":"49E0371B-FDE2-473C-AA59-47E1269D050F"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*","matchCriteriaId":"1BC5293E-F2B4-46DC-85DA-167EA323FCFD"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*","matchCriteriaId":"EA022E77-6557-4A33-9A3A-D028E2DB669A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9504:-:*:*:*:*:*:*:*","matchCriteriaId":"768BE390-5ED5-48A7-9E80-C4DE8BA979B1"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*","matchCriteriaId":"DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_9516:-:*:*:*:*:*:*:*","matchCriteriaId":"7E02DC82-0D26-436F-BA64-73C958932B0A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0\\(2\\)a8\\(1\\)","matchCriteriaId":"31BCBC21-1B0A-46D4-AF49-D90DB842147E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:*","matchCriteriaId":"EAF5AF71-15DF-4151-A1CF-E138A7103FC8"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:*","matchCriteriaId":"088C0323-683A-44F5-8D42-FF6EC85D080E"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-bgp","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93417","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036950","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-bgp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6025","sourceIdentifier":"psirt@us.ibm.com","published":"2016-10-06T10:59:06.037","lastModified":"2026-06-17T00:50:22.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to obtain access by leveraging an unattended workstation to conduct a post-logoff session-reuse attack involving a modified URL."},{"lang":"es","value":"El Configuration Manager en IBM Sterling Secure Proxy (SSP) 3.4.2 en versiones anteriores a 3.4.2.0 iFix 8 y 3.4.3 en versiones anteriores a 3.4.3.0 iFix 1 permite a atacantes remotos obtener acceso mediante el aprovechamiento de una estación de trabajo sin supervisión para llevar a cabo un ataque de reutilización de sesión post-desconexión involucrando una URL modificada."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.5,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"40C2F1D6-A380-4B2E-8650-7C8B8E5DECE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix1:*:*:*:*:*:*","matchCriteriaId":"35AA857D-CD59-49B1-8346-A7316BFE79DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix2:*:*:*:*:*:*","matchCriteriaId":"07D83F7D-86BC-4577-A781-E5BC8DE440D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix3:*:*:*:*:*:*","matchCriteriaId":"F1AF0B2E-9C27-4745-9D78-70656E4EF93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix4:*:*:*:*:*:*","matchCriteriaId":"0D76677D-2FF7-4F1B-B103-7E94F2EA6BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix5:*:*:*:*:*:*","matchCriteriaId":"6C5DFF47-378E-41D8-B291-212E24B68E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix6:*:*:*:*:*:*","matchCriteriaId":"30829223-4289-4A7E-B23E-3F1205F58E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix7:*:*:*:*:*:*","matchCriteriaId":"6AEB99D3-6B8D-446E-9CC0-77E2EA3718F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0D879BAB-BBB2-415B-916B-48EFB9025FCE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21991278","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93345","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21991278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6026","sourceIdentifier":"psirt@us.ibm.com","published":"2016-10-06T10:59:07.133","lastModified":"2026-06-17T00:50:22.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows man-in-the-middle attackers to obtain sensitive information via an HTTP method that is neither GET nor POST."},{"lang":"es","value":"El Configuration Manager en IBM Sterling Secure Proxy (SSP) 3.4.2 en versiones anteriores a 3.4.2.0 iFix 8 y 3.4.3 en versiones anteriores a 3.4.3.0 iFix 1 permite a atacantes man-in-the-middle obtener información sensible a través de un método HTTP que no es ni GET ni POST."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:N/A:N","baseScore":2.9,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":5.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"40C2F1D6-A380-4B2E-8650-7C8B8E5DECE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix1:*:*:*:*:*:*","matchCriteriaId":"35AA857D-CD59-49B1-8346-A7316BFE79DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix2:*:*:*:*:*:*","matchCriteriaId":"07D83F7D-86BC-4577-A781-E5BC8DE440D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix3:*:*:*:*:*:*","matchCriteriaId":"F1AF0B2E-9C27-4745-9D78-70656E4EF93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix4:*:*:*:*:*:*","matchCriteriaId":"0D76677D-2FF7-4F1B-B103-7E94F2EA6BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix5:*:*:*:*:*:*","matchCriteriaId":"6C5DFF47-378E-41D8-B291-212E24B68E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix6:*:*:*:*:*:*","matchCriteriaId":"30829223-4289-4A7E-B23E-3F1205F58E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix7:*:*:*:*:*:*","matchCriteriaId":"6AEB99D3-6B8D-446E-9CC0-77E2EA3718F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0D879BAB-BBB2-415B-916B-48EFB9025FCE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21991278","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93342","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21991278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6027","sourceIdentifier":"psirt@us.ibm.com","published":"2016-10-06T10:59:08.227","lastModified":"2026-06-17T00:50:22.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information or modify data by leveraging use of HTTP."},{"lang":"es","value":"El Configuration Manager en IBM Sterling Secure Proxy (SSP) 3.4.2 en versiones anteriores a 3.4.2.0 iFix 8 y 3.4.3 en versiones anteriores a 3.4.3.0 iFix 1 no habilita el mecanismo de protección HSTS, lo que facilita a atacantes remotos obtener información sensible o modificar datos aprovechando uso de HTTP."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"40C2F1D6-A380-4B2E-8650-7C8B8E5DECE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix1:*:*:*:*:*:*","matchCriteriaId":"35AA857D-CD59-49B1-8346-A7316BFE79DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix2:*:*:*:*:*:*","matchCriteriaId":"07D83F7D-86BC-4577-A781-E5BC8DE440D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix3:*:*:*:*:*:*","matchCriteriaId":"F1AF0B2E-9C27-4745-9D78-70656E4EF93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix4:*:*:*:*:*:*","matchCriteriaId":"0D76677D-2FF7-4F1B-B103-7E94F2EA6BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix5:*:*:*:*:*:*","matchCriteriaId":"6C5DFF47-378E-41D8-B291-212E24B68E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix6:*:*:*:*:*:*","matchCriteriaId":"30829223-4289-4A7E-B23E-3F1205F58E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.2.0:ifix7:*:*:*:*:*:*","matchCriteriaId":"6AEB99D3-6B8D-446E-9CC0-77E2EA3718F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:sterling_secure_proxy:3.4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0D879BAB-BBB2-415B-916B-48EFB9025FCE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21991278","source":"psirt@us.ibm.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93340","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21991278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93340","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6424","sourceIdentifier":"psirt@cisco.com","published":"2016-10-06T10:59:10.163","lastModified":"2026-06-17T00:51:00.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of service (interface wedge) via a crafted rate of DHCP packet transmission, aka Bug ID CSCuy66942."},{"lang":"es","value":"La implementación de DHCP Relay en Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 y 9.1.7.4 permite a atacantes remotos provocar una denegación de servicio (cuña de interfaz) a través un índice de transmisión de paquetes DHCP manipulado, vulnerabilidad también conocida como Bug ID CSCuy66942."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4.7.29:*:*:*:*:*:*:*","matchCriteriaId":"2F3BD921-A58A-47EB-B90D-21C3A5D02D40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1\\(7\\)4:*:*:*:*:*:*:*","matchCriteriaId":"07BC9E2D-0B86-4A82-8CB4-A31FFBF322CE"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-asa-dhcp","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93408","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036961","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-asa-dhcp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6425","sourceIdentifier":"psirt@cisco.com","published":"2016-10-06T10:59:11.257","lastModified":"2026-06-17T00:51:00.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020 and CSCuy81652."},{"lang":"es","value":"Vulnerabilidad de XSS en Cisco Unified Intelligence Center (CUIC) 8.5.4 hasta la versión 9.1(1), tal como se utiliza en Unified Contact Center Express 10.0(1) hasta la versión 11.0(1), permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, vulnerabilidad también conocida como IDs CSCuy75020 y CSCuy81652."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_express:10.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B43D9C6E-7541-4667-A723-3CE27DB008B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_express:10.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"1C277058-F33F-4E60-AE89-658CB6558D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_express:10.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D6F83A65-F3AC-4F6B-97A3-9FC582683BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_contact_center_express:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D7CDF110-17D3-4A1A-ADA2-4D158E172293"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_intelligence_center:8.5.4:*:*:*:*:*:*:*","matchCriteriaId":"5D7F0FEF-BD6B-487D-9ABA-6643499DBC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_intelligence_center:9.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"76043C98-3664-45B4-A108-88A7E5228037"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_intelligence_center:9.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"33A6383F-C719-4624-9FF4-BDDDCAA066B6"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ucis1","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93422","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id/1036951","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ucis1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6435","sourceIdentifier":"psirt@cisco.com","published":"2016-10-06T10:59:16.460","lastModified":"2026-06-17T00:51:01.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376."},{"lang":"es","value":"La consola web en Cisco Firepower Management Center 6.0.1 permite a usuarios remotos autenticados leer archivos arbitrarios a través de parámetros manipulados, vulnerabilidad también conocida como Bug ID CSCva30376."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6D1AFAC1-419D-4ADB-868B-1544BED58B7F"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc2","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93421","source":"psirt@cisco.com"},{"url":"https://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking","source":"psirt@cisco.com"},{"url":"https://www.exploit-db.com/exploits/40464/","source":"psirt@cisco.com"},{"url":"https://www.korelogic.com/Resources/Advisories/KL-001-2016-006.txt","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40464/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.korelogic.com/Resources/Advisories/KL-001-2016-006.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6436","sourceIdentifier":"psirt@cisco.com","published":"2016-10-06T10:59:17.570","lastModified":"2026-06-17T00:51:01.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682."},{"lang":"es","value":"Vulnerabilidad de XSS en HostScan Engine 3.0.08062 hasta la versión 3.1.14018 en el paquete Cisco Host Scan, tal como se utiliza en ASA Web VPN, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, vulnerabilidad también conocida como Bug ID CSCuz14682."}],"affected":[{"source":"psirt@cisco.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.0.08062:*:*:*:*:*:*:*","matchCriteriaId":"2FF4EEC1-59F3-4CA5-ABC9-9B7DBCEDDD28"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.0.08066:*:*:*:*:*:*:*","matchCriteriaId":"43823471-E5F5-45C6-BE33-0FBEF5667DDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.01065:*:*:*:*:*:*:*","matchCriteriaId":"24EB98C1-DBAB-4790-BD27-6D1B7E43011A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.02016:*:*:*:*:*:*:*","matchCriteriaId":"2569C651-F1AA-499C-AC4A-DE0F9C3100EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.02026:*:*:*:*:*:*:*","matchCriteriaId":"DC0A446E-5B41-4E11-B3D4-D74295D2B815"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.02040:*:*:*:*:*:*:*","matchCriteriaId":"8BF9B426-58D2-40A8-A1F4-D526D8025866"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.02043:*:*:*:*:*:*:*","matchCriteriaId":"C75133FB-F573-4655-BF3B-BDF3A7DB594F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.03103:*:*:*:*:*:*:*","matchCriteriaId":"144542F5-E175-4A0A-AEB3-E74BFC95D5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.03104:*:*:*:*:*:*:*","matchCriteriaId":"5181568C-E545-48E5-8C79-7A63D8741E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.04060:*:*:*:*:*:*:*","matchCriteriaId":"4920FFAE-AB66-43A4-A747-F0D2A8D9BC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.04063:*:*:*:*:*:*:*","matchCriteriaId":"C45B3F52-557E-4CC0-91ED-DEE249DEE1F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.04075:*:*:*:*:*:*:*","matchCriteriaId":"24B7CFBE-EC70-4F09-89BD-F13E66651899"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.04082:*:*:*:*:*:*:*","matchCriteriaId":"8F3CD6D0-2D48-49D4-98DF-85460B5D1E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.05152:*:*:*:*:*:*:*","matchCriteriaId":"0E28BA6C-FE33-430F-A052-367144F53FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.05160:*:*:*:*:*:*:*","matchCriteriaId":"73B4BDF6-2EF6-47AE-A963-1A51A7704BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.05163:*:*:*:*:*:*:*","matchCriteriaId":"D6479F6B-EF4C-49E3-9113-05FD94E78236"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.05170:*:*:*:*:*:*:*","matchCriteriaId":"8B7BC692-5448-4BBC-82F5-8891BA936863"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.05178:*:*:*:*:*:*:*","matchCriteriaId":"EC57DA54-4728-421F-B2DF-2E90B6D88D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.05182:*:*:*:*:*:*:*","matchCriteriaId":"CB95422F-E076-4F55-B5B0-07E1057F263D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.05183:*:*:*:*:*:*:*","matchCriteriaId":"4EAFDA73-65B5-4F39-B5CD-791269F35538"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.06073:*:*:*:*:*:*:*","matchCriteriaId":"AE29DE3C-C0C6-4653-B6CF-A3C679C0BCB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hostscan_engine:3.1.14018:*:*:*:*:*:*:*","matchCriteriaId":"7D8FBD0D-B7EE-48C4-A150-888CE5AA8DAE"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-chs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93407","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-chs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-1000004","sourceIdentifier":"cve@mitre.org","published":"2016-10-06T14:59:04.740","lastModified":"2026-06-17T00:21:15.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"XSS in filedownload v1.4 wordpress plugin"},{"lang":"es","value":"XSS en filedownload v1.4 plugin de wordpress"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:filedownload_project:filedownload:1.4:*:*:*:*:wordpress:*:*","matchCriteriaId":"0C9503DE-21C8-45DF-B8E6-51BE1CF96DF4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/97107","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/advisory.php?v=140","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/advisory.php?v=140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-1000008","sourceIdentifier":"cve@mitre.org","published":"2016-10-06T14:59:09.160","lastModified":"2026-06-17T00:21:15.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2"},{"lang":"es","value":"Vulnerabilidad en Path Disclosure en plugin de wordpress MP3-jPlayer v2.3.2"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mp3-jplayer_project:mp3-jplayer:2.3.2:*:*:*:*:wordpress:*:*","matchCriteriaId":"EBFA9E9B-3369-4551-A07C-4387CF9D0F34"}]}]}],"references":[{"url":"http://www.vapidlabs.com/advisory.php?v=149","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vapidlabs.com/advisory.php?v=149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-1000114","sourceIdentifier":"cve@mitre.org","published":"2016-10-06T14:59:20.303","lastModified":"2026-06-17T00:38:42.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"XSS in huge IT gallery v1.1.5 for Joomla"},{"lang":"es","value":"XSS en galería huge IT v1.1.5 para Joomla"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huge-it:gallery:1.1.5:*:*:*:*:joomla\\!:*:*","matchCriteriaId":"2DD6C1DF-D5BA-400B-B13C-DC632C2F7D87"}]}]}],"references":[{"url":"http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-pro","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/92102","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/advisory.php?v=164","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-pro","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/92102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/advisory.php?v=164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-7363","sourceIdentifier":"cve@mitre.org","published":"2016-10-07T14:59:02.677","lastModified":"2026-06-17T00:32:19.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models with a hard disk, and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.3 allows remote administrators to inject arbitrary web script or HTML via vectors related to report filters."},{"lang":"es","value":"Vulnerabilidad de XSS en la página de configuración avanzada en Fortinet FortiManager 5.x en versiones anteriores a 5.0.12 y 5.2.x en versiones anteriores a 5.2.3, en los modelos de hardware con un disco duro y FortiAnalyzer 5.x en versiones anteriores a 5.0.13 y 5.2.x en versiones anteriores a 5.2.3 permite a administradores remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores relacionados con filtros de informe."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"833C89CE-43F0-4F6E-8A4F-504EA5F16319"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C96F78B0-2F6E-4A28-B0B8-CCE3638DCCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68D3536B-652C-4642-9FF9-5A7CFDBB7DD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"83ADE078-F9B6-4E46-89AB-F9DE3A2EAF06"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A5DF6CBD-E8D8-40B7-9512-CD739D6FA918"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42304E1B-C9BF-4CCE-A5C7-4FAC7E4C87E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"34B83D3F-23C8-4781-887C-1876B103A4B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BC2F75CB-BC6D-434A-84C8-6290F4B6E8B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"AB152570-F07F-4706-9717-D31F5F31CDE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C2A3410C-E673-49C1-AA2C-2BD77C68DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6AFEA22C-D661-4859-86CE-329D23E3EF87"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7D9B23B1-A527-49B6-A6CB-CFFCF278B70E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72523D47-A6FA-48E8-B2D0-3563027CE35C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7FE6366D-0535-4681-90F7-3AB9386184A2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortimanager:-:*:*:*:*:*:*:*","matchCriteriaId":"0A46415B-E9D2-463D-AE16-D51DEEC23690"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83E355-BA1A-47B3-AE43-04668C87FD8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4EBA54E4-E824-4F68-94BF-D70F5A51B40F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"378DE593-6514-4111-95DF-C881E163E6D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BEAD4CF6-6654-4BCC-8EC4-5B11AF81C123"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0C3F75D9-5719-4392-8FDE-DA1CFEE5BEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"06360B2F-EE21-4E99-9931-E4C62B1D2C25"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8FEC6473-536E-4ADB-9BD1-8A75846A039E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"799DA4F4-F5DD-4D56-ACC0-C28891C27A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8AD6F2AF-F98F-4113-94D8-1F3D26702D82"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"647BBA50-058A-4D8D-884A-83A818B90622"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C4BA0949-E1B2-41F4-801C-1FF5FDD5FD8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"042001D0-4E10-488F-AB01-AFEB23D78C01"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"728F1AAE-6156-443B-A5DA-990538432389"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B27A485B-71F5-485C-9F3C-691A4F1CA5A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0E098F02-C9DA-4EC9-B13C-8DFD6735615F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BF465F07-3786-4533-9B61-C8344DCB166F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortianalyzer:-:*:*:*:*:*:*:*","matchCriteriaId":"156CCFE2-8ED2-417E-8A32-C3AB1DD97C8B"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/fortianalyzer-and-fortimanager-stored-xss-vulnerability-in-report-filters","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93413","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036981","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036982","source":"cve@mitre.org"},{"url":"http://fortiguard.com/advisory/fortianalyzer-and-fortimanager-stored-xss-vulnerability-in-report-filters","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7424","sourceIdentifier":"cve@mitre.org","published":"2016-10-07T14:59:09.177","lastModified":"2026-06-17T00:53:02.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted MP3 file."},{"lang":"es","value":"La función put_no_rnd_pixels8_xy2_mmx en x86/rnd_template.c en libav 11.7 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída) a través de un archivo MP3 manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*","versionEndIncluding":"11.7","matchCriteriaId":"3E17410F-4E7D-4B6B-BD0C-C9B505A11534"}]}]}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3685","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/17","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/17/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/17/4","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93038","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://blogs.gentoo.org/ago/2016/09/17/libav-null-pointer-dereference-in-put_no_rnd_pixels8_xy2_mmx-rnd_template-c/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.libav.org/show_bug.cgi?id=962","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=136f55207521f0b03194ef5b55ba70f1635d6aee","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2016/dsa-3685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/17/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/17/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://blogs.gentoo.org/ago/2016/09/17/libav-null-pointer-dereference-in-put_no_rnd_pixels8_xy2_mmx-rnd_template-c/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.libav.org/show_bug.cgi?id=962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=136f55207521f0b03194ef5b55ba70f1635d6aee","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7777","sourceIdentifier":"cve@mitre.org","published":"2016-10-07T14:59:10.287","lastModified":"2026-06-17T00:53:28.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it."},{"lang":"es","value":"Xen 4.7.x y versiones anteriores no respeta adecuadamente CR0.TS y CR0.EM, lo que permite a usuarios locales x86 HVM del SO invitado leer o modificar información del estado de registro FPU, MMX o XMM que pertenece a tareas arbitrarias en el invitado modificando una instrucción mientras que el hipervisor se prepara para emularlo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:N","baseScore":3.3,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7.0","matchCriteriaId":"EDD98135-D38D-498A-8D11-15C41CA31DED"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93344","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036942","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-190.html","source":"cve@mitre.org","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-09","source":"cve@mitre.org"},{"url":"https://support.citrix.com/article/CTX217363","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/93344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://xenbits.xen.org/xsa/advisory-190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX217363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-1000007","sourceIdentifier":"cve@mitre.org","published":"2016-10-07T18:59:02.350","lastModified":"2026-06-17T00:38:39.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Pagure 2.2.1 XSS in raw file endpoint"},{"lang":"es","value":"Vulnerabilidad de XSS en Pagure 2.2.1 en el punto final de un archivo raw."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:pagure:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3A8DADA0-5F19-4046-B580-3228C62A5B68"}]}]}],"references":[{"url":"https://pagure.io/pagure/c/070d63983fe5daef92005ea33d3b8c693c224c77.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://pagure.io/pagure/c/070d63983fe5daef92005ea33d3b8c693c224c77.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2015-8950","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:01.260","lastModified":"2026-06-17T00:35:32.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call."},{"lang":"es","value":"arch/arm64/mm/dma-mapping.c en el kernel de Linux en versiones anteriores a 4.0.3, como es usado en el subsistema ION en Android y otros productos, no inicializa ciertas estructuras de datos, lo que permite a usuarios locales obtener información sensible de la memoria del kernel desencadenando una llamada dma_mmap."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"3918BCE8-1066-4D3E-A44A-126FCFA0C97B"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6829e274a623187c24f7cfc0e3d35f25d087fcc5","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3","source":"security@android.com","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/bid/93318","source":"security@android.com"},{"url":"https://github.com/torvalds/linux/commit/6829e274a623187c24f7cfc0e3d35f25d087fcc5","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=6e2c437a2d0a85d90d3db85a7471f99764f7bbf8","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6829e274a623187c24f7cfc0e3d35f25d087fcc5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/bid/93318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/6829e274a623187c24f7cfc0e3d35f25d087fcc5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=6e2c437a2d0a85d90d3db85a7471f99764f7bbf8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2015-8956","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:04.260","lastModified":"2026-06-17T00:35:33.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket."},{"lang":"es","value":"La función rfcomm_sock_bind en net/bluetooth/rfcomm/sock.c en el kernel de Linux en versiones anteriores a 4.2 permite a usuarios locales obtener información sensible o provocar una denegación de servicio (referencia a puntero NULL) a través de vectores relacionados con una llamada de sistema enlazada en un enchufe Bluetooth RFCOMM."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:P","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.33","matchCriteriaId":"8CDEF683-A93B-4134-B220-E7BA44172B34"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=951b6a0717db97ce420547222647bcc40bf1eacd","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"security@android.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93326","source":"security@android.com"},{"url":"https://github.com/torvalds/linux/commit/951b6a0717db97ce420547222647bcc40bf1eacd","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=951b6a0717db97ce420547222647bcc40bf1eacd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/951b6a0717db97ce420547222647bcc40bf1eacd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3860","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:05.323","lastModified":"2026-06-17T00:46:28.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sound/soc/msm/qdsp6v2/audio_calibration.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29323142 and Qualcomm internal bug CR 1038127."},{"lang":"es","value":"sound/soc/msm/qdsp6v2/audio_calibration.c en el controlador de sonido de Qualcomm en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 5X, Nexus 6P y Android One permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno de Android 29323142 y error interno de Qualcomm CR 1038127."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93320","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/sound/soc/msm/qdsp6v2/?id=528976f54be246ec93a71ac53aa4faf3e3791c48","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/sound/soc/msm/qdsp6v2/?id=528976f54be246ec93a71ac53aa4faf3e3791c48","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3882","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:06.260","lastModified":"2026-06-17T00:46:30.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (reboot) via an access point that provides a crafted (1) Venue Group or (2) Venue Type value, aka internal bug 29464811."},{"lang":"es","value":"Error por un paso en server/wifi/anqp/VenueNameElement.java en Wi-Fi en Android 6.x en versiones anteriores a 2016-10-01 y 7.0 en versiones anteriores a 2016-10-01 permite a atacantes remotos provocar una denegación de servicio (reinicio) a través de un punto de acceso que proporciona un valor (1) Venue Group o (2) Venue Type manipulado, vulnerabilidad también conocida como error interno 29464811."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","baseScore":6.1,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93295","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/35a86eef3c0eef760f7e61c52a343327ba601630","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/35a86eef3c0eef760f7e61c52a343327ba601630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3902","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:09.683","lastModified":"2026-06-17T00:46:32.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/platform/msm/ipa/ipa_qmi_service.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29953313 and Qualcomm internal bug CR 1044072."},{"lang":"es","value":"drivers/platform/msm/ipa/ipa_qmi_service.c en el controlador Qualcomm IPA en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 5X y 6P permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno de Android 29953313 y error interno de Qualcomm CR 1044072."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93309","source":"security@android.com"},{"url":"https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=2fca425d781572393fbe51abe2e27a932d24a768","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=2fca425d781572393fbe51abe2e27a932d24a768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3908","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:12.557","lastModified":"2026-06-17T00:46:33.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password, and consequently gain privileges, via a crafted application, aka internal bug 30003944."},{"lang":"es","value":"El Lock Settings Service en Android 6.x en versiones anteriores a 2016-10-01 y 7.0 en versiones anteriores a 2016-10-01 permite a atacantes quitar el PIN o contraseña de un dispositivo, y por lo tanto obtener privilegios, a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30003944."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93290","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/96daf7d4893f614714761af2d53dfb93214a32e4","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/96daf7d4893f614714761af2d53dfb93214a32e4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3918","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:22.980","lastModified":"2026-06-17T00:46:34.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"email/provider/AttachmentProvider.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not ensure that certain values are integers, which allows attackers to read arbitrary attachments via a crafted application that provides a pathname value, aka internal bug 30745403."},{"lang":"es","value":"email/provider/AttachmentProvider.java en AOSP Mail en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-10-01 y 7.0 en versiones anteriores a 2016-10-01 no asegura que ciertos valores estén íntegros, lo que permite a atacantes leer adjuntos arbitrarios a través de una aplicación manipulada que da un valor de nombre de ruta, vulnerabilidad también conocida como error interno 30745403."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93299","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/packages/apps/Email/+/6b2b0bd7c771c698f11d7be89c2c57c8722c7454","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/packages/apps/Email/+/6b2b0bd7c771c698f11d7be89c2c57c8722c7454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3920","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:24.027","lastModified":"2026-06-17T00:46:34.233","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 30744884."},{"lang":"es","value":"id3/ID3.cpp en libstagefright en mediaserver en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-10-01 y 7.0 en versiones anteriores a 2016-10-01 permite a atacantes remotos provocar una denegación de servicio (colgado de dispositivo o reinicio) a través de un archivo manipulado, vulnerabilidad también conocida como error interno 30744884."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93292","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/6d0249be2275fd4086783f259f4e2c54722a7c55","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/6d0249be2275fd4086783f259f4e2c54722a7c55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3923","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:27.167","lastModified":"2026-06-17T00:46:34.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks and consequently gain privileges via a crafted application, aka internal bug 30647115."},{"lang":"es","value":"Los servicios Accessibility en Android 7.0 en versiones anteriores a 2016-10-01 no maneja correctamente eventos de movimiento, lo que permite a atacantes llevar a cabo ataques de secuestro de toque y consecuentemente obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30647115."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93310","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/5f256310187b4ff2f13a7abb9afed9126facd7bc","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/5f256310187b4ff2f13a7abb9afed9126facd7bc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3924","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:28.167","lastModified":"2026-06-17T00:46:34.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate EFFECT_CMD_SET_PARAM and EFFECT_CMD_SET_PARAM_DEFERRED commands, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 30204301."},{"lang":"es","value":"services/audioflinger/Effects.cpp en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-10-01 y 7.0 en versiones anteriores a 2016-10-01 no valida comandos EFFECT_CMD_SET_PARAM y EFFECT_CMD_SET_PARAM_DEFERRED, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30204301."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93297","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/c894aa36be535886a8e5ff02cdbcd07dd24618f6","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/av/+/c894aa36be535886a8e5ff02cdbcd07dd24618f6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-3925","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:29.167","lastModified":"2026-06-17T00:46:34.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"server/wifi/anqp/ANQPFactory.java in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to cause a denial of service (blocked Wi-Fi usage) via a crafted application, aka internal bug 30230534."},{"lang":"es","value":"server/wifi/anqp/ANQPFactory.java en Android 6.x en versiones anteriores a 2016-10-01 y 7.0 en versiones anteriores a 2016-10-01 permite a atacantes provocar una denegación de servicio (uso de Wi-Fi bloqueado) a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30230534."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93289","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/c2905409c20c8692d4396b8531b09e7ec81fa3fb","source":"security@android.com","tags":["Issue Tracking","Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/c2905409c20c8692d4396b8531b09e7ec81fa3fb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2016-5348","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T10:59:47.357","lastModified":"2026-06-17T00:49:15.457","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service (memory consumption, and device hang or reboot) via a large xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 29555864."},{"lang":"es","value":"El componente GPS en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-10-01 y 7.0 en versiones anteriores a 2016-10-01 permite a atacantes man-in-the-middle provocar una denegación de servicio (consumo de memoria y cuelgue o reinicio del dispositivo) a través de un archivo xtra.bin o xtra2.bin grande en un anfitrión Qualcomm gpsonextra.net o izatcloud.net suplantado, vulnerabilidad también conocida como error interno 29555864."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93293","source":"cve@mitre.org"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/218b813d5bc2d7d3952ea1861c38b4aa944ac59b","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://code.google.com/p/android/issues/detail?id=213747","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://source.android.com/security/bulletin/2018-04-01","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/40502/","source":"cve@mitre.org"},{"url":"https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/","source":"cve@mitre.org","tags":["Exploit","Patch","Technical Description","Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/frameworks/base/+/218b813d5bc2d7d3952ea1861c38b4aa944ac59b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://code.google.com/p/android/issues/detail?id=213747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://source.android.com/security/bulletin/2018-04-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40502/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Technical Description","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6677","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:53.950","lastModified":"2026-06-17T00:51:34.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30259955."},{"lang":"es","value":"El controlador NVIDIA GPU en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 9 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30259955."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93319","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6678","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:55.090","lastModified":"2026-06-17T00:51:34.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Motorola USBNet driver in Android before 2016-10-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 29914434."},{"lang":"es","value":"El controlador Motorola USBNet en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 6 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 29914434."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93305","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://securityintelligence.com/android-vulnerabilities-attacking-nexus-6-and-6p-custom-boot-modes/","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://securityintelligence.com/android-vulnerabilities-attacking-nexus-6-and-6p-custom-boot-modes/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6679","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:56.090","lastModified":"2026-06-17T00:51:34.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call, aka Android internal bug 29915601 and Qualcomm internal bug CR 1000913."},{"lang":"es","value":"CORE/HDD/src/wlan_hdd_hostapd.c en el controlador de Wi-Fi de Qualcomm en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 5X y Android One permite a atacantes obtener información sensible a través de una aplicación manipulada que realiza una llamada ioctl setwpaie, vulnerabilidad también conocida como error interno de Android 29915601 y error interno de Qualcomm CR 1000913."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93309","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=d39345f0abc309959d831d09fcbf1619cc0ae0f5","source":"security@android.com","tags":["Patch"]},{"url":"https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=f081695446679aa44baa0d00940ea18455eeb4c5","source":"security@android.com","tags":["Patch"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=d39345f0abc309959d831d09fcbf1619cc0ae0f5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=f081695446679aa44baa0d00940ea18455eeb4c5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-6681","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:58.247","lastModified":"2026-06-17T00:51:35.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 30152182 and Qualcomm internal bug CR 1049521."},{"lang":"es","value":"drivers/misc/qcom/qdsp6v2/audio_utils.c en un controlador Qualcomm QDSP6v2 en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 5X, Nexus 6P y Android One no inicializa ciertas estructuras de datos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno de Android 30152182 y error interno de Qualcomm CR 1049521."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93309","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=0950fbd39ff189497f1b6115825c210e3eeaf395","source":"security@android.com","tags":["Patch","Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=0950fbd39ff189497f1b6115825c210e3eeaf395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6682","sourceIdentifier":"security@android.com","published":"2016-10-10T10:59:59.310","lastModified":"2026-06-17T00:51:35.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 30152501 and Qualcomm internal bug CR 1049615."},{"lang":"es","value":"drivers/misc/qcom/qdsp6v2/audio_utils.c en un controlador Qualcomm QDSP6v2 en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 5X, Nexus 6P y Android One no inicializa ciertas estructuras de datos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno de Android 30152501 y error interno de Qualcomm CR 1049615."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93309","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=0950fbd39ff189497f1b6115825c210e3eeaf395","source":"security@android.com","tags":["Patch","Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=0950fbd39ff189497f1b6115825c210e3eeaf395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6683","sourceIdentifier":"security@android.com","published":"2016-10-10T11:00:00.370","lastModified":"2026-06-17T00:51:35.483","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30143283."},{"lang":"es","value":"El kernel en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30143283."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93326","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6684","sourceIdentifier":"security@android.com","published":"2016-10-10T11:00:01.480","lastModified":"2026-06-17T00:51:35.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30148243."},{"lang":"es","value":"El kernel en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player y Android One permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30148243."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:google:android_one:-:*:*:*:*:*:*:*","matchCriteriaId":"50A96E21-4545-41AD-9FDB-E6F2B59F2DEF"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_5:-:*:*:*:*:*:*:*","matchCriteriaId":"25DB8689-116F-49B5-91F5-BCBA8854BD42"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_5x:-:*:*:*:*:*:*:*","matchCriteriaId":"881D2748-D79A-491F-97AA-BB83BBDFD348"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_6:-:*:*:*:*:*:*:*","matchCriteriaId":"065B6512-4BB7-4A7D-B5C8-61E27B07D588"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_6p:-:*:*:*:*:*:*:*","matchCriteriaId":"A988DE0D-BFF2-453E-B502-A53F7976145A"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_9:-:*:*:*:*:*:*:*","matchCriteriaId":"1018566D-5DBE-44BD-BA05-1F6A6375C32F"},{"vulnerable":false,"criteria":"cpe:2.3:h:google:nexus_player:-:*:*:*:*:*:*:*","matchCriteriaId":"C28515A5-7911-40B0-971D-9F593142170E"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93326","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6685","sourceIdentifier":"security@android.com","published":"2016-10-10T11:00:02.480","lastModified":"2026-06-17T00:51:35.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Android before 2016-10-05 on Nexus 6P devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30402628."},{"lang":"es","value":"El kernel en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 6P permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30402628."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93326","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6686","sourceIdentifier":"security@android.com","published":"2016-10-10T11:00:03.387","lastModified":"2026-06-17T00:51:35.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30163101."},{"lang":"es","value":"El generador de perfiles de NVIDIA en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 9 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30163101."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93324","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6687","sourceIdentifier":"security@android.com","published":"2016-10-10T11:00:04.450","lastModified":"2026-06-17T00:51:35.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30162222."},{"lang":"es","value":"El generador de perfiles de NVIDIA en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 9 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30162222."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93324","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6688","sourceIdentifier":"security@android.com","published":"2016-10-10T11:00:05.357","lastModified":"2026-06-17T00:51:36.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30593080."},{"lang":"es","value":"El generador de perfiles de NVIDIA en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 9 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30593080."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93324","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-6689","sourceIdentifier":"security@android.com","published":"2016-10-10T11:00:06.277","lastModified":"2026-06-17T00:51:36.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30768347."},{"lang":"es","value":"El enlazador en el kernel en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30768347."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93323","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40515/","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40515/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6690","sourceIdentifier":"security@android.com","published":"2016-10-10T11:00:07.277","lastModified":"2026-06-17T00:51:36.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attackers to cause a denial of service (reboot) via a crafted application, aka internal bug 28838221."},{"lang":"es","value":"El controlador de sonido en el kernel en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 5, Nexus 5X, Nexus 6, Nexus 6P y Nexus Player permite a atacantes provocar una denegación de servicio (reinicio) a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 28838221."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"595E33EF-6B21-425B-929C-6B883FA50081"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93301","source":"security@android.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://source.android.com/security/bulletin/2016-10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-5325","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T16:59:00.200","lastModified":"2026-06-17T00:49:13.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en la función ServerResponse#writeHead en Node.js 0.10.x en versiones anteriores a 0.10.47, 0.12.x en versiones anteriores a 0.12.16, 4.x en versiones anteriores a 4.6.0 y 6.x en versiones anteriores a 6.7.0 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de separación de respuesta HTTP a través del argumento de la razón."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-113"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0390D600-532D-4675-95BB-10EC4E06F3E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"35AAF7CD-9AE6-4A4B-858E-4B17031BD058"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5DCB6010-AC31-4B61-9DA6-E119ADC5D70B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E5364365-36F1-49C0-BF8D-2D5054BC7B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0740684D-989A-4957-8AC1-AAB01A04E393"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"08C97202-6AEC-4B8D-B3F6-49F6AEF9CFD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7EFA073A-9AC2-4162-9DDA-B6CD0AE53D3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4F8FD4B3-D515-486A-94A3-29CBDA2E25CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"55E18631-9502-42CC-A85A-EA5742FDC317"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4CCBC213-1524-4C88-9EB3-52E003070A3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C928FB55-2F33-4458-8484-4010AE8883A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5CEEFA5F-2B32-4CA0-84AD-E0ECA0F81078"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4754B0A8-A7D7-41A1-BFE5-10D84E7CEC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D132104E-163C-47EE-B247-578D64AC88D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4E208FB1-A772-4002-BD56-3360BDDFEF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"14BE6C0B-E6EC-4CD2-912B-45DE9F94BA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"714EBE27-F0D0-4B2E-90E1-4C73DF7FAA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0BE8859F-1EBE-4B9A-A5ED-7FA63D68C947"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1249AA75-5676-4AFC-99B4-A59DC9BE1F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E875B302-1923-40AF-B956-A063714BBA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"10940F9C-6671-4C0D-89F9-6111A44FA74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"5F031F09-0AF1-4825-8C8C-AC5A65119E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C8F30-5B76-49D6-95C2-E62FC34911EC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF2E637C-EA49-4DB6-B4D5-B4684A9549C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"C1966CED-11A1-4328-A57E-308BE5E4CCD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A9F46AD2-BB74-4391-8A4F-7BE49EF41F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"EC36E36A-9592-49DA-AACE-B3638FC55F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"B98E9F42-08BC-49B5-90C8-AC3EA7960C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"ABA37EF5-DF97-467B-9A56-1611345387FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"5F0BD0C1-2294-4AFB-B4AE-C81576FB9AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"4057D560-81EE-49ED-888C-89560DBE3348"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87810E1-BDAD-455D-82E3-334CC102AB2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"8BC00B3A-3C9D-4487-9686-775CBAA1CC42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"7C0A4F5B-4546-414C-A209-07C27ED1C944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"2515087F-B272-4B76-99F4-ACA0C2460046"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"0C7016DE-A3A5-450B-9FBD-2C98A07FF3C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"8C1848A7-E68E-4CB4-B73C-C5200ABAC9DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"59F861AB-574A-41BF-8E2D-6440B35C2AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.15:*:*:*:*:*:*:*","matchCriteriaId":"41C8CEF8-49E1-4CB0-837B-E85C76BF9DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.16:*:*:*:*:*:*:*","matchCriteriaId":"8C7101A5-FDC9-4897-B8E8-6A07790D42A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.16-isaacs-manual:*:*:*:*:*:*:*","matchCriteriaId":"F7776F01-29AC-4161-9C91-C7392C6A356E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.17:*:*:*:*:*:*:*","matchCriteriaId":"3CADD766-8328-4669-BE66-A4757D5FB471"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.18:*:*:*:*:*:*:*","matchCriteriaId":"AD9792E9-2593-46B4-9633-E2F2DB11106B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.19:*:*:*:*:*:*:*","matchCriteriaId":"FF209248-8921-419A-86EB-30E7095E4514"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.20:*:*:*:*:*:*:*","matchCriteriaId":"2C0D6C34-E046-40BD-907D-0E2510C09A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.21:*:*:*:*:*:*:*","matchCriteriaId":"E5CBB83F-19AD-44BD-B7D4-19C1A8F80011"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.22:*:*:*:*:*:*:*","matchCriteriaId":"D6E2EA97-156D-4870-8967-78E4ED6EF64F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.23:*:*:*:*:*:*:*","matchCriteriaId":"54961BCA-8730-4B40-8385-41F6D65797F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.24:*:*:*:*:*:*:*","matchCriteriaId":"B22FA598-E613-4652-92CD-237F749D13DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.25:*:*:*:*:*:*:*","matchCriteriaId":"B4F321AF-FCC7-456D-AFE2-2CEF9CBAFCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.26:*:*:*:*:*:*:*","matchCriteriaId":"18F2EC65-2A47-4C45-8D58-63D18443B767"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.27:*:*:*:*:*:*:*","matchCriteriaId":"D0517A28-70F9-4947-BEF0-9CC645388BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.28:*:*:*:*:*:*:*","matchCriteriaId":"C5DD5BBD-922E-4026-9DEC-98CF9411CE95"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.29:*:*:*:*:*:*:*","matchCriteriaId":"63E078BA-8BDC-47EB-84B9-09B785FD1213"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.30:*:*:*:*:*:*:*","matchCriteriaId":"4B9971A7-1C18-43C0-97BC-27096609EFC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.31:*:*:*:*:*:*:*","matchCriteriaId":"0EA5107B-4347-4D43-ADA6-141527A40333"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.32:*:*:*:*:*:*:*","matchCriteriaId":"0C679CFA-50D4-430B-B372-113CE236EACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.33:*:*:*:*:*:*:*","matchCriteriaId":"F7AA6FEE-C630-4545-BCCF-3C211461C6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.34:*:*:*:*:*:*:*","matchCriteriaId":"682E8A32-1F1E-4427-BAD8-58596F85F170"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.35:*:*:*:*:*:*:*","matchCriteriaId":"C9827EF0-E340-4A75-9735-F20CDF09CA42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.36:*:*:*:*:*:*:*","matchCriteriaId":"E6C02C09-D738-45B1-BF6F-A4499E5F8D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.37:*:*:*:*:*:*:*","matchCriteriaId":"EE85CACC-842F-46C7-966D-48E866055A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.38:*:*:*:*:*:*:*","matchCriteriaId":"771BCA5F-B762-4569-AB46-08A13A4EFD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.39:*:*:*:*:*:*:*","matchCriteriaId":"21E05024-3647-456D-A731-D19411FED2DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.40:*:*:*:*:*:*:*","matchCriteriaId":"89929EB1-D723-496B-A7C6-4B4CD9C176B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.41:*:*:*:*:*:*:*","matchCriteriaId":"D3EA4652-EF0E-414C-AEB8-AEFE788B66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.42:*:*:*:*:*:*:*","matchCriteriaId":"BB746835-B498-4217-B909-69C597AD9431"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.43:*:*:*:*:*:*:*","matchCriteriaId":"B759B4D1-90E2-4BB6-B38E-F7FBA7620B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.44:*:*:*:*:*:*:*","matchCriteriaId":"898AD4C5-4B93-453D-AAE3-C04FE6486C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.45:*:*:*:*:*:*:*","matchCriteriaId":"87401457-F8C1-4372-8B71-694D2B35CCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.46:*:*:*:*:*:*:*","matchCriteriaId":"72552CF7-31C4-48D2-9028-03F71CEC9BEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"BC9002F9-87C4-4C7F-9BD9-430EB15CD4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"21EF734D-9E6B-4E01-9AFE-C0B847D583A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.2:*:*:*:*:*:*:*","matchCriteriaId":"12606C39-6F39-4DDF-9B36-A160875B265F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.3:*:*:*:*:*:*:*","matchCriteriaId":"EC4D8789-33C3-498A-857D-CC6576732C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.4:*:*:*:*:*:*:*","matchCriteriaId":"466E8851-6BE7-4716-AB16-3E985411C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.5:*:*:*:*:*:*:*","matchCriteriaId":"E5C4DB21-F35A-4567-8B04-85DB3089CDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.6:*:*:*:*:*:*:*","matchCriteriaId":"BA7E7436-117A-4F79-BA7A-2A0059BB9694"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.7:*:*:*:*:*:*:*","matchCriteriaId":"037511C2-3FA9-4A4C-996B-A1462C221DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.8:*:*:*:*:*:*:*","matchCriteriaId":"65EEB1B9-2E75-46F4-B70C-94991D38B427"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.9:*:*:*:*:*:*:*","matchCriteriaId":"0E5C5750-10F3-45D7-AC9B-7EA06F4B3887"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"75621360-0F11-42A1-95D5-5DC637DA81EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.11:*:*:*:*:*:*:*","matchCriteriaId":"A46C3701-CD93-4F50-8307-998499B5909B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.12:*:*:*:*:*:*:*","matchCriteriaId":"4DCC0D52-5473-4794-BB66-4CA32FEC074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.13:*:*:*:*:*:*:*","matchCriteriaId":"176B1165-2665-4541-9248-851996A22FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.14:*:*:*:*:*:*:*","matchCriteriaId":"5639B573-4A05-4F5E-BA10-9A3D757F0F8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.15:*:*:*:*:*:*:*","matchCriteriaId":"6544D0F7-4026-4E2C-85D1-FEE9564E8022"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A53CB0E-3FBA-4796-BC81-6003A7DC29DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4F3F415-CD69-4E19-A4F9-3673D2907932"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"758E9981-966B-4BB5-8982-183683C76228"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BD05686C-E548-43CB-81C1-5AE3E3E5ECBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5D1FAA74-207E-4E37-90F7-75202ED64E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F747352F-DFE4-45C3-9806-CBDC1E4A64E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1E144BC9-0D69-4C9B-9AF0-D7730F1719EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"82EA5976-2268-4FF3-BE6A-5680D45073E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E85F98DB-A43D-47C0-B271-0E25DCF0EA65"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"94E82A49-5897-43D4-8EF7-F743B8B909E2"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0002.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/93483","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2016:2101","source":"cve@mitre.org"},{"url":"https://github.com/nodejs/node/commit/c0f13e56a20f9bde5a67d873a7f9564487160762","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-43","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:2101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/nodejs/node/commit/c0f13e56a20f9bde5a67d873a7f9564487160762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-43","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7099","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T16:59:01.277","lastModified":"2026-06-17T00:52:35.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate."},{"lang":"es","value":"La función tls.checkServerIdentity en Node.js 0.10.x en versiones anteriores a 0.10.47, 0.12.x en versiones anteriores a 0.12.16, 4.x en versiones anteriores a 4.6.0 y 6.x en versiones anteriores a 6.7.0 no maneja adecuadamente comodines en los campos de nombres de certificados X.509, lo que permite a atacantes man-in-the-middle suplantar servidores a través de un certificado manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF2E637C-EA49-4DB6-B4D5-B4684A9549C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"C1966CED-11A1-4328-A57E-308BE5E4CCD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A9F46AD2-BB74-4391-8A4F-7BE49EF41F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"EC36E36A-9592-49DA-AACE-B3638FC55F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"B98E9F42-08BC-49B5-90C8-AC3EA7960C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"ABA37EF5-DF97-467B-9A56-1611345387FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"5F0BD0C1-2294-4AFB-B4AE-C81576FB9AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"4057D560-81EE-49ED-888C-89560DBE3348"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87810E1-BDAD-455D-82E3-334CC102AB2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"8BC00B3A-3C9D-4487-9686-775CBAA1CC42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"7C0A4F5B-4546-414C-A209-07C27ED1C944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"2515087F-B272-4B76-99F4-ACA0C2460046"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"0C7016DE-A3A5-450B-9FBD-2C98A07FF3C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"8C1848A7-E68E-4CB4-B73C-C5200ABAC9DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"59F861AB-574A-41BF-8E2D-6440B35C2AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.15:*:*:*:*:*:*:*","matchCriteriaId":"41C8CEF8-49E1-4CB0-837B-E85C76BF9DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.16:*:*:*:*:*:*:*","matchCriteriaId":"8C7101A5-FDC9-4897-B8E8-6A07790D42A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.16-isaacs-manual:*:*:*:*:*:*:*","matchCriteriaId":"F7776F01-29AC-4161-9C91-C7392C6A356E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.17:*:*:*:*:*:*:*","matchCriteriaId":"3CADD766-8328-4669-BE66-A4757D5FB471"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.18:*:*:*:*:*:*:*","matchCriteriaId":"AD9792E9-2593-46B4-9633-E2F2DB11106B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.19:*:*:*:*:*:*:*","matchCriteriaId":"FF209248-8921-419A-86EB-30E7095E4514"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.20:*:*:*:*:*:*:*","matchCriteriaId":"2C0D6C34-E046-40BD-907D-0E2510C09A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.21:*:*:*:*:*:*:*","matchCriteriaId":"E5CBB83F-19AD-44BD-B7D4-19C1A8F80011"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.22:*:*:*:*:*:*:*","matchCriteriaId":"D6E2EA97-156D-4870-8967-78E4ED6EF64F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.23:*:*:*:*:*:*:*","matchCriteriaId":"54961BCA-8730-4B40-8385-41F6D65797F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.24:*:*:*:*:*:*:*","matchCriteriaId":"B22FA598-E613-4652-92CD-237F749D13DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.25:*:*:*:*:*:*:*","matchCriteriaId":"B4F321AF-FCC7-456D-AFE2-2CEF9CBAFCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.26:*:*:*:*:*:*:*","matchCriteriaId":"18F2EC65-2A47-4C45-8D58-63D18443B767"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.27:*:*:*:*:*:*:*","matchCriteriaId":"D0517A28-70F9-4947-BEF0-9CC645388BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.28:*:*:*:*:*:*:*","matchCriteriaId":"C5DD5BBD-922E-4026-9DEC-98CF9411CE95"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.29:*:*:*:*:*:*:*","matchCriteriaId":"63E078BA-8BDC-47EB-84B9-09B785FD1213"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.30:*:*:*:*:*:*:*","matchCriteriaId":"4B9971A7-1C18-43C0-97BC-27096609EFC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.31:*:*:*:*:*:*:*","matchCriteriaId":"0EA5107B-4347-4D43-ADA6-141527A40333"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.32:*:*:*:*:*:*:*","matchCriteriaId":"0C679CFA-50D4-430B-B372-113CE236EACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.33:*:*:*:*:*:*:*","matchCriteriaId":"F7AA6FEE-C630-4545-BCCF-3C211461C6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.34:*:*:*:*:*:*:*","matchCriteriaId":"682E8A32-1F1E-4427-BAD8-58596F85F170"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.35:*:*:*:*:*:*:*","matchCriteriaId":"C9827EF0-E340-4A75-9735-F20CDF09CA42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.36:*:*:*:*:*:*:*","matchCriteriaId":"E6C02C09-D738-45B1-BF6F-A4499E5F8D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.37:*:*:*:*:*:*:*","matchCriteriaId":"EE85CACC-842F-46C7-966D-48E866055A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.38:*:*:*:*:*:*:*","matchCriteriaId":"771BCA5F-B762-4569-AB46-08A13A4EFD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.39:*:*:*:*:*:*:*","matchCriteriaId":"21E05024-3647-456D-A731-D19411FED2DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.40:*:*:*:*:*:*:*","matchCriteriaId":"89929EB1-D723-496B-A7C6-4B4CD9C176B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.41:*:*:*:*:*:*:*","matchCriteriaId":"D3EA4652-EF0E-414C-AEB8-AEFE788B66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.42:*:*:*:*:*:*:*","matchCriteriaId":"BB746835-B498-4217-B909-69C597AD9431"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.43:*:*:*:*:*:*:*","matchCriteriaId":"B759B4D1-90E2-4BB6-B38E-F7FBA7620B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.44:*:*:*:*:*:*:*","matchCriteriaId":"898AD4C5-4B93-453D-AAE3-C04FE6486C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.45:*:*:*:*:*:*:*","matchCriteriaId":"87401457-F8C1-4372-8B71-694D2B35CCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.10.46:*:*:*:*:*:*:*","matchCriteriaId":"72552CF7-31C4-48D2-9028-03F71CEC9BEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A53CB0E-3FBA-4796-BC81-6003A7DC29DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4F3F415-CD69-4E19-A4F9-3673D2907932"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"758E9981-966B-4BB5-8982-183683C76228"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BD05686C-E548-43CB-81C1-5AE3E3E5ECBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5D1FAA74-207E-4E37-90F7-75202ED64E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F747352F-DFE4-45C3-9806-CBDC1E4A64E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1E144BC9-0D69-4C9B-9AF0-D7730F1719EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"82EA5976-2268-4FF3-BE6A-5680D45073E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E85F98DB-A43D-47C0-B271-0E25DCF0EA65"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"94E82A49-5897-43D4-8EF7-F743B8B909E2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"BC9002F9-87C4-4C7F-9BD9-430EB15CD4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"21EF734D-9E6B-4E01-9AFE-C0B847D583A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.2:*:*:*:*:*:*:*","matchCriteriaId":"12606C39-6F39-4DDF-9B36-A160875B265F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.3:*:*:*:*:*:*:*","matchCriteriaId":"EC4D8789-33C3-498A-857D-CC6576732C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.4:*:*:*:*:*:*:*","matchCriteriaId":"466E8851-6BE7-4716-AB16-3E985411C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.5:*:*:*:*:*:*:*","matchCriteriaId":"E5C4DB21-F35A-4567-8B04-85DB3089CDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.6:*:*:*:*:*:*:*","matchCriteriaId":"BA7E7436-117A-4F79-BA7A-2A0059BB9694"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.7:*:*:*:*:*:*:*","matchCriteriaId":"037511C2-3FA9-4A4C-996B-A1462C221DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.8:*:*:*:*:*:*:*","matchCriteriaId":"65EEB1B9-2E75-46F4-B70C-94991D38B427"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.9:*:*:*:*:*:*:*","matchCriteriaId":"0E5C5750-10F3-45D7-AC9B-7EA06F4B3887"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"75621360-0F11-42A1-95D5-5DC637DA81EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.11:*:*:*:*:*:*:*","matchCriteriaId":"A46C3701-CD93-4F50-8307-998499B5909B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.12:*:*:*:*:*:*:*","matchCriteriaId":"4DCC0D52-5473-4794-BB66-4CA32FEC074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.13:*:*:*:*:*:*:*","matchCriteriaId":"176B1165-2665-4541-9248-851996A22FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.14:*:*:*:*:*:*:*","matchCriteriaId":"5639B573-4A05-4F5E-BA10-9A3D757F0F8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:0.12.15:*:*:*:*:*:*:*","matchCriteriaId":"6544D0F7-4026-4E2C-85D1-FEE9564E8022"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0390D600-532D-4675-95BB-10EC4E06F3E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"35AAF7CD-9AE6-4A4B-858E-4B17031BD058"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5DCB6010-AC31-4B61-9DA6-E119ADC5D70B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E5364365-36F1-49C0-BF8D-2D5054BC7B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0740684D-989A-4957-8AC1-AAB01A04E393"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"08C97202-6AEC-4B8D-B3F6-49F6AEF9CFD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7EFA073A-9AC2-4162-9DDA-B6CD0AE53D3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4F8FD4B3-D515-486A-94A3-29CBDA2E25CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"55E18631-9502-42CC-A85A-EA5742FDC317"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4CCBC213-1524-4C88-9EB3-52E003070A3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C928FB55-2F33-4458-8484-4010AE8883A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5CEEFA5F-2B32-4CA0-84AD-E0ECA0F81078"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4754B0A8-A7D7-41A1-BFE5-10D84E7CEC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D132104E-163C-47EE-B247-578D64AC88D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4E208FB1-A772-4002-BD56-3360BDDFEF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"14BE6C0B-E6EC-4CD2-912B-45DE9F94BA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"714EBE27-F0D0-4B2E-90E1-4C73DF7FAA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0BE8859F-1EBE-4B9A-A5ED-7FA63D68C947"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1249AA75-5676-4AFC-99B4-A59DC9BE1F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E875B302-1923-40AF-B956-A063714BBA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"10940F9C-6671-4C0D-89F9-6111A44FA74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"5F031F09-0AF1-4825-8C8C-AC5A65119E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C8F30-5B76-49D6-95C2-E62FC34911EC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0002.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/93191","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/nodejs/node/commit/743f0c916469f3129dfae406fa104dc46782e20b","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/nodejs/node/commit/743f0c916469f3129dfae406fa104dc46782e20b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7423","sourceIdentifier":"secalert@redhat.com","published":"2016-10-10T16:59:02.340","lastModified":"2026-06-17T00:53:02.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors involving MPTSASRequest objects."},{"lang":"es","value":"La función mptsas_process_scsi_io_request en QEMU (también conocido como Quick Emulator), cuando se construye con soporte de emulación LSI SAS1068 Host Bus, permite a administradores locales del SO invitado provocar una denegación de servicio (escritura fuera de límites y caída del proceso QUEMU) a través de vectores involucrando objetos MPTSASRequest."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"F83E2010-6463-407A-928D-DB71A705A04C"}]}]}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=670e56d3ed2918b3861d9216f2c0540d9e9ae0d5","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/11","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/5","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92997","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376776","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg03604.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=670e56d3ed2918b3861d9216f2c0540d9e9ae0d5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg03604.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201611-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-8100","sourceIdentifier":"secure@intel.com","published":"2016-10-10T16:59:03.577","lastModified":"2026-06-17T00:53:58.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via a side-channel attack."},{"lang":"es","value":"Intel Integrated Performance Primitives (también conocido como IPP) Cryptography en versiones anteriores a 9.0.4 hace más fácil para los usuarios locales descubrir las claves privadas RSA a través un ataque de canal lateral."}],"affected":[{"source":"secure@intel.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.3","matchCriteriaId":"955708C3-A669-4AB7-8DCD-E620775EF331"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93484","source":"secure@intel.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00060&languageid=en-fr","source":"secure@intel.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/93484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00060&languageid=en-fr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1000126","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:00.173","lastModified":"2026-06-17T00:38:43.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin admin-font-editor v1.8"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress admin-font-editor v1.8"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:admin-font-editor_project:admin-font-editor:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.8","matchCriteriaId":"1F67508D-B9E7-41E7-942F-12F32C67044E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93896","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=526","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/admin-font-editor","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/admin-font-editor","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000127","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:01.563","lastModified":"2026-06-17T00:38:43.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin ajax-random-post v2.00"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress ajax-random-post v2.00"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajax-random-post_project:ajax-random-post:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"2.00","matchCriteriaId":"B2D341FB-F4E7-4E48-94F7-01B9C6B3CCCF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93895","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=494","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/ajax-random-post","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/ajax-random-post","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000128","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:03.000","lastModified":"2026-06-17T00:38:43.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin anti-plagiarism v3.60"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress anti-plagiarism v3.60"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anti-plagiarism_project:anti-plagiarism:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"3.60","matchCriteriaId":"D1BA483E-B910-46D8-9530-2F8331E8F32E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93890","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=161","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/anti-plagiarism","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/anti-plagiarism","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000129","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:04.080","lastModified":"2026-06-17T00:38:43.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin defa-online-image-protector v3.3"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress defa-online-image-protector v3.3"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:defa-online-image-protector_project:defa-online-image-protector:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"3.3","matchCriteriaId":"646FB682-0CE9-405C-A2A5-5090BCB7E498"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93892","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=449","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/defa-online-image-protector","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/defa-online-image-protector","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000130","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:05.220","lastModified":"2026-06-17T00:38:44.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin e-search v1.0"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress e-search v1.0"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-search_project:e-search:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"CC61401E-1C2B-4A68-9FA8-42310EFAB96F"}]}]}],"references":[{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=394","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/e-search","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/e-search","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000131","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:06.457","lastModified":"2026-06-17T00:38:44.170","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin e-search v1.0"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress e-search v1.0"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-search_project:esearch:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"C6496895-51C8-408F-876B-191ED73BC472"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93867","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=393","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/e-search","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/e-search","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000132","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:07.783","lastModified":"2026-06-17T00:38:44.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress enhanced-tooltipglossary v3.2.8"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cminds:tooltip_glossary:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"3.2.8","matchCriteriaId":"88F39E1F-A37D-4FD9-AC0A-9A8790CE9862"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93865","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=37","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/enhanced-tooltipglossary","source":"cve@mitre.org","tags":["Patch","Product"]},{"url":"http://www.securityfocus.com/bid/93865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/enhanced-tooltipglossary","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Product"]}]}},{"cve":{"id":"CVE-2016-1000133","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:09.080","lastModified":"2026-06-17T00:38:44.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress forget-about-shortcode-buttons v1.1.1"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:designsandcode:forget_about_shortcode_buttons:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"84E51A78-8A07-4D7A-827D-3A62FD72960C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93869","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=602","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/forget-about-shortcode-buttons","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/93869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/forget-about-shortcode-buttons","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2016-1000134","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:10.190","lastModified":"2026-06-17T00:38:44.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin hdw-tube v1.2"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress hdw-tube v1.2"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hdw-tube_project:hdw-tube:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.2","matchCriteriaId":"4C6099C6-038F-43AA-98CC-381F602D3550"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93868","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=530","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/hdw-tube","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/hdw-tube","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000135","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:11.313","lastModified":"2026-06-17T00:38:44.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin hdw-tube v1.2"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress hdw-tube v1.2"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hdw-tube_project:hdw-tube:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.2","matchCriteriaId":"4C6099C6-038F-43AA-98CC-381F602D3550"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93820","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=533","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/hdw-tube","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/hdw-tube","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000136","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:12.517","lastModified":"2026-06-17T00:38:44.767","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin heat-trackr v1.0"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress heat-trackr v1.0"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heat-trackr_project:heat-trackr:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"AC415F38-114D-4119-B590-61A1C04DFDF4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93818","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=798","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/heat-trackr","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/heat-trackr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000137","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:13.550","lastModified":"2026-06-17T00:38:44.883","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin hero-maps-pro v2.1.0"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress hero-maps-pro v2.1.0"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hero-maps-pro_project:hero-maps-pro:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"2.1.0","matchCriteriaId":"8653889A-9699-40B0-B92B-31C638817AF6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93815","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=658","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/hero-maps-pro","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/hero-maps-pro","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000138","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:14.643","lastModified":"2026-06-17T00:38:45.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin indexisto v1.0.5"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress indexisto v1.0.5"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:indexisto_project:indexisto:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.0.5","matchCriteriaId":"0208FF6C-900E-4BC0-A0EA-06AA96361F30"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93816","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=38","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/indexisto","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=38","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/indexisto","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000139","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:15.753","lastModified":"2026-06-17T00:38:45.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin infusionsoft v1.5.11"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress infusionsoft v1.5.11"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infusionsoft_project:infusionsoft:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.5.11","matchCriteriaId":"C16B4B70-ADF1-4809-9FE6-65728EB022A5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93819","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=864","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/infusionsoft","source":"cve@mitre.org","tags":["Patch","Product"]},{"url":"http://www.securityfocus.com/bid/93819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/infusionsoft","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Product"]}]}},{"cve":{"id":"CVE-2016-1000140","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:17.003","lastModified":"2026-06-17T00:38:45.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin new-year-firework v1.1.9"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress new-year-firework v1.1.9"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:new-year-firework_project:new-year-firework:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"F0938CB0-8179-49B3-A10E-9BC4187DA840"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93817","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=453","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/new-year-firework","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/new-year-firework","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000141","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:18.097","lastModified":"2026-06-17T00:38:45.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin page-layout-builder v1.9.3"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress page-layout-builder v1.9.3"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:page-layout-builder_project:page-layout-builder:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.9.3","matchCriteriaId":"0A3814D7-2CC0-4E25-B31D-6E5C4C81BC6A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93804","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=358","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/page-layout-builder","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/93804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/page-layout-builder","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2016-1000142","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:19.300","lastModified":"2026-06-17T00:38:45.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin parsi-font v4.2.5"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress parsi-font v4.2.5"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parsi-font_project:parsi-font:4.2.5:*:*:*:*:wordpress:*:*","matchCriteriaId":"FEBF7276-2E5B-444D-833D-65AF2E53CD4C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93802","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=435","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/parsi-font","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/93802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/parsi-font","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2016-1000143","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:20.470","lastModified":"2026-06-17T00:38:45.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin photoxhibit v2.1.8"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress photoxhibit v2.1.8"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photoxhibit_project:photoxhibit:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"2.1.8","matchCriteriaId":"35BE1758-F89E-417B-940A-A2811C2FE523"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93803","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=780","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/photoxhibit","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/93803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/photoxhibit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2016-1000144","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:21.957","lastModified":"2026-06-17T00:38:45.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin photoxhibit v2.1.8"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress photoxhibit v2.1.8"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photoxhibit_project:photoxhibit:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"2.1.8","matchCriteriaId":"35BE1758-F89E-417B-940A-A2811C2FE523"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93585","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=778","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/photoxhibit","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/93585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/photoxhibit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2016-1000145","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:23.067","lastModified":"2026-06-17T00:38:45.833","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin pondol-carousel v1.0"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress pondol-carousel v1.0"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pondol-carousel_project:pondol-carousel:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"B7E86142-311C-4568-BB66-309FFFDBBE14"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93586","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=524","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/pondol-carousel","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/pondol-carousel","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000146","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:24.160","lastModified":"2026-06-17T00:38:45.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin pondol-formmail v1.1"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress pondol-formmail v1.1"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pondol-formmail_project:pondol-formmail:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.1","matchCriteriaId":"37D7FB1E-8DC0-4732-8879-17C3FFD6E887"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93584","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=787","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/pondol-formmail","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/pondol-formmail","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000147","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:25.190","lastModified":"2026-06-17T00:38:46.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin recipes-writer v1.0.4"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress recipes-writer v1.0.4"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recipes-writer_project:recipes-writer:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"C1BD97F6-28E5-4EA8-8619-930A9BE324AC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93589","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=380","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/recipes-writer","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/recipes-writer","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000148","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:26.567","lastModified":"2026-06-17T00:38:46.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin s3-video v0.983"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress s3-video v0.983"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s3-video_project:s3-video:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"0.983","matchCriteriaId":"332F9BD7-3639-48B7-8135-65201D17B2F8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93583","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=240","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/s3-video","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/s3-video","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000149","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:27.567","lastModified":"2026-06-17T00:38:46.303","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin simpel-reserveren v3.5.2"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress simpel-reserveren v3.5.2"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simpel-reserveren_project:simpel-reserveren:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"3.5.2","matchCriteriaId":"1D996FBB-4B8B-41CF-AD9E-EA53F77E85DA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93582","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=474","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/simpel-reserveren","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/simpel-reserveren","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000150","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:28.643","lastModified":"2026-06-17T00:38:46.420","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin simplified-content v1.0.0"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress simplified-content v1.0.0"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oxil:simplified-content:1.0.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"E191169C-08C8-4E79-9AD0-47CDBD47D10F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93581","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=853","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/simplified-content","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/93581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/simplified-content","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2016-1000151","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:29.613","lastModified":"2026-06-17T00:38:46.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin tera-charts v1.0"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress tera-charts v1.0"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tera-charts_project:tera-charts:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"511AF279-FC38-465F-AFB0-649EEA810B09"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93580","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=455","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/tera-charts","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/tera-charts","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000152","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:30.673","lastModified":"2026-06-17T00:38:46.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin tidio-form v1.0"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress tidio-form v1.0"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tidio-form_project:tidio-form:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"A260441F-F1DD-4DEB-959A-68B138DF045E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93579","source":"cve@mitre.org","tags":["Technical Description","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=799","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/tidio-form","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/tidio-form","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000153","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:31.877","lastModified":"2026-06-17T00:38:46.777","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin tidio-gallery v1.1"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress tidio-gallery v1.1"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tidio-gallery_project:tidio-gallery:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.1","matchCriteriaId":"1708BC39-8C41-46EC-B10E-86C8FC8C331E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93543","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=427","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/tidio-gallery","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/93543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/tidio-gallery","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2016-1000154","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:32.940","lastModified":"2026-06-17T00:38:46.900","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin whizz v1.0.7"},{"lang":"es","value":"XSS reflejado en el plugin de wordpress whizz v1.0.7"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:browserweb:whizz:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.0.7","matchCriteriaId":"A21C55AE-FE91-41C0-8331-6264579D8DD2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93538","source":"cve@mitre.org"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=112","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/whizz","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/93538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/whizz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2016-1000155","sourceIdentifier":"cve@mitre.org","published":"2016-10-10T20:59:33.940","lastModified":"2026-06-17T00:38:47.017","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Reflected XSS in wordpress plugin wpsolr-search-engine v7.6"},{"lang":"es","value":"Vulnerabilidad de XSS reflejada en el plugin de wordpress wpsolr-search-engine v7.6"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wpsolr:wpsolr-search-engine:7.6:*:*:*:*:wordpress:*:*","matchCriteriaId":"B1886D53-2082-4B43-B32D-2BE11BDF2A30"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93536","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=303","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/wpsolr-search-engine","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/93536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vapidlabs.com/wp/wp_advisory.php?v=303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/wpsolr-search-engine","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2016-7959","sourceIdentifier":"cve@mitre.org","published":"2016-10-13T10:59:00.143","lastModified":"2026-06-17T00:53:50.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information by leveraging access to a file and conducting a brute-force attack."},{"lang":"es","value":"Siemens SIMATIC STEP 7 (TIA Portal) en versiones anteriores a 14 almacena indebidamente los datos clave pre-compartidos en archivos de proyecto TIA, lo que hace más que sea más fácil para usuarios locales obtener información sensible aprovechando el acceso a un archivo y llevando a cabo un ataque de fuerza bruta."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*","versionEndIncluding":"13.010","matchCriteriaId":"86CBA385-0DE2-457E-906E-23526D8DD986"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/93551","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-869766.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-287-03","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/93551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-869766.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-287-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}